CVEs published October 4, 2025
159 CVEs were published on October 4, 2025: 7 critical, 49 high.
- Published
- 159
- Critical
- 7
- High
- 49
- Medium
- 12
- Low
- 0
- Unrated
- 91
- Now in CISA KEV
- 0
- Fix available
- 42
Most affected products
- Linux
- 144
- sergiotrinity Trinity Audio – Text to Speech AI audio playe…
- 2
- stellarwp GiveWP – Donation Plugin and Fundraising Platform
- 2
- contest-gallery Contest Gallery – Upload & Vote Photos, Med…
- 1
- cyberlord92 Integrate Dynamics 365 CRM
- 1
- cyberlord92 OAuth Single Sign On – SSO
- 1
- fetchmail
- 1
- LaChatterie Verger
- 1
- MacEnhance MacForge
- 1
- maneshtimilsina Majestic Before After Image
- 1
Critical 7
- CVE-2023-53600tunnels: fix kasan splat when generating ipv4 pmtu errorLinux
- CVE-2025-39948ice: fix Rx page leak on multi-buffer framesLinux
- CVE-2025-39946tls: make sure to abort the stream if headers are bogusLinux
- CVE-2025-39943ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transferLinux
- CVE-2025-39933smb: client: let recv_done verify data_offset, data_length and remaining_data_lengthLinux
- CVE-2025-39932smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)Linux
- CVE-2025-9485OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()cyberlord92 OAuth Single Sign On – SSO
High 49
- CVE-2023-53616jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmountLinux
- CVE-2023-53615scsi: qla2xxx: Fix deletion race conditionLinux
- CVE-2023-53609scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"Linux
- CVE-2023-53608nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()Linux
- CVE-2023-53606nfsd: clean up potential nfsd_file refcount leaks in COPY codepathLinux
- CVE-2023-53599crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390Linux
- CVE-2023-53598bus: mhi: host: Range check CHDBOFF and ERDBOFFLinux
- CVE-2023-53597cifs: fix mid leak during reconnection after timeout thresholdLinux
- CVE-2023-53589wifi: iwlwifi: mvm: don't trust firmware n_channelsLinux
- CVE-2023-53587ring-buffer: Sync IRQ works before buffer destructionLinux
- CVE-2023-53586scsi: target: Fix multiple LUN_RESET handlingLinux
- CVE-2023-53580USB: Gadget: core: Help prevent panic during UVC unconfigureLinux
- CVE-2022-50508wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_powerLinux
- CVE-2022-50507fs/ntfs3: Validate data run offsetLinux
- CVE-2022-50493scsi: qla2xxx: Fix crash when I/O abort times outLinux
- CVE-2022-50492drm/msm: fix use-after-free on probe deferralLinux
- CVE-2022-50490bpf: Propagate error from htab_lock_bucket() to userspaceLinux
- CVE-2022-50488block, bfq: fix possible uaf for 'bfqq->bic'Linux
- CVE-2023-53577bpf, cpumap: Make sure kthread is running before map update returnsLinux
- CVE-2023-53572clk: imx: scu: use _safe list iterator to avoid a use after freeLinux
- CVE-2023-53570wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()Linux
- CVE-2023-53566netfilter: nft_set_rbtree: fix null deref on element insertionLinux
- CVE-2023-53560tracing/histograms: Add histograms to hist_vars if they have referenced variablesLinux
- CVE-2023-53559ip_vti: fix potential slab-use-after-free in decode_session6Linux
- CVE-2023-53557fprobe: Release rethook after the ftrace_ops is unregisteredLinux
- CVE-2023-53556iavf: Fix use-after-free in free_netdevLinux
- CVE-2023-53554staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()Linux
- CVE-2023-53552drm/i915: mark requests for GuC virtual engines to avoid use-after-freeLinux
- CVE-2023-53545drm/amdgpu: unmap and remove csa_va properlyLinux
- CVE-2023-53540wifi: cfg80211: reject auth/assoc to AP with our addressLinux
- CVE-2023-53539RDMA/rxe: Fix incomplete state save in rxe_requesterLinux
- CVE-2023-53537f2fs: fix to avoid use-after-free for cached IPU bioLinux
- CVE-2023-53536blk-crypto: make blk_crypto_evict_key() more robustLinux
- CVE-2023-53535net: bcmgenet: Add a check for oversized packetsLinux
- CVE-2022-50483net: enetc: avoid buffer leaks on xdp_do_redirect() failureLinux
- CVE-2022-50472IB/mad: Don't call to function that might sleep while in atomic contextLinux
- CVE-2025-39952wifi: wilc1000: avoid buffer overflow in WID string configurationLinux
- CVE-2025-39951um: virtio_uml: Fix use-after-free after put_device in probeLinux
- CVE-2025-39949qed: Don't collect too many protection override GRC elementsLinux
- CVE-2025-39945cnic: Fix use-after-free bugs in cnic_delete_taskLinux
- CVE-2025-39944octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()Linux
