Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cgroup: split cgroup_destroy_wq into 3 workqueues A hung task can occur during [1] LTP cgroup testing when repeaCheck if you run itEPSS 0.15%Oct 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: avoid buffer overflow in WID string configuration Fix the following copy overflow warning identiCheck if you run itEPSS 0.23%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: um: virtio_uml: Fix use-after-free after put_device in probe When register_virtio_device() fails in virtio_uml_pCheck if you run itEPSS 0.15%Oct 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR A NULL pointer dereference can occur iCheck if you run itEPSS 0.15%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmwareCheck if you run itEPSS 0.15%Oct 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page leak on multi-buffer frames The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() forCheck if you run itEPSS 0.30%Oct 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5_uplink_netdev_get() gets the upliCheck if you run itEPSS 0.15%Oct 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole rCheck if you run itEPSS 9.57%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnic_delete_task The original code uses cancel_delayed_work() in cnic_cm_stop_bCheck if you run itEPSS 0.16%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on cancel_delayed_work() inCheck if you run itEPSS 0.15%Oct 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripe_io_hints if we have tooCheck if you run itEPSS 0.14%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix memory corruption when using identity domain zpci_get_iommu_ctrs() returns counter information tCheck if you run itEPSS 0.14%Oct 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source gCheck if you run itEPSS 0.15%Oct 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Since commit 7d5e9737efda ("net: rfkilCheck if you run itEPSS 0.15%Oct 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() When 9770b428b1a2 ("crypto: ccCheck if you run itEPSS 0.14%Oct 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initiaCheck if you run itEPSS 0.14%Oct 4, 2025
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the relCheck if you run itEPSS 0.26%Oct 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) In smbd_destroy() we may dCheck if you run itEPSS 0.29%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->mergCheck if you run itEPSS 0.17%Oct 4, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path During tests of another unrelated patch ICheck if you run itEPSS 0.31%Oct 4, 2025
- High7.5A flaw was found in QEMU.Check if you run itEPSS 0.86%Oct 3, 2025
- High7.1Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted logOpen the advisoryOct 2, 2025
- Medium6.9Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafteOpen the advisoryOct 2, 2025
- Medium5.1Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonateOpen the advisoryOct 2, 2025
- High7.5Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTCheck if you run itEPSS 0.13%Oct 2, 2025