CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- linux, linux kernel +1 moredrm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port5.5 Medium
- linux, linux kernel +1 moredrm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code7.8 High
- linux, linux kernel +1 morexen: fix UAF in dmabuf_exp_from_pages()7.8 High
- linux, linux kernel +1 moreiommu/vt-d: Fix UAF on sva unbind with pending IOPFs7.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'7.8 High
- linux, linux kernel +1 moreBluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Reject narrower access to pointer ctx fields5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Remove skb secpath if xfrm state is not found7.5 High
- linux, linux kernel +1 moreneighbour: Fix null-ptr-deref in neigh_flush_dev().5.5 Medium
- debian linux, linux kernel +1 moreipv6: prevent infinite loop in rt6_nlmsg_size()5.5 Medium
- debian linux, linux kernel +1 moreipv6: fix possible infinite loop in fib6_info_uses_dev()5.5 Medium
- linux, linux kernel +1 morebpf, arm64: Fix fp initialization for exception boundary7.8 High
- linux, linux kernel +1 morestaging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morepadata: Fix pd UAF once and for all7.0 High
- debian linux, linux kernel +1 moreclk: xilinx: vcu: unregister pll_post only if registered correctly5.5 Medium
- linux, linux kernel +1 moreRDMA/hns: Fix double destruction of rsv_qp7.8 High
- debian linux, linux kernel +1 morecrypto: ccp - Fix crash when rebind ccp device for ccp.ko5.5 Medium
- linux, linux kernel +1 moreext4: fix inode use after free in ext4_end_io_rsv_work()7.8 High
- debian linux, linux kernel +1 moref2fs: fix KMSAN uninit-value in extent_info usage7.8 High
- debian linux, linux kernel +1 moref2fs: fix to avoid UAF in f2fs_sync_inode_meta()7.8 High
- debian linux, linux kernel +1 moref2fs: fix to avoid panic in f2fs_evict_inode7.8 High
- debian linux, linux kernel +1 morepowerpc/eeh: Make EEH driver device hotplug safe5.5 Medium
- debian linux, linux kernel +1 morepptp: ensure minimal skb length in pptp_xmit()8.6 High
- linux, linux kernel +1 morespi: cs42l43: Property entry should be a null-terminated array7.3 High
- debian linux, linux kernel +1 moreipv6: reject malicious packets in ipv6_gso_segment()7.8 High
- linux, linux kernel +1 moresunrpc: fix client side handling of tls alerts8.2 High
- linux, linux kernel +1 moreeth: fbnic: unlink NAPIs from queues on error to open7.8 High
- debian linux, linux kernel +1 morebenet: fix BUG when creating VFs5.5 Medium
- linux, linux kernel +1 morenet/sched: mqprio: fix stack out-of-bounds write in tc entry parsing7.8 High
- linux, linux kernel +1 morenfsd: avoid ref leak in nfsd_open_local_fh()4.7 Medium
amazon-efs-utilsTuxCareUpdate of amazon-efs-utilsNo score- linux, linux kernel +1 moresunrpc: fix handling of server side tls alerts9.8 Critical
- debian linux, linux kernel +1 moreperf/core: Exit early on perf_mmap() fail7.8 High
- linux, linux kernel +1 moreperf/core: Handle buffer mapping fail correctly in perf_mmap()5.5 Medium
- debian linux, linux kernel +1 moreperf/core: Prevent VMA split of buffer mappings7.8 High
- debian linux, linux kernel +1 moreksmbd: fix null pointer dereference error in generate_encryptionkey5.5 Medium
- debian linux, linux kernel +1 moreksmbd: fix Preauh_HashValue race condition9.8 Critical
- debian linux, linux kernel +1 morex86/sev: Evict cache lines during SNP memory validation9.3 Critical
- linux, linux kernel +1 moreplatform/x86/intel/pmt: fix a crashlog NULL pointer access5.5 Medium
- linux, linux kernel +1 moreusb: gadget: uvc: Initialize frame-based format color matching descriptor5.5 Medium
- linux, linux kernel +1 moreHID: apple: validate feature-report field count to prevent NULL pointer dereference5.5 Medium
- linux, linux kernel +1 moreHID: core: Harden s32ton() against conversion to 0 bits7.1 High
- debian linux, linux kernel +1 moreusb: gadget : fix use-after-free in composite_dev_cleanup()7.8 High
- linux, linux kernel +1 moremm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped7.8 High
- codephiliax chat2dbCodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection5.3 Medium
- mermaid-js mermaidMermaid does not properly sanitize architecture diagram iconText leading to XSS5.1 Medium
- discourseDiscourse welcome banner user name XSS2.4 Low
- jasonclark getsemanticjasonclark getsemantic index.php cross site scripting5.1 Medium
- linksys e5600, e5600 firmware +1 moreLinksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Reflected Cross-Site Scripting Vulnerability in displayType Parameter5.1 Medium
- Show moreLoading…