CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- linux, linux kernel +1 moreio_uring: fix multishot accept request leaks5.5 Medium
- linux, linux kernel +1 moreInput: iforce - invert valid length check when fetching device IDs5.5 Medium
- linux, linux kernel +1 morescsi: zfcp: Fix double free of FSF request when qdio send fails7.0 High
- linux, linux kernel +1 moremisc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()5.5 Medium
- linux, linux kernel +1 moreblk-cgroup: properly pin the parent in blkcg_css_online5.5 Medium
- linux, linux kernel +1 morex86/sgx: Add overflow check in sgx_validate_offset_length()5.5 Medium
- linux, linux kernel +1 moreperf/x86/amd/uncore: Fix memory leak for events array5.5 Medium
- linux, linux kernel +1 morex86/fpu: Drop fpregs lock before inheriting FPU permissions5.5 Medium
- linux, linux kernel +1 moreperf: Improve missing SIGTRAP checking5.5 Medium
- linux, linux kernel +1 moreperf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling4.7 Medium
- linux, linux kernel +1 morescsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()5.5 Medium
- linux, linux kernel +1 morekprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case7.8 High
- linux, linux kernel +1 morearm64/mm: fix incorrect file_map_count for non-leaf pmd/pud5.5 Medium
- linux, linux kernel +1 moreInput: i8042 - fix leaking of platform device on module removal5.5 Medium
- linux, linux kernel +1 moremacvlan: enforce a consistent minimal mtu5.5 Medium
- linux, linux kernel +1 moretcp: cdg: allow tcp_cdg_release() to be called multiple times7.8 High
- linux, linux kernel +1 moreALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()5.5 Medium
- linux, linux kernel +1 moredm ioctl: fix misbehavior if list_versions races with module loading4.7 Medium
- linux, linux kernel +1 moreceph: avoid putting the realm twice when decoding snaps fails9.8 Critical
- linux, linux kernel +1 moregfs2: Check sb_bsize_shift after reading superblock5.5 Medium
- linux, linux kernel +1 more9p: trans_fd/p9_conn_cancel: drop client lock earlier7.5 High
- linux, linux kernel +1 more9p/trans_fd: always use O_NONBLOCK read/write5.5 Medium
- linux, linux kernel +1 morenetlink: Bounds-check struct nlmsgerr creation5.5 Medium
- linux, linux kernel +1 morenet/9p: use a dedicated spinlock for trans_fd5.5 Medium
- linux, linux kernel +1 morebpf: Prevent bpf program recursion for raw tracepoint probes5.5 Medium
- linux, linux kernel +1 morentfs: fix use-after-free in ntfs_attr_find()7.8 High
- linux, linux kernel +1 morentfs: check overflow when iterating ATTR_RECORDs5.5 Medium
- linux, linux kernel +1 morenvmet: fix a memory leak5.5 Medium
- nvidia tensorrt-llmNVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an...8.8 High
- nvidia gpu display driver, vgpu software, cloud gamingNVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged...7.8 High
- adodbSQL injection in ADOdb PostgreSQL driver pg_insert_id() method10.0 Critical
- nvidia vgpu software, cloud gamingNVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager ...5.5 Medium
- elastic elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerability6.5 Medium
- elastic kibanaKibana Unrestricted Upload of File with Dangerous Type Can Lead to XSS5.4 Medium
- elastic kibanaKibana Unrestricted Upload of File4.3 Medium
- linux, linux kernel +1 morewifi: at76c50x: fix use after free access in at76_disconnect7.8 High
- linux, linux kernel +1 morewifi: mac80211: Purge vif txq in ieee80211_do_stop()5.5 Medium
- linux, linux kernel +1 moreASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()5.5 Medium
- debian linux, linux kernel +1 moreBluetooth: btrtl: Prevent potential NULL dereference5.5 Medium
- linux, linux kernel +1 moreethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()7.8 High
- debian linux, linux kernel +1 morenet: mctp: Set SOCK_RCU_FREE8.8 High
- debian linux, linux kernel +1 morenet: openvswitch: fix nested key length validation in the set() action7.8 High
- debian linux, linux kernel +1 morecxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path5.5 Medium
- linux, linux kernel +1 morenet: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered5.5 Medium
- linux, linux kernel +1 morenet: dsa: free routing table on probe failure7.8 High
- linux, linux kernel +1 morenet: ti: icss-iep: Fix possible NULL pointer dereference for perout request5.5 Medium
- linux, linux kernel +1 moredrm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check5.5 Medium
- debian linux, linux kernel +1 morei2c: cros-ec-tunnel: defer probe if parent EC is not present5.5 Medium
- debian linux, linux kernel +1 moreisofs: Prevent the use of too small fid7.1 High
- linux, linux kernel +1 morelib/iov_iter: fix to increase non slab folio refcount7.8 High
- Show moreLoading…