Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the passive socket initialiCheck this weekEPSS 20.00%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drm_gem_shmem_mmap() doesn't own reference in error coCheck this weekEPSS 21.00%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token lookup time after havinCheck this weekEPSS 20.00%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is receivCheck this weekEPSS 21.00%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ftrace ops [1].Check this weekEPSS 22.00%May 1, 2025
- High7.8KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cacheCheck this weekEPSS 19.00%May 1, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer tCheck if you run itEPSS 1.14%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past theCheck if you run itEPSS 0.22%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-uses associations and tranCheck this weekEPSS 23.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_endpoint is called multiCheck this weekEPSS 21.00%Apr 16, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 13.90%Apr 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation.Check if you run itEPSS 0.23%Apr 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dpu…Check if you run itEPSS 0.22%Mar 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue…Check if you run itEPSS 0.21%Mar 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() callin…Check if you run itEPSS 0.32%Mar 14, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() If migration suc…Check if you run itEPSS 0.24%Mar 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev().Check if you run itEPSS 0.25%Mar 12, 2025
- High7.0Microsoft Windows Win32k Use-After-Free VulnerabilityPatch nowKEVEPSS 1.38%Mar 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the target vCPU is fully onlineCheck if you run itEPSS 0.22%Mar 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Update header file") i…Check if you run itEPSS 0.21%Mar 6, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access and acl_defaultCheck if you run itEPSS 0.67%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() iCheck if you run itEPSS 0.27%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held.Check if you run itEPSS 0.27%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RC…Check if you run itEPSS 0.26%Feb 27, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protection.Check if you run itEPSS 0.66%Feb 27, 2025