Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityKEVEPSS 100.0%Jun 17, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Since commit b…Apr 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock…Mar 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported following splat [1] Make sure user-…Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-value access in vxlan_vn…Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask…Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->ia_mode, at…Nov 25, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to that in Commi…Nov 19, 2024
- Medium5.5Linux Kernel Use of Uninitialized Resource VulnerabilityKEVEPSS 0.8%Nov 18, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode() [1] In th…Oct 21, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that slhc_remember()…Oct 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggere…Oct 21, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1_do_compress is usin…Oct 21, 2024
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_ip6_tcphdr…Oct 21, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first.Sep 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core so set_ow…Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp contains two reserved fie…Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup key size…Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported uninit-value access in ra…Jul 30, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for timer-based p…Jul 29, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue […Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda…Jun 20, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __ip_make_skb() [1].May 30, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 (…May 30, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression introduced by…May 30, 2024