CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- hashicorp vault, vault enterprise +1 moreVault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login6.6 Medium
- linux, linux kernel +1 moreerofs: fix wrong kunmap when using LZMA on HIGHMEM platforms5.5 Medium
- linux, linux kernel +1 moreext4: fix another off-by-one fsmap error on 1k block filesystems5.5 Medium
- linux, linux kernel +1 moreice: copy last block omitted in ice_get_module_eeprom()7.8 High
- linux, linux kernel +1 moreila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()5.5 Medium
- linux, linux kernel +1 morenfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties5.5 Medium
- linux, linux kernel +1 morenet: caif: Fix use-after-free in cfusbl_device_notify()7.8 High
- linux, linux kernel +1 moreaf_unix: fix struct pid leaks in OOB support7.1 High
- linux, linux kernel +1 moreriscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode7.1 High
- linux, linux kernel +1 morebpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()5.5 Medium
- linux, linux kernel +1 moreSUNRPC: Fix a server shutdown leak5.5 Medium
- linux, linux kernel +1 morescsi: mpi3mr: Fix throttle_groups memory leak5.5 Medium
- linux, linux kernel +1 morescsi: mpi3mr: Fix expander node leak in mpi3mr_remove()5.5 Medium
- linux, linux kernel +1 morenet: usb: smsc75xx: Limit packet length to skb->len5.5 Medium
- linux, linux kernel +1 morePCI: s390: Fix use-after-free of PCI resources with per-function hotplug7.8 High
- linux, linux kernel +1 morenfc: pn533: initialize struct pn533_out_arg properly5.5 Medium
- linux, linux kernel +1 morescsi: core: Fix a procfs host directory removal regression5.5 Medium
- linux, linux kernel +1 morefs: prevent out-of-bounds array speculation when closing a file descriptor7.1 High
- linux, linux kernel +1 morescsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()5.5 Medium
- linux, linux kernel +1 moreloop: Fix use-after-free issues7.8 High
- linux, linux kernel +1 morenet: tunnels: annotate lockless accesses to dev->needed_headroom5.5 Medium
- linux, linux kernel +1 morenfc: st-nci: Fix use after free bug in ndlc_remove due to race condition7.8 High
- linux, linux kernel +1 moreext4: zero i_disksize when initializing the bootloader inode5.5 Medium
- linux, linux kernel +1 morefirmware: xilinx: don't make a sleepable memory allocation from an atomic context5.5 Medium
- linux, linux kernel +1 moremedia: rc: gpio-ir-recv: add remove function5.5 Medium
- linux, linux kernel +1 moretracing: Do not let histogram values have some modifiers5.5 Medium
- linux, linux kernel +1 moreinterconnect: exynos: fix node leak in probe PM QoS error path5.5 Medium
- linux, linux kernel +1 moreext4: update s_journal_inum if it changes after journal replay5.5 Medium
- linux, linux kernel +1 morevp_vdpa: fix the crash in hot unplug with vp_vdpa7.8 High
- linux, linux kernel +1 moreocfs2: fix data corruption after failed write7.8 High
- linux, linux kernel +1 morexsk: Add missing overflow check in xdp_umem_reg7.8 High
- linux, linux kernel +1 moreftrace: Fix invalid address access in lookup_rec() when index is 07.8 High
- linux, linux kernel +1 moredrm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini5.5 Medium
- linux, linux kernel +1 moreocteontx2-vf: Add missing free for alloc_percpu5.5 Medium
- linux, linux kernel +1 moreLoongArch: Only call get_timer_irq() once in constant_clockevent_init()5.5 Medium
- linux, linux kernel +1 moreqed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info5.5 Medium
- linux, linux kernel +1 morenet: usb: smsc95xx: Limit packet length to skb->len5.5 Medium
- linux, linux kernel +1 moreksmbd: fix possible refcount leak in smb2_open()5.5 Medium
- linux, linux kernel +1 morefscrypt: destroy keyring after security_sb_delete()5.5 Medium
- linux, linux kernel +1 moreusb: dwc2: fix a devres leak in hw_enable upon suspend resume5.5 Medium
- linux, linux kernel +1 moreusb: ucsi: Fix NULL pointer deref in ucsi_connector_change()5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpm: fix warning when handle discover_identity message5.5 Medium
- linux, linux kernel +1 moreusb: gadget: u_audio: don't let userspace block driver unbind5.5 Medium
- linux, linux kernel +1 morearm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent7.8 High
- linux, linux kernel +1 morescsi: qla2xxx: Perform lockless command completion in abort path5.5 Medium
- linux, linux kernel +1 moreca8210: fix mac_len negative array access5.5 Medium
- linux, linux kernel +1 morescsi: mpi3mr: Bad drive in topology results kernel crash7.8 High
- linux, linux kernel +1 morenilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()7.1 High
- linux, linux kernel +1 moreKVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace5.5 Medium
- casdoorCasdoor SCIM User Creation Endpoint scim.go HandleScim authorization6.9 Medium
- Show moreLoading…