Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv51Check if you run itEPSS 0.15%Jan 13, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" This reverts commit 0367076b0817Check if you run itEPSS 0.33%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string parameters Add validation for format string parameters in the firmwaCheck if you run itEPSS 0.24%Jan 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active list if it changes to strict Whenever a user issues an ets qdisCheck if you run itEPSS 0.15%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct filename using getname()Check if you run itEPSS 0.22%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in __ip_vs_get_out_rt() calls dst_link_failCheck if you run itEPSS 0.21%Jan 13, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the pCheck if you run itEPSS 0.53%Jan 13, 2026
- High8.0In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during fiCheck if you run itEPSS 0.45%Jan 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-after-free when dereferencing a neCheck if you run itEPSS 0.15%Jan 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutexCheck if you run itEPSS 0.15%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->events[idx] can become NULL in a subtCheck if you run itEPSS 0.21%Jan 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across three ioctl caCheck if you run itEPSS 0.17%Jan 13, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomap_adjust_read_range() assumes that the poCheck if you run itEPSS 0.69%Jan 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job->pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race betwCheck if you run itEPSS 0.14%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users wiCheck if you run itEPSS 0.27%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot reported a memory leak [1].Check if you run itEPSS 0.23%Jan 13, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in push_nsh() action The push_nsh() action structure looks likCheck if you run itEPSS 0.16%Jan 13, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error case If allocation of cmd->t_task_cdb fails, it remains NULL butCheck if you run itEPSS 0.69%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() prp_get_untagged_frame() calls __pskb_copy() tCheck if you run itEPSS 0.23%Jan 13, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removedCheck if you run itEPSS 0.55%Jan 13, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce ("spi: fsl-cpm: Use 16 bitCheck if you run itEPSS 0.23%Jan 13, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in bnxt_rx_xdp(), clearing of the event flags is not correct.Check if you run itEPSS 0.39%Jan 13, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 29.20%Jan 13, 2026