2025 CVE Vulnerabilities
45,295 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-23161 | MEDIUM | 5.5 | 0.1% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t t... |
| CVE-2025-23160 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix a resource leak relate... |
| CVE-2025-23159 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr... |
| CVE-2025-23158 | HIGH | 7.8 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add check to handle incorrect qu... |
| CVE-2025-23157 | HIGH | 7.1 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of... |
| CVE-2025-23156 | HIGH | 7.1 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: refactor hfi packet parsi... |
| CVE-2025-23155 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinity_hint ... |
| CVE-2025-23154 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix io_req_post_cqe abuse by send bun... |
| CVE-2025-23153 | MEDIUM | 5.5 | 0.1% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: arm/crc-t10dif: fix use of out-of-scope array in cr... |
| CVE-2025-23152 | MEDIUM | 5.5 | 0.1% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: arm64/crc-t10dif: fix use of out-of-scope array in ... |
| CVE-2025-23151 | MEDIUM | 4.7 | 0.1% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queu... |
| CVE-2025-23150 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller d... |
| CVE-2025-23149 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TP... |
| CVE-2025-23148 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check... |
| CVE-2025-23147 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi... |
| CVE-2025-23146 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer deref... |
| CVE-2025-23145 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow ... |
| CVE-2025-23144 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when callin... |
| CVE-2025-23143 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and... |
| CVE-2025-23142 | HIGH | 7.8 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed tran... |
| CVE-2025-23141 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to prote... |
| CVE-2025-23140 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Avoid issue of interrupts ... |
| CVE-2025-23139 | — | — | — | May 1, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-4164 | CRITICAL | 9.8 | 0.4% | May 1, 2025 | A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Affect... |
| CVE-2025-4163 | CRITICAL | 9.8 | 0.4% | May 1, 2025 | A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. This issue affec... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now