CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- linux, linux kernel +1 moreext4: fix out of bounds punch offset7.1 High
- linux, linux kernel +1 moreext4: only dirty folios when data journaling regular files5.5 Medium
- debian linux, linux kernel +1 moref2fs: prevent kernel warning due to negative i_nlink from corrupted image5.5 Medium
- debian linux, linux kernel +1 moref2fs: fix to do sanity check on sit_bitmap_size7.8 High
- linux, linux kernel +1 morehwmon: (ftsteutates) Fix TOCTOU race in fts_read()4.7 Medium
- linux, linux kernel +1 moreiommu/vt-d: Restore context entry setup order for aliased devices8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morefbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morefbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreipc: fix to protect IPCS lookups using RCU7.8 High
- debian linux, linux kernel +1 moreRDMA/iwcm: Fix use-after-free of work objects after cm_id destruction9.8 Critical
- linux, linux kernel +1 moreconfigfs-tsm-report: Fix NULL dereference of tsm_ops5.5 Medium
- linux, linux kernel +1 morenvme-tcp: remove tag set when second admin queue config fails9.8 Critical
- linux, linux kernel +1 moresmb: client: add NULL check in automount_fullpath5.5 Medium
- linux, linux kernel +1 moremm: fix uprobe pte be overwritten when expanding vma5.5 Medium
- debian linux, linux kernel +1 moreexfat: fix double free in delayed_free7.8 High
- linux, linux kernel +1 moredrm/amd/display: Avoid divide by zero by initializing dummy pitch to 15.5 Medium
- debian linux, linux kernel +1 morejfs: fix array-index-out-of-bounds read in add_missing_indices7.8 High
- debian linux, linux kernel +1 morejfs: Fix null-ptr-deref in jfs_ioc_trim5.5 Medium
- debian linux, linux kernel +1 morebpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX7.8 High
- debian linux, linux kernel +1 morei40e: fix MMIO write access to an invalid page in i40e_clear_hw5.5 Medium
- linux, linux kernel +1 morewifi: ath12k: Fix memory leak due to multiple rx_stats allocation5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morefbcon: Make sure modelist not set on unregistered console7.8 High
- debian linux, linux kernel +1 moreplatform/x86: dell_rbu: Fix list usage7.3 High
- linux, linux kernel +1 moreio_uring/rsrc: validate buffer count with offset for cloning5.5 Medium
- linux, linux kernel +1 moreLoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()5.5 Medium
- debian linux, linux kernel +1 morejffs2: check that raw node were preallocated before writing summary5.5 Medium
- debian linux, linux kernel +1 morenet_sched: sch_sfq: reject invalid perturb period7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: clear the dst when changing skb protocol7.8 High
- debian linux, linux kernel +1 moreksmbd: fix null pointer dereference in destroy_previous_session7.5 High
- debian linux, linux kernel +1 moreatm: Revert atm_account_tx() if copy_from_iter_full() fails.5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`7.8 High
- linux, linux kernel +1 moredrm/msm/a7xx: Call CP_RESET_CONTEXT_STATE5.5 Medium
- linux, linux kernel +1 moredrm/nouveau: fix a use-after-free in r535_gsp_rpc_push()7.8 High
- linux, linux kernel +1 morebnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start()5.5 Medium
- debian linux, linux kernel +1 moreatm: atmtcp: Free invalid length skb in atmtcp_c_send().5.5 Medium
- debian linux, linux kernel +1 moretipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer7.8 High
- debian linux, linux kernel +1 morenet: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()7.8 High
- linux, linux kernel +1 moreublk: santizize the arguments from userspace when adding a device7.8 High
- debian linux, linux kernel +1 morecalipso: Fix null-ptr-deref in calipso_req_{set,del}attr().7.5 High
- debian linux, linux kernel +1 morenet: atm: fix /proc/net/atm/lec handling7.8 High
- linux, linux kernel +1 moresmb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()7.8 High
- op-tee optee osREE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure7.9 High
- debian linux, linux kernel +1 moresch_hfsc: make hfsc_qlen_notify() idempotent7.8 High
- intelbras incontrol, incontrol web +1 moreIntelbras InControl operador csv injection5.1 Medium
- jirafeauImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau6.1 Medium
i_treecrates.ioi_tree allowed out-of-bounds access through safe public node accessorsNo score- ergon informatik ag airlock iamTiming difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2...6.9 Medium
- ciphercoin contact form 7 database addon, arshidkv12 database addon for contact form 7 – cfdb7 +1 moreContact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter6.1 Medium
- otwthemes content manager lightWordPress Content Manager Light plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…