1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 16, 2026, 5:43 PM 20,347 active 1,448 known exploited

Catalog summary

20,347

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 16, 2026, 5:43 PM 20,347 active 1,448 known exploited

Catalog summary

20,347

Active CVEs

10,166

Critical + high

1,448

Known exploited

14

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 14,651–14,700 of 20,347 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-38234Unknown severity
    sched/rt: Fix race in push_rt_task
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  2. CVE-2025-38233Unknown severity
    powerpc64/ftrace: fix clobbered r15 during livepatching
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  3. CVE-2025-38232Medium
    NFSD: fix race between nfsd registration and exports_proc
    CVSS 4.7
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Jul 14, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  4. CVE-2025-38231Unknown severity
    nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  5. CVE-2025-38230Unknown severity
    jfs: validate AG parameters in dbMount() to prevent crashes
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  6. CVE-2025-38227Unknown severity
    media: vidtv: Terminating the subsequent process of initialization failure
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2025-38226Unknown severity
    media: vivid: Change the siize of the composing
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  8. CVE-2025-38224Unknown severity
    can: kvaser_pciefd: refine error prone echo_skb_max handling logic
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  9. CVE-2025-38222Unknown severity
    ext4: inline: fix len overflow in ext4_prepare_inline_data
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  10. CVE-2025-38218Unknown severity
    f2fs: fix to do sanity check on sit_bitmap_size
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  11. CVE-2025-38216Unknown severity
    iommu/vt-d: Restore context entry setup order for aliased devices
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2025-38215Unknown severity
    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  13. CVE-2025-38214Unknown severity
    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  14. CVE-2025-38212Unknown severity
    ipc: fix to protect IPCS lookups using RCU
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2025-38211Unknown severity
    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  16. CVE-2025-38209Unknown severity
    nvme-tcp: remove tag set when second admin queue config fails
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  17. CVE-2025-38206Unknown severity
    exfat: fix double free in delayed_free
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  18. CVE-2025-38204Unknown severity
    jfs: fix array-index-out-of-bounds read in add_missing_indices
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  19. CVE-2025-38201High
    netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  20. CVE-2025-38198Unknown severity
    fbcon: Make sure modelist not set on unregistered console
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  21. CVE-2025-38197Unknown severity
    platform/x86: dell_rbu: Fix list usage
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  22. CVE-2025-38193Unknown severity
    net_sched: sch_sfq: reject invalid perturb period
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  23. CVE-2025-38192Medium
    net: clear the dst when changing skb protocol
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Jul 14, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  24. CVE-2025-38191Unknown severity
    ksmbd: fix null pointer dereference in destroy_previous_session
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  25. CVE-2025-38189Unknown severity
    drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  26. CVE-2025-38187Unknown severity
    drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  27. CVE-2025-38184Unknown severity
    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2025-38181Unknown severity
    calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2025-38180Unknown severity
    net: atm: fix /proc/net/atm/lec handling
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2025-38179Unknown severity
    smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2025-38177Unknown severity
    sch_hfsc: make hfsc_qlen_notify() idempotent
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  32. CVE-2025-38176Unknown severity
    binder: fix use-after-free in binderfs_evict_inode()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  33. CVE-2025-38175Unknown severity
    binder: fix yet another UAF in binder_devices
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  34. CVE-2025-38174Unknown severity
    thunderbolt: Do not double dequeue a configuration request
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  35. CVE-2025-5351Medium
    Libssh: double free vulnerability in libssh key export functions
    CVSS 6.5
    libssh/libsshgeneric
    PublishedJul 4, 2025First seen at HOL Jun 25, 2026Updated Jun 30, 2026 Fix availableView HOL analysis
  36. CVE-2025-5372Unknown severity
    Libssh: incorrect return code handling in ssh_kdf() in libssh
    Not scoredSource severity not reported
    libssh/libsshgeneric
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 12, 2026 Fix availableView HOL analysis
  37. CVE-2025-38173Unknown severity
    crypto: marvell/cesa - Handle zero-length skcipher requests
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2025-38172Unknown severity
    erofs: avoid using multiple devices with different type
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  39. CVE-2025-38169Unknown severity
    arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2025-38168Unknown severity
    perf: arm-ni: Unregister PMUs on probe failure
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  41. CVE-2025-38167Unknown severity
    fs/ntfs3: handle hdr_first_de() return value
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 3, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  42. CVE-2025-38166Unknown severity
    bpf: fix ktls panic with sockmap
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  43. CVE-2025-38165Unknown severity
    bpf, sockmap: Fix panic when calling skb_linearize
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2025-38164Unknown severity
    f2fs: zone: fix to avoid inconsistence in between SIT and SSA
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2025-38162Medium
    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 3, 2025First seen at HOL Jul 14, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2025-38161Unknown severity
    RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  47. CVE-2025-38154Unknown severity
    bpf, sockmap: Avoid using sk_socket after free when sending
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2025-38150Unknown severity
    af_packet: move notifier's packet_dev_mc out of rcu critical section
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  49. CVE-2025-38146Unknown severity
    net: openvswitch: Fix the dead loop of MPLS parse
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2025-38141Unknown severity
    dm: fix dm_blk_report_zones
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 294 of 407
Previous292293294295296Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

