2025 CVEs (page 71)
Page 71 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68246 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connect… |
CVE-2025-68245 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: netpoll: fix incorrect refcount handling causing incorrect cleanup commit efa95b01da… | |
CVE-2025-68244 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD On completion of i915_… | |
CVE-2025-68243 | High | 7.0 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfs_match_client() If the TLS security policy is… |
CVE-2025-68242 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix LTP test failures when timestamps are delegated The utimes01 and utime06 tests f… | |
CVE-2025-68241 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe The sit driver's packe… |
CVE-2025-68240 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: avoid having an active sc_timer before freeing sci Because kthread_stop did not s… | |
CVE-2025-68239 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access before closing files opened by open_exec() bm_register_… | |
CVE-2025-68238 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dm… | |
CVE-2025-68237 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The "req.start" and "req.len" variable… | |
CVE-2025-68236 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) According to UFS spec… | |
CVE-2025-68235 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot nvkm_falcon_fw::boot is all… | |
CVE-2025-68234 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() If timestamp retriving… |
CVE-2025-68233 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Add call to put_pid() Add a call to put_pid() corresponding to get_task_pid()… | |
CVE-2025-68232 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: veth: more robust handing of race to avoid txq getting stuck Commit dc82a33297fc ("veth… |
CVE-2025-68231 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mm/mempool: fix poisoning order>0 pages with HIGHMEM The kernel test has reported: BUG… | |
CVE-2025-68230 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough On PF passthrough envi… | |
CVE-2025-68229 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() If the allocation of… | |
CVE-2025-68228 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix create_in_format_blob() return value create_in_format_blob() is either sup… | |
CVE-2025-68227 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix proto fallback detection with BPF The sockmap feature allows bpf syscall from… | |
CVE-2025-68226 | High | 8.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfids_invalidation_worker() The previous commit b… |
CVE-2025-68225 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: lib/test_kho: check if KHO is enabled We must check whether KHO is enabled prior to issui… | |
CVE-2025-68223 | Medium | 5.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to… |
CVE-2025-68222 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc s32_pinctrl_desc is allocate… | |
CVE-2025-68221 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr Fix inverted WARN_ON_ONCE conditi… | |
CVE-2025-68220 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error Make… | |
CVE-2025-68219 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix memory leak in smb3_fs_context_parse_param error path Add proper cleanup of ctx… | |
CVE-2025-68218 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partition scan work Blktests test cases nvme/014… |
CVE-2025-68217 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker - fix potential out-of-bounds access In the pegasus_notetaker dr… | |
CVE-2025-68216 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch… | |
CVE-2025-68215 | High | 7.0 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error path Improve the cleanup on releasing PTP… |
CVE-2025-68214 | Medium | 4.7 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition… |
CVE-2025-68213 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vport_config NULL pointer deref in remove Attempting to remove the dri… | |
CVE-2025-68212 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmount_string() In statmount_string(), most flags assi… |
CVE-2025-68211 | Medium | 5.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, sca… |
CVE-2025-68210 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompre… | |
CVE-2025-68209 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Currently, CQs without a completion function are as… | |
CVE-2025-68208 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth in widen_imprecise_scalars() The usage pat… |
CVE-2025-68207 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait for any Dead CT worker… |
CVE-2025-68206 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be… |
CVE-2025-68205 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver After restructuring and splitti… | |
CVE-2025-68204 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: scmi: Fix genpd leak on provider registration failure If of_genpd_add_prov… | |
CVE-2025-68202 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_state() For built with CONFIG_PREEMPT_RT=y… | |
CVE-2025-68201 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: remove two invalid BUG_ON()s Those can be triggered trivially by userspace. | |
CVE-2025-68200 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot found that cls_bpf_classify() is able to cha… | |
CVE-2025-68199 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext When… | |
CVE-2025-68198 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: crash: fix crashkernel resource shrink When crashkernel is configured with a high reserva… | |
CVE-2025-68197 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() With older FW, we may… | |
CVE-2025-68196 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Cache streams targeting link when performing LT automation [WHY] Last LT… | |
