Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Sean reported [1] the following splat when running KVM…Check if you run itEPSS 0.15%Dec 16, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access…Open the advisoryDec 4, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpat…Check if you run itEPSS 0.18%Oct 28, 2025
- High7.9In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of…Check if you run itEPSS 0.17%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq c…Check if you run itEPSS 0.49%Oct 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: IB/mad: Don't call to function that might sleep while in atomic context Tracepoints are not allowed…Check if you run itEPSS 0.36%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CP…Check if you run itEPSS 0.17%Sep 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient…Check if you run itEPSS 0.35%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_open is set to a ver…Check if you run itEPSS 0.18%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight Reject migration of SE…Check if you run itEPSS 0.18%Jul 25, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio unpinning syzbot complains about an unmapping failure: [ 108.070381][ T14] kernel BUG aCheck this weekEPSS 17.00%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exports_proc As of now nfsd calls create_proc_exports_entry() at stCheck if you run itEPSS 0.17%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Otherwise, it is possible to hit WARN_ON_ONCCheck if you run itEPSS 0.24%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: validate buffer count with offset for cloning syzbot reports that it can trigger a WARN_ON() forCheck this weekEPSS 15.00%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ destruction if the firmware command fCheck if you run itEPSS 0.18%Jul 3, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 Don't BUG/WARN on interrupt injection due to GICheck this weekEPSS 27.00%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Initialize Xen timer only once Add a check for existing xen timers before initializing a new one.Check this weekEPSS 20.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set theCheck this weekEPSS 20.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ice: Fix call trace with null VSI during VF reset During stress test with attaching and detaching VF from KVM anCheck this weekEPSS 23.00%Jun 18, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce886a60207 ("KVM: arm64: Plumb the pCheck if you run itEPSS 0.16%May 29, 2025
- High8.8KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interceptionCheck if you run itEPSS 0.19%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to our CI by Bui Quang MinhCheck if you run itEPSS 0.19%May 20, 2025
- High8.7In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.Check if you run itEPSS 0.22%May 20, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remappeCheck if you run itEPSS 0.32%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc() warning syzkaller triggered an oversized kvmalloc() warning.Check if you run itEPSS 0.31%May 9, 2025