Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Microsoft Windows DWM Core Library Use-After-Free VulnerabilityKEVEPSS 1.9%May 13, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_endpoint is…Apr 16, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityKEVEPSS 13.9%Apr 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation.Apr 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dpu…Mar 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue…Mar 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() callin…Mar 14, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() If migration suc…Mar 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev().Mar 12, 2025
- High7.0Microsoft Windows Win32k Use-After-Free VulnerabilityKEVEPSS 1.4%Mar 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the target vCPU is…Mar 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Update header file") i…Mar 6, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access an…Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: ra…Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held.Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RC…Feb 27, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protection.Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ovs_vport_cmd_fill_info() can be calle…Feb 27, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held.Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resu…Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are trying to join…Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync This fixes the follow…Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to th…Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any issues, but…Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: 1) grab nbd…Feb 27, 2025