Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_aead_encrypt is call…Jan 14, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't be used to copy a no…Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A zero length…Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed resource allocation The VIA watchdog driver uses all…Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user API contexts…Jan 14, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validatio…Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the t…Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ip6_gre: make ip6gre_header() robust Over the years, syzbot found many ways to crash the kernel in…Jan 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects When a nexthop object i…Jan 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDP_TX action There is a crash issue when running ze…Jan 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simult-connect race leading to inc…Jan 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device() collects sockets…Jan 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops ca…Jan 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write A deadlock can occur betw…Jan 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asd_pci_remove() function fails to syn…Jan 13, 2026
- Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.EPSS 0.2%Jan 5, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage adreno_show_object() is a trap! It will re-allocate the pointeDec 30, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al.Dec 24, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to progress…EPSS 0.1%Dec 16, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between t…EPSS 0.1%Dec 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next…EPSS 0.1%Dec 16, 2025
- High8.8An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.EPSS 0.3%Dec 12, 2025
- Medium6.5A flaw was found in glib.EPSS 0.6%Dec 11, 2025
- Critical9.8A flaw was found in GLib (Gnome Lib).EPSS 0.8%Dec 10, 2025
- Low3.6The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container.EPSS 0.1%Dec 10, 2025