Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The function xdp_convert_buff_to_frame() may rCheck if you run itEPSS 0.40%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registCheck if you run itEPSS 0.22%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from huge_pte_offset() for invalid PMD LoongArch's huge_pte_offset() currently returns aCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mCheck if you run itEPSS 0.22%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid counted_by() use gcc 15 honors the __counted_by(len) attribute onCheck if you run itEPSS 0.21%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kernel panic while accessingCheck if you run itEPSS 0.19%May 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT This requirement was overeagerly loosened in cCheck if you run itEPSS 0.22%May 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before prepare_transfer()Check if you run itEPSS 0.20%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixed in cdnsp by cCheck if you run itEPSS 0.16%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: ci_hdrc_imx: fix usbmisc handling usbmisc is an optional device property so it is totally valid fCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from regisCheck if you run itEPSS 0.23%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_device can lead to a NULL poCheck if you run itEPSS 0.20%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: null - Use spin lock instead of mutex As the null algorithm may be freed in softirq context through af_aCheck if you run itEPSS 0.21%May 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kmemleak warning for percpu hashmap Vlad Poenaru reported the following kmemleak issue: unreferenced obCheck if you run itEPSS 0.20%May 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in __generic_file_write_iter.Check if you run itEPSS 0.20%May 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancel_sync warnings on uninitialized work_structs Betty reported hitting the following warninCheck if you run itEPSS 0.20%May 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pgCheck if you run itEPSS 0.25%May 8, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" wait_event_timeout() will set the state of theCheck if you run itEPSS 0.36%May 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spi_imx_setupxfer() Add check for the return value of spi_imx_setupxfer().Check if you run itEPSS 0.21%May 8, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in dev_uevent() If userspace reads "uevent" device attributeCheck if you run itEPSS 0.21%May 8, 2025
- Medium5.3An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.Check this weekEPSS 14.31%May 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation In commit 599be01ee567 ("net_sched: fix an OOB access iCheck if you run itEPSS 0.20%May 7, 2025
- Medium4.5dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.Check if you run itEPSS 0.59%May 7, 2025
- High8.8Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.47%May 6, 2025