Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers pskb_carve_inside_header() and ps…EPSS 0.2%Jun 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from th…EPSS 0.2%Jun 24, 2026
- High7.1Zephyr's IPv6 Neighbor Discovery send paths (net_ipv6_send_na, net_ipv6_send_ns, net_ipv6_send_rs in subsys/net/ip/ipv6_nbr.c) updated the per-interface ICMP-sent stat…EPSS 0.4%Jun 16, 2026
- Medium4.8In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo-reply packet (reply), hands it to net_try_send_data(), and then, o…EPSS 0.2%Jun 16, 2026
- High7.5subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed to net_try_send_data().EPSS 0.4%Jun 16, 2026
- High7.1subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after net_send_data(pkt) returned successfully.EPSS 0.3%Jun 16, 2026
- Low3.7In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface back out of the packet via net_pkt_iface(pkt) after the packet had…EPSS 0.3%Jun 16, 2026
- Medium6.3On Xtensa targets with CONFIG_USERSPACE and CONFIG_XTENSA_MMU, the page-table code (arch/xtensa/core/ptables.c) maintains a global list, xtensa_domain_list, of active…EPSS 0.2%Jun 16, 2026
- Medium5.3Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which cache…EPSS 0.3%Jun 15, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40.EPSS 0.1%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and…EPSS 0.1%Jun 9, 2026
- High7.8ZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure VulnerabilityEPSS 0.1%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmt_src during MBPF check During concurrency testing, multiple i…EPSS 0.2%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might…EPSS 0.1%May 28, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO con…EPSS 0.4%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink().EPSS 0.1%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete KASAN reproduces a slab-use-after-…EPSS 0.1%May 28, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for d…EPSS 0.2%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() The mwifiex_adapter_cleanup() functi…EPSS 0.1%May 27, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access mu…EPSS 0.3%May 27, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-free in driver remove() In the remove callback, if a packet arrives af…EPSS 0.2%May 27, 2026
- High7.0NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free for stack memory.May 26, 2026
- High8.8NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free.May 26, 2026
- High7.1libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-h…May 26, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slow…EPSS 0.8%May 21, 2026