CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- linux, linux kernel +1 morenet: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info7.5 High
- linux, linux kernel +1 morerxrpc: Fix bug due to prealloc collision5.5 Medium
- debian linux, linux kernel +1 moredrm/tegra: nvdec: Fix dma_alloc_coherent error check5.5 Medium
- debian linux, linux kernel +1 morenet: appletalk: Fix device refcount leak in atrtr_create()7.8 High
- linux, linux kernel +1 morewifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()5.5 Medium
- debian linux, linux kernel +1 moreHID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras5.5 Medium
- debian linux, linux kernel +1 moretracing: Add down_write(trace_event_sem) when adding trace event7.8 High
- debian linux, linux kernel +1 moredmaengine: nbpfaxi: Fix memory corruption in probe()7.8 High
- linux, linux kernel +1 morenet: phy: Don't register LEDs for genphy5.5 Medium
- linux, linux kernel +1 morenet: airoha: fix potential use-after-free in airoha_npu_get()7.8 High
- debian linux, linux kernel +1 morephy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode7.8 High
- linux, linux kernel +1 morenetfs: Fix copy-to-cache so that it performs collection with ceph+fscache5.5 Medium
- linux, linux kernel +1 morenet: libwx: fix the using of Rx buffer DMA9.8 Critical
- linux, linux kernel +1 morenet: libwx: properly reset Rx ring descriptor7.8 High
- linux, linux kernel +1 moreiio: common: st_sensors: Fix use of uninitialize device structs5.5 Medium
- debian linux, linux kernel +1 morecomedi: pcl812: Fix bit shift out of bounds7.1 High
- debian linux, linux kernel +1 morecomedi: aio_iiro_16: Fix bit shift out of bounds7.1 High
- debian linux, linux kernel +1 morebpf: Reject %p% format string in bprintf-like helpers7.1 High
- debian linux, linux kernel +1 moresmb: client: fix use-after-free in cifs_oplock_break9.8 Critical
- linux, linux kernel +1 moreice: add NULL check in eswitch lag check7.5 High
- linux, linux kernel +1 morerxrpc: Fix irq-disabled in local_bh_enable()7.5 High
- linux, linux kernel +1 morerxrpc: Fix recv-recv race of completed call7.5 High
- linux, linux kernel +1 morecifs: Fix the smbd_response slab to allow usercopy7.5 High
- linux, linux kernel +1 moresched/ext: Prevent update_locked_rq() calls with NULL rq5.5 Medium
- properfraction paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.4 - Unauthenticated Arbitrary Shortcode Execution6.5 Medium
- pencidesign soledadSoledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'6.4 Medium
- pencidesign soledadSoledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- pencidesign soledadSoledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'8.8 High
- linux, linux kernel +1 moredrm/imagination: Fix kernel crash when hard resetting the GPU7.1 High
- debian linux, linux kernel +1 moredrm/amdkfd: Don't call mmput from MMU notifier callback5.5 Medium
- linux, linux kernel +1 moremm/damon: fix divide by zero in damon_get_intervals_score()5.5 Medium
- linux, linux kernel +1 morex86/CPU/AMD: Disable INVLPGB on Zen25.5 Medium
- linux, linux kernel +1 morelib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()5.5 Medium
- debian linux, linux kernel +1 morepinctrl: qcom: msm: mark certain pins as invalid for interrupts5.5 Medium
- debian linux, linux kernel +1 moredrm/sched: Increment job count before swapping tail spsc queue4.7 Medium
- debian linux, linux kernel +1 morerxrpc: Fix oops due to non-existence of prealloc backlog struct7.5 High
- debian linux, linux kernel +1 morewifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()5.5 Medium
- debian linux, linux kernel +1 morewifi: prevent A-MSDU attacks in mesh networks8.8 High
- linux, linux kernel +1 moredrm/xe/pf: Clear all LMTT pages on alloc8.8 High
- debian linux, linux kernel +1 morekasan: remove kasan_find_vm_area() to prevent possible deadlock5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: reject VHT opmode for unsupported channel widths5.5 Medium
- linux, linux kernel +1 morex86/sev: Use TSC_FACTOR for Secure TSC frequency calculation7.3 High
- linux, linux kernel +1 moreHID: nintendo: avoid bluetooth suspend/resume stalls5.5 Medium
- linux, linux kernel +1 moreKVM: Allow CPU to reschedule while setting per-page memory attributes5.5 Medium
- linux, linux kernel +1 morewifi: mwifiex: discard erroneous disassoc frames on STA interface7.1 High
- linux, linux kernel +1 moreio_uring/zcrx: fix pp destruction warnings5.5 Medium
- debian linux, linux kernel +1 morebtrfs: fix assertion when building free space tree5.5 Medium
- legion of the bouncy castle inc. bouncy castle for java - bc-fja 2.1.0Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion1.0 Low
- debian linux, linux kernel, siemens simatic cn 4100 +1 more +3 morebpf: Fix oob access in cgroup local storage7.8 High
- reubenthiessen translate this gtranslate shortcodeTranslate This - Google Translate Web Element Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via base_lang Parameter6.4 Medium
- Show moreLoading…