10,166

Critical + high

1,448

Known exploited

14

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 14,651–14,700 of 20,347 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-38234Unknown severity
    sched/rt: Fix race in push_rt_task
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  2. CVE-2025-38233Unknown severity
    powerpc64/ftrace: fix clobbered r15 during livepatching
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  3. CVE-2025-38232Medium
    NFSD: fix race between nfsd registration and exports_proc
    CVSS 4.7
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Jul 14, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  4. CVE-2025-38231Unknown severity
    nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  5. CVE-2025-38230Unknown severity
    jfs: validate AG parameters in dbMount() to prevent crashes
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  6. CVE-2025-38227Unknown severity
    media: vidtv: Terminating the subsequent process of initialization failure
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2025-38226Unknown severity
    media: vivid: Change the siize of the composing
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  8. CVE-2025-38224Unknown severity
    can: kvaser_pciefd: refine error prone echo_skb_max handling logic
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  9. CVE-2025-38222Unknown severity
    ext4: inline: fix len overflow in ext4_prepare_inline_data
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  10. CVE-2025-38218Unknown severity
    f2fs: fix to do sanity check on sit_bitmap_size
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  11. CVE-2025-38216Unknown severity
    iommu/vt-d: Restore context entry setup order for aliased devices
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2025-38215Unknown severity
    fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  13. CVE-2025-38214Unknown severity
    fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  14. CVE-2025-38212Unknown severity
    ipc: fix to protect IPCS lookups using RCU
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2025-38211Unknown severity
    RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  16. CVE-2025-38209Unknown severity
    nvme-tcp: remove tag set when second admin queue config fails
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  17. CVE-2025-38206Unknown severity
    exfat: fix double free in delayed_free
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  18. CVE-2025-38204Unknown severity
    jfs: fix array-index-out-of-bounds read in add_missing_indices
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  19. CVE-2025-38201High
    netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  20. CVE-2025-38198Unknown severity
    fbcon: Make sure modelist not set on unregistered console
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  21. CVE-2025-38197Unknown severity
    platform/x86: dell_rbu: Fix list usage
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  22. CVE-2025-38193Unknown severity
    net_sched: sch_sfq: reject invalid perturb period
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  23. CVE-2025-38192Medium
    net: clear the dst when changing skb protocol
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 4, 2025First seen at HOL Jul 14, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  24. CVE-2025-38191Unknown severity
    ksmbd: fix null pointer dereference in destroy_previous_session
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  25. CVE-2025-38189Unknown severity
    drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  26. CVE-2025-38187Unknown severity
    drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  27. CVE-2025-38184Unknown severity
    tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2025-38181Unknown severity
    calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2025-38180Unknown severity
    net: atm: fix /proc/net/atm/lec handling
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2025-38179Unknown severity
    smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2025-38177Unknown severity
    sch_hfsc: make hfsc_qlen_notify() idempotent
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  32. CVE-2025-38176Unknown severity
    binder: fix use-after-free in binderfs_evict_inode()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  33. CVE-2025-38175Unknown severity
    binder: fix yet another UAF in binder_devices
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  34. CVE-2025-38174Unknown severity
    thunderbolt: Do not double dequeue a configuration request
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  35. CVE-2025-5351Medium
    Libssh: double free vulnerability in libssh key export functions
    CVSS 6.5
    libssh/libsshgeneric
    PublishedJul 4, 2025First seen at HOL Jun 25, 2026Updated Jun 30, 2026 Fix availableView HOL analysis
  36. CVE-2025-5372Unknown severity
    Libssh: incorrect return code handling in ssh_kdf() in libssh
    Not scoredSource severity not reported
    libssh/libsshgeneric
    PublishedJul 4, 2025First seen at HOL Aug 6, 2026Updated Jul 12, 2026 Fix availableView HOL analysis
  37. CVE-2025-38173Unknown severity
    crypto: marvell/cesa - Handle zero-length skcipher requests
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2025-38172Unknown severity
    erofs: avoid using multiple devices with different type
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  39. CVE-2025-38169Unknown severity
    arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2025-38168Unknown severity
    perf: arm-ni: Unregister PMUs on probe failure
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  41. CVE-2025-38167Unknown severity
    fs/ntfs3: handle hdr_first_de() return value
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 3, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  42. CVE-2025-38166Unknown severity
    bpf: fix ktls panic with sockmap
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  43. CVE-2025-38165Unknown severity
    bpf, sockmap: Fix panic when calling skb_linearize
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2025-38164Unknown severity
    f2fs: zone: fix to avoid inconsistence in between SIT and SSA
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2025-38162Medium
    netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedJul 3, 2025First seen at HOL Jul 14, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2025-38161Unknown severity
    RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  47. CVE-2025-38154Unknown severity
    bpf, sockmap: Avoid using sk_socket after free when sending
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2025-38150Unknown severity
    af_packet: move notifier's packet_dev_mc out of rcu critical section
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  49. CVE-2025-38146Unknown severity
    net: openvswitch: Fix the dead loop of MPLS parse
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2025-38141Unknown severity
    dm: fix dm_blk_report_zones
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedJul 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 294 of 407
Previous292293294295296Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard