Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Fix the race by pruning…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF…Check if you run itEPSS 0.13%Jun 25, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6_tunnel_xmit() caches the inner IPv6 he…Check if you run itEPSS 0.58%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfree_skb of ERR_PTR After the patch in the "Fixes" tag, the allocat…Check if you run itEPSS 0.13%Jun 25, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() __sctp_rcv_asconf_lookup() in net/sctp/input.c…Check if you run itEPSS 0.58%Jun 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue skbs skb_is_err_queue() treats PACKET_OUTGOING as th…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix resource freeing order Commit a60fc3294a37 ("ptp: rework ptp_clock_unregister() to di…Check if you run itEPSS 0.12%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leaking percpu counter pointers The native and compat get-entries paths…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes user-contr…Check if you run itEPSS 0.13%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls metadata…Check if you run itEPSS 0.19%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/bluetooth/l2cap_core.c:l2cap_sig_…Check if you run itEPSS 0.13%Jun 25, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL A deferred byte-range lock…Check if you run itEPSS 0.45%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.g.Check if you run itEPSS 0.13%Jun 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before running a sockmap verdict On the UDP receive path skb->dev is repurposed…Check if you run itEPSS 0.49%Jun 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the field in the TCP header refers to t…Check if you run itEPSS 0.49%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog leak on failed handshake When vmci_transport_recv_connecting_server(…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations FUSE_NOTIFY_STORE and FUSE_N…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios FUSE_NOTIFY_RETRIEVE must be limited to uptodat…Check if you run itEPSS 0.13%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts ent…Check if you run itEPSS 0.13%Jun 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size __tb_property_parse_dir() does not check th…Check if you run itEPSS 0.13%Jun 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size tb_xdp_properties_request() derive…Check if you run itEPSS 0.14%Jun 25, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tb_xdp_handle_request() casts th…Check if you run itEPSS 0.27%Jun 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Limit XDomain response copy to actual frame size tb_xdomain_copy() copies req->respons…Check if you run itEPSS 0.26%Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: fix stale stack leak via the OIFNAME register For NFT_FIB_RESULT_OIFNAME the de…Check if you run itEPSS 0.13%Jun 25, 2026