Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixes the cond…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race has a race window where can re-register…EPSS 0.1%Apr 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path cppi5_hdesc_get_psdata() re…EPSS 0.4%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock btintel_hw_error() issues t…EPSS 0.2%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin com…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migra…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a69…EPSS 0.2%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue (UAF) There is a teardown order issue in the driver.EPSS 0.2%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() isotp_sendmsg() uses only cmpxchg() on so-…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex MEDIA_REQUEST_IOC_REINIT can run…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false A UAF issu…EPSS 0.2%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount The unmount sequence in xfs_unmount_flush_inode…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfs_inode_item_push() and xfs_qm_d…Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when racing with umount Commit b98535d09179 ("ext4: f…EPSS 0.2%Apr 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() smb_grant_oplock() has two issues in…Apr 22, 2026
- Medium5.0Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor.Apr 22, 2026
- High8.4The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session.Apr 22, 2026
- High7.5Memory safety bugs present in Firefox 149 and Thunderbird 149.Apr 21, 2026
- High7.5Use-after-free in the Widget: Cocoa component.Apr 21, 2026
- High7.5Use-after-free in the JavaScript: WebAssembly component.Apr 21, 2026
- High7.5Use-after-free in the JavaScript Engine component.Apr 21, 2026
- High7.5Use-after-free in the WebRTC component.Apr 21, 2026
- High7.5Use-after-free in the DOM: Core & HTML component.Apr 21, 2026
- Medium5.1Double-Free / Use-After-Free (UAF) in the and functions in the thin_vec crate.Apr 20, 2026
- Medium4.3Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file.Apr 15, 2026