# CVEs published 2025-02-09

4 CVEs were published on February 9, 2025: 0 critical, 1 high. Days are UTC.

- [CVE-2025-21685](https://cve.now/CVE-2025-21685.md): platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race (CVSS 4.7, Linux)
- [CVE-2025-21684](https://cve.now/CVE-2025-21684.md): gpio: xilinx: Convert gpio\_lock to raw spinlock (no CVSS, Linux)
- [CVE-2024-57949](https://cve.now/CVE-2024-57949.md): irqchip/gic-v3-its: Don't enable interrupts in its\_irq\_set\_vcpu\_affinity() (CVSS 5.5, Linux)
- [CVE-2024-13440](https://cve.now/CVE-2024-13440.md): Super Store Finder \<= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting (CVSS 8.2, Super Store Finder)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-02-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.