- CVE-2025-39942ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_sizeLinux
- CVE-2025-39941zram: fix slot write race conditionLinux
- CVE-2025-39939iommu/s390: Fix memory corruption when using identity domainLinux
- CVE-2025-39935ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded()Linux
- CVE-2025-39931crypto: af_alg - Set merge to zero early in af_alg_sendmsgLinux
- CVE-2025-39929smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error pathLinux
- CVE-2025-9243Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functionsstylemix Cost Calculator Builder
- CVE-2025-10751MacForge 1.2.0 Beta 1 - Local Privilege EscalationMacEnhance MacForge
Medium, low and unrated 103
- CVE-2025-11273LaChatterie Verger provider.ts redirectToAuthorization deserializationLaChatterie Verger
- CVE-2025-11272SeriaWei ZKEACMS POST Request UrlRedirectionController.cs Delete improper authorizationSeriaWei ZKEACMS
- CVE-2023-53614mm/ksm: fix race with VMA iteration and mm_struct teardownLinux
- CVE-2023-53613dax: Fix dax_mapping_release() use after freeLinux
- CVE-2023-53612hwmon: (coretemp) Simplify platform device handlingLinux
- CVE-2023-53611ipmi_si: fix a memleak in try_smi_init()Linux
- CVE-2023-53610irqchip: Fix refcount leak in platform_irqchip_probeLinux
- CVE-2023-53607ALSA: ymfpci: Fix BUG_ON in probe functionLinux
- CVE-2023-53605drm: amd: display: Fix memory leakageLinux
- CVE-2023-53604dm integrity: call kmem_cache_destroy() in dm_integrity_init() error pathLinux
- CVE-2023-53603scsi: qla2xxx: Avoid fcport pointer dereferenceLinux
- CVE-2023-53602wifi: ath11k: fix memory leak in WMI firmware statsLinux
- CVE-2023-53601bonding: do not assume skb mac_header is setLinux
- CVE-2023-53596drivers: base: Free devm resources when unregistering a deviceLinux
- CVE-2023-53595octeontx2-pf: mcs: Fix NULL pointer dereferencesLinux
- CVE-2023-53594driver core: fix resource leak in device_add()Linux
- CVE-2023-53593cifs: Release folio lock on fscache read hit.Linux
- CVE-2023-53592gpio: sifive: Fix refcount leak in sifive_gpio_probeLinux
- CVE-2023-53591net/mlx5e: Fix deadlock in tc route query codeLinux
- CVE-2023-53590sctp: add a refcnt in sctp_stream_priorities to avoid a nested loopLinux
- CVE-2023-53588wifi: mac80211: check for station first in client probeLinux
- CVE-2023-53585bpf: reject unhashed sockets in bpf_sk_assignLinux
- CVE-2023-53584ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this processLinux
- CVE-2023-53583perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start()Linux
- CVE-2023-53582wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-boundsLinux
- CVE-2023-53581net/mlx5e: Check for NOT_READY flag state after lockingLinux
- CVE-2022-50506drbd: only clone bio if we have a backing deviceLinux
- CVE-2022-50505iommu/amd: Fix pci device refcount leak in ppr_notifier()Linux
- CVE-2022-50504powerpc/rtas: avoid scheduling in rtas_os_term()Linux
- CVE-2022-50503mtd: lpddr2_nvm: Fix possible null-ptr-derefLinux
- CVE-2022-50501media: coda: Add check for dcoda_iram_allocLinux
- CVE-2022-50500netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failedLinux
- CVE-2022-50499media: dvb-core: Fix double free in dvb_register_device()Linux
- CVE-2022-50498eth: alx: take rtnl_lock on resumeLinux
- CVE-2022-50497binfmt_misc: fix shift-out-of-bounds in check_special_flagsLinux
- CVE-2022-50496dm cache: Fix UAF in destroy()Linux
- CVE-2022-50494thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crashLinux
- CVE-2022-50491coresight: cti: Fix hang in cti_disable_hw()Linux
- CVE-2022-50489drm/mipi-dsi: Detach devices when removing the hostLinux
- CVE-2023-53579gpio: mvebu: fix irq domain leakLinux
- CVE-2023-53578net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()Linux
- CVE-2023-53576null_blk: Always check queue mode setting from configfsLinux
- CVE-2023-53575wifi: iwlwifi: mvm: fix potential array out of bounds accessLinux
- CVE-2023-53574wifi: rtw88: delete timer and free skb queue when unloadingLinux
- CVE-2023-53573clk: rs9: Fix suspend/resumeLinux
- CVE-2023-53571drm/i915: Make intel_get_crtc_new_encoder() less oopsyLinux
- CVE-2023-53569ext2: Check block size validity during mountLinux
- CVE-2023-53568s390/zcrypt: don't leak memory if dev_set_name() failsLinux
- CVE-2023-53567spi: qup: Don't skip cleanup in remove's error pathLinux
- CVE-2023-53565wifi: brcmfmac: Check for probe() id argument being NULLLinux
- CVE-2023-53564ocfs2: fix defrag path triggering jbd2 ASSERTLinux
