Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Apptainer is an open source container platform.Open the advisoryDec 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete There is a BUG: KASAN: stack-out-…Open the advisoryNov 24, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ACPI: video: Fix use-after-free in acpi_video_switch_brightness() The switch_brightness_work delaye…Open the advisoryNov 21, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP…Open the advisoryNov 21, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgroup_list in btrfs_add_qgroup_relation When btrfs_add_qgroup_relation()…Open the advisoryNov 21, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_objref: validate objref and objrefmap expressions Referencing a synproxy stateful ob…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfs_encode_fh() The function btrfs_encode_fh() does not p…Check if you run itEPSS 0.15%Nov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in…Check if you run itEPSS 0.46%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths The usage…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches Helge reported that the introd…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() Unlike other strings in th…Check if you run itEPSS 0.16%Nov 12, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quota_release_work There is a kernel panic due to WARN_ON…Check if you run itEPSS 0.21%Nov 12, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() If new_asoc->peer.adaptat…Check if you run itEPSS 0.64%Nov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().Check if you run itEPSS 0.58%Nov 12, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} Cilium has a BPF egress gateway feature whic…Check if you run itEPSS 0.62%Nov 12, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting…Open the advisoryNov 12, 2025
- High7.0The Datadog Agent collects events and metrics from hosts and sends them to Datadog.Open the advisoryNov 12, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_…Check if you run itEPSS 0.46%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_op It’s possible for more than one async command to…Check if you run itEPSS 0.47%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_cap…Open the advisoryNov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the check_alu_op() function v…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINE_DATA + EXTENTS flag combination syzbot reported a BUG_ON in ext4_es_cac…Check if you run itEPSS 0.17%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdp_desc validation Turned out certain clearly invalid values passed…Check if you run itEPSS 0.15%Nov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF.Check if you run itEPSS 0.52%Nov 12, 2025