2025 CVEs (page 42)
Page 42 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-47855 | Critical | 9.8 | 2026-01-13 | An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.2… |
CVE-2025-46685 | High | 7.5 | 2026-01-13 | Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged atta… |
CVE-2025-46684 | Medium | 6.6 | 2026-01-13 | Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged atta… |
CVE-2025-25652 | High | 7.5 | 2026-01-13 | In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal. |
CVE-2025-25249 | High | 8.1 | 2026-01-13 | A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 th… |
CVE-2025-25176 | Critical | 9.1 | 2026-01-13 | Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platfor… |
CVE-2025-71101 | High | 7.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing The hp_p… |
CVE-2025-71100 | High | 7.6 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() TID getting from ie… |
CVE-2025-71099 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() In xe_oa_add_config_ioctl(), we… |
CVE-2025-71098 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ip6_gre: make ip6gre_header() robust Over the years, syzbot found many ways to crash the… |
CVE-2025-71097 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects When a nextho… |
CVE-2025-71096 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly The netlink response for… |
CVE-2025-71095 | Critical | 9.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDP_TX action There is a crash issue when… |
CVE-2025-71094 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address fro… |
CVE-2025-71093 | Critical | 9.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000_tbi_should_accept() In e1000_tbi_should_accept() we read the last… |
CVE-2025-71092 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() Commit ef56081d1864 ("RDMA/bnxt_r… |
CVE-2025-71091 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in team_queue_override_port_prio_changed() There has bee… |
CVE-2025-71090 | High | 7.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() nfsd4_add_rdaccess_… |
CVE-2025-71089 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries for kerne… |
CVE-2025-71088 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simult-connect race lead… |
CVE-2025-71087 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavf_config_rss_reg() There are off-by-one bugs when confi… |
CVE-2025-71086 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device() collect… |
CVE-2025-71085 | High | 7.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kern… |
CVE-2025-71084 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while th… |
CVE-2025-71083 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for a BO to exist that i… |
CVE-2025-71082 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921dbd00c4e (… |
CVE-2025-71081 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF n… |
CVE-2025-71080 | High | 7.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT On PREEMPT_RT kernels, after rt6… |
CVE-2025-71079 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write A deadlock can… |
CVE-2025-71078 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit issue during SLB preload On systems using the hash MMU… |
CVE-2025-71077 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2_get_pcr_allocation() does not cap any upper limit f… |
CVE-2025-71076 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized allocations The OA open parameters did no… |
CVE-2025-71075 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fa… |
CVE-2025-71074 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: functionfs: fix the open/removal races ffs_epfile_open() can race with removal, ending up… |
CVE-2025-71073 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() schedules lk-… |
CVE-2025-71072 | High | 8.2 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures maple_tree insertions can fail if we are seriously… |
CVE-2025-71071 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the reference… |
CVE-2025-71070 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ublk: clean up user copy references on ublk server exit If a ublk server process releases… |
CVE-2025-71069 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: f2fs: invalidate dentry cache on failed whiteout creation F2FS can mount filesystems with… | |
CVE-2025-71068 | Critical | 9.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rq_pages index in inline path svc_rdma_copy_inline_range indexed rqs… |
CVE-2025-71067 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read boot_block when mounting When mounting, sb->s_blocksize… | |
CVE-2025-71066 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change … |
CVE-2025-71065 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock As Jiaming Zhang and syzbot reported, there is pote… | |
CVE-2025-71064 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the num_tqps in the vf driver to apply for resources Currently, hdev->ht… | |
CVE-2025-71027 | High | 7.5 | 2026-01-13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows a… |
CVE-2025-71026 | High | 7.5 | 2026-01-13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows… |
CVE-2025-71025 | High | 7.5 | 2026-01-13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allow… |
CVE-2025-71024 | High | 7.5 | 2026-01-13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function. This vulnerability all… |
CVE-2025-71023 | High | 7.5 | 2026-01-13 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function. This vulnerability allows atta… |
CVE-2025-70753 | High | 7.5 | 2026-01-13 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function. This vulnerability allows attackers t… |
CVE-2025-69992 | Critical | 9.8 | 2026-01-13 | phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identit… |
CVE-2025-69991 | Critical | 9.8 | 2026-01-13 | phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php. |
CVE-2025-69990 | Critical | 9.1 | 2026-01-13 | phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted. |
CVE-2025-68823 | Medium | 5.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such as udev) opens ublk… |
CVE-2025-68822 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3_register_work The dev3_register_work… |
CVE-2025-68821 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 ("fuse: allocate ff->release_arg… | |
CVE-2025-68820 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_inode_loc() fails (e… | |
CVE-2025-68819 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-cont… |
CVE-2025-68818 | High | 8.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" This reve… |
CVE-2025-68817 | Critical | 9.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurre… |
CVE-2025-68816 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string parameters Add validation for format string p… | |
CVE-2025-68815 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active list if it changes to strict Whenever a… |
CVE-2025-68814 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct… | |
CVE-2025-68813 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in __ip_vs_get_out_r… | |
CVE-2025-68811 | Critical | 9.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpag… |
CVE-2025-68810 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot Reject attempts to disa… |
CVE-2025-68809 | Critical | 9.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on m_flags in vfs_cache ksmbd maintains delete-on-close and pending-… |
CVE-2025-68808 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: initialize local pointers upon transfer of memory ownership vidtv_channel_s… |
CVE-2025-68807 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: block: fix race between wbt_enable_default and IO submission When wbt_enable_default() is… | |
CVE-2025-68806 | High | 7.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The smb2_set_… |
CVE-2025-68805 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request i… |
CVE-2025-68804 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding the driver… | |
CVE-2025-68803 | High | 8.0 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a na… |
CVE-2025-68802 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit num_syncs to prevent oversized allocations The exec and vm_bind ioctl allow… | |
CVE-2025-68801 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-after-free… |
CVE-2025-68800 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit a… |
CVE-2025-68799 | High | 8.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrml_receive() The cffrml_receive() function extracts a… |
CVE-2025-68798 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->events[idx] ca… | |
CVE-2025-68797 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: char: applicom: fix NULL pointer dereference in ac_ioctl Discovered by Atuin - Automated… | |
CVE-2025-68796 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in extent cache As syzbot reported: F2FS-f… | |
CVE-2025-68795 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operate… |
CVE-2025-68794 | Critical | 9.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomap_adjust_read_rang… |
CVE-2025-68793 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job->pasid access race in gpu recovery Avoid a possible UAF in GPU reco… |
CVE-2025-68792 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in name_size 'name_size' does not have any range… |
CVE-2025-68791 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: fuse: missing copy_finish in fuse-over-io-uring argument copies Fix a possible reference… | |
CVE-2025-68790 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCA_PORTS component Clear hca_devcom_comp in device's… | |
CVE-2025-68788 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotif… | |
CVE-2025-68787 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot reported a memory leak [1]. When function… | |
CVE-2025-68786 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals th… | |
CVE-2025-68785 | High | 7.1 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in push_nsh() action The push_nsh() act… |
CVE-2025-68784 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_setup_xattr_buf function can allocate a n… | |
CVE-2025-68783 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet indices get_meter_levels_from_urb() parse… | |
CVE-2025-68782 | High | 7.5 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_task_cdb fai… |
CVE-2025-68781 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The delayed w… | |
CVE-2025-68780 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: sched/deadline: only set free_cpus for online runqueues Commit 16b269436b72 ("sched/deadl… | |
CVE-2025-68779 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: _mlx5e_remove -> m… | |
CVE-2025-68778 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't log conflicting inode if it's a dir moved in the current transaction We can'… | |
CVE-2025-68777 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation The current validati… | |
CVE-2025-68776 | | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() prp_get_untagged_frame(… | |
CVE-2025-68775 | Critical | 9.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is… |