- CVE-2023-53563cpufreq: amd-pstate-ut: Fix kernel panic when loading the driverLinux
- CVE-2023-53562drm/msm: fix vram leak on bind errorsLinux
- CVE-2023-53561net: wwan: iosm: fix NULL pointer dereference when removing deviceLinux
- CVE-2023-53558rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()Linux
- CVE-2023-53555mm/damon/core: initialize damo_filter->list from damos_new_filter()Linux
- CVE-2023-53553HID: hyperv: avoid struct memcpy overrun warningLinux
- CVE-2023-53551usb: gadget: u_serial: Add null pointer check in gserial_resumeLinux
- CVE-2023-53550cpufreq: amd-pstate: fix global sysfs attribute typeLinux
- CVE-2023-53549netfilter: ipset: Rework long task execution when adding/deleting entriesLinux
- CVE-2023-53548net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urbLinux
- CVE-2023-53547drm/amdgpu: Fix sdma v4 sw fini errorLinux
- CVE-2023-53546net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctxLinux
- CVE-2023-53544cpufreq: davinci: Fix clk use after freeLinux
- CVE-2023-53543vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length checkLinux
- CVE-2023-53542ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phyLinux
- CVE-2023-53541mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob writeLinux
- CVE-2023-53538btrfs: insert tree mod log move in push_node_leftLinux
- CVE-2023-53534drm/mediatek: mtk_drm_crtc: Add checks for devm_kcallocLinux
- CVE-2023-53533Input: raspberrypi-ts - fix refcount leak in rpi_ts_probeLinux
- CVE-2022-50486net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()Linux
- CVE-2022-50485ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inodeLinux
- CVE-2022-50484ALSA: usb-audio: Fix potential memory leaksLinux
- CVE-2022-50482iommu/vt-d: Clean up si_domain in the init_dmars() error pathLinux
- CVE-2022-50481cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()Linux
- CVE-2022-50480memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()Linux
- CVE-2022-50479drm/amd: fix potential memory leakLinux
- CVE-2022-50478nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()Linux
- CVE-2022-50477rtc: class: Fix potential memleak in devm_rtc_allocate_device()Linux
- CVE-2022-50476ntb_netdev: Use dev_kfree_skb_any() in interrupt contextLinux
- CVE-2022-50475RDMA/core: Make sure "ib_port" is valid when access sysfs nodeLinux
- CVE-2022-50474macintosh: fix possible memory leak in macio_add_one_device()Linux
- CVE-2022-50473cpufreq: Init completion before kobject_init_and_add()Linux
- CVE-2022-50471xen/gntdev: Accommodate VMA splittingLinux
- CVE-2022-50470xhci: Remove device endpoints from bandwidth list when freeing the deviceLinux
- CVE-2025-39953cgroup: split cgroup_destroy_wq into 3 workqueuesLinux
- CVE-2025-39950net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIRLinux
- CVE-2025-39947net/mlx5e: Harden uplink netdev access against device unbindLinux
- CVE-2025-39940dm-stripe: fix a possible integer overflowLinux
- CVE-2025-39938ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failedLinux
- CVE-2025-39937net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointerLinux
- CVE-2025-39936crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked()Linux
- CVE-2025-39934drm: bridge: anx7625: Fix NULL pointer dereference with early IRQLinux
- CVE-2025-9886Trinity Audio <= 5.20.2 - Cross-Site Request Forgerysergiotrinity Trinity Audio – Text to Speech AI audio playe…
- CVE-2025-10383Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scriptingcontest-gallery Contest Gallery – Upload & Vote Photos, Med…
- CVE-2025-9952Trinity Audio <= 5.20.2 - Reflected Cross-Site Scriptingsergiotrinity Trinity Audio – Text to Speech AI audio playe…
- CVE-2025-9029WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Functionposimyththemes WDesignKit – Elementor & Gutenberg Starter T…
- CVE-2025-9030Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingmaneshtimilsina Majestic Before After Image
- CVE-2025-11228GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Associationstellarwp GiveWP – Donation Plugin and Fundraising Platform
- CVE-2025-10746Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorizationcyberlord92 Integrate Dynamics 365 CRM
- CVE-2025-8726WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_uploadopajaap WP Photo Album Plus
- CVE-2025-11227GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosurestellarwp GiveWP – Donation Plugin and Fundraising Platform
- CVE-2025-61962In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context.fetchmail