Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2_read() Memory leak occurs when ksmbd_vfs_read() fails.Check if you run itEPSS 0.19%Dec 6, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible refcount leak in smb2_sess_setup() Reference count of ksmbd_session will l…Check if you run itEPSS 0.41%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: cancel mesh send timer when hdev removed mesh_send_done timer is not canceled when…Check if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF There is a KASAN: slab-use-after…Check if you run itEPSS 0.14%Dec 6, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has header…Check if you run itEPSS 0.28%Dec 6, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto syzbot reported a possible…Check if you run itEPSS 0.22%Dec 6, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak In tcf_connmark_dump(), the v…Check if you run itEPSS 0.20%Dec 6, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infol…Check if you run itEPSS 0.22%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from us…Check if you run itEPSS 0.24%Dec 6, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the…Check if you run itEPSS 0.14%Dec 6, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd In snd_usb_create_stre…Check if you run itEPSS 0.19%Dec 6, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4_free_ol_stateid() Typically copynotify stateid is freed eithe…Check if you run itEPSS 0.43%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory…Check if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is erased from subdir rbtree through rb_erase(), but not…Check if you run itEPSS 0.46%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix potential UAF issue for VMA readahead Since commit 78524b05f1a3 ("mm, swap: avoid red…Check if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio dri…Check if you run itEPSS 0.18%Dec 6, 2025
- Medium6.1A flaw was found in util-linux.Check if you run itEPSS 0.20%Dec 5, 2025
- High7.5Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps.Open the advisoryDec 4, 2025
- High7.5Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.Open the advisoryDec 4, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access…Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params arg…Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access If cros_ec_keyb_register_matrix() isn't called (…Open the advisoryDec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Input: imx_sc_key - fix memory corruption on unload This is supposed to be "priv" but we accidental…Open the advisoryDec 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() nvme_fc_delete_assocation(…Check if you run itEPSS 0.56%Dec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added In commit…Open the advisoryDec 4, 2025