CVE-2025-68194 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: media: imon: make send_packet() more robust syzbot is reporting that imon has three probl… | |
CVE-2025-68193 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Add devm release action to safely tear down CT When a buffer object (BO) is a… | |
CVE-2025-68192 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Raw IP packets have n… |
CVE-2025-68191 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uses WARN/WARN_ON to… | |
CVE-2025-68190 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() kcal… | |
CVE-2025-68189 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj->resv != &obj… |
CVE-2025-68188 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Use RCU to avoid a pair… | |
CVE-2025-68187 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: mdio: Check regmap pointer returned by device_node_to_regmap() The call to device_no… | |
CVE-2025-68186 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up The funct… | |
CVE-2025-68185 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoreti… | |
CVE-2025-68184 | High | 7.1 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 ("drm/media… |
CVE-2025-68183 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when bo… |
CVE-2025-68182 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() This code frees "lin… |
CVE-2025-68181 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since the allocation of the drivers main struct… |
CVE-2025-68180 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odm_combine_segments When a connector is conne… | |
CVE-2025-68179 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP As reported by Luiz Capitulino enabling… |
CVE-2025-68178 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix possible deadlock while configuring policy Following deadlock can be trig… | |
CVE-2025-68177 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handle NULL policy in longhaul_exit longhaul_exit() was calling cpufreq… | |
CVE-2025-68176 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdns_pcie::ops before using it cdns_pcie::ops mi… | |
CVE-2025-68175 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix streaming cleanup on release The current implementation uncondi… |
CVE-2025-68174 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: enhance kfd process check in switch partition current switch partition only c… |
CVE-2025-68173 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix softlockup in ftrace_module_enable A soft lockup was observed when loading am… | |
CVE-2025-68172 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm The clock obtained via devm_clk_get_enabl… | |
CVE-2025-68171 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Sean reported [1] the following splat when r… |
CVE-2025-68170 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev Since the allocation of the drivers main s… |
CVE-2025-68169 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix deadlock in memory allocation under spinlock Fix a AA deadlock in refill_skb… | |
CVE-2025-68168 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction manager The transaction manager initializ… |
CVE-2025-68167 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs If the memory allocation in gpiolib_seq_st… |
CVE-2025-40363 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in AH output Fix field-spanning memcpy warni… | |
CVE-2025-40362 | High | 8.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix multifs mds auth caps issue The mds auth caps check should also validate the fs… |
CVE-2025-40360 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_re… | |
CVE-2025-40359 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds warning When running "perf mem record" com… | |
CVE-2025-40358 | High | 7.1 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a ta… |
CVE-2025-40357 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_diag_dump The syzbot report a crash: Oo… | |
CVE-2025-40356 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dma_map_single() call for getting the DM… |
CVE-2025-40355 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: sysfs: check visibility before changing group attribute ownership Since commit 0c17270f9b… | |
CVE-2025-40354 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link->enc NULL pointer access [why] 1.)… |
CVE-2025-40353 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Do not warn if the page is already tagged in copy_highpage() The arm64 copy_h… | |
CVE-2025-40352 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init The lock-related… | |
CVE-2025-40351 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() The syzbot reported issue i… | |
CVE-2025-40350 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ XDP programs c… |
CVE-2025-40349 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplus_bmap_alloc hfsplus_bmap_alloc can trigger a crash… |
CVE-2025-40348 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts If two competing threads enter… | |
CVE-2025-40347 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock After applying the workaround for err0500… |
CVE-2025-40346 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() Fix incorrect u… | |
CVE-2025-65076 | Medium | 6.1 | 2025-12-16 | WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-pri… |
CVE-2025-65075 | Medium | 6.5 | 2025-12-16 | WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-pri… |
CVE-2025-65074 | High | 7.2 | 2025-12-16 | WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-pri… |
CVE-2025-14780 | Medium | 6.3 | 2025-12-16 | A vulnerability was detected in Xiongwei Smart Catering Cloud Platform 2.1.6446.28761. The affected element is an unknown function of the file /dishtrade/dish_… |
CVE-2025-14443 | Medium | 6.4 | 2025-12-16 | A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and pot… |
CVE-2025-13741 | Medium | 4.3 | 2025-12-16 | The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthoriz… |