Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().Check if you run itEPSS 0.58%Nov 12, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} Cilium has a BPF egress gateway feature whic…Check if you run itEPSS 0.62%Nov 12, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting…Open the advisoryNov 12, 2025
- High7.0The Datadog Agent collects events and metrics from hosts and sends them to Datadog.Open the advisoryNov 12, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_…Check if you run itEPSS 0.46%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev-…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_op It’s possible for more than one async command to…Check if you run itEPSS 0.47%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_cap…Open the advisoryNov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the check_alu_op() function v…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINE_DATA + EXTENTS flag combination syzbot reported a BUG_ON in ext4_es_cac…Check if you run itEPSS 0.17%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdp_desc validation Turned out certain clearly invalid values passed…Check if you run itEPSS 0.15%Nov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF.Check if you run itEPSS 0.52%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().Check if you run itEPSS 0.17%Nov 12, 2025
- High8.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix similar issue to sco_conn_fre…Check if you run itEPSS 0.32%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().Check if you run itEPSS 0.16%Nov 12, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved interrupt for virtual function The device interrupt vector…Open the advisoryNov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.Check if you run itEPSS 0.69%Nov 12, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpu_latency_qos_add/remov…Open the advisoryNov 12, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdr_stream_decode_opaque_auth(), ze…Check if you run itEPSS 0.57%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall compatibility Yinhao et al.Check if you run itEPSS 0.17%Nov 12, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware…Open the advisoryNov 12, 2025
- High7.3Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restr…Check if you run itEPSS 0.52%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable co…Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vfs: Don't leak disconnected dentries on umount When user calls open_by_handle_at() on some inode t…Check if you run itEPSS 0.17%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compati…Check if you run itEPSS 0.15%Oct 30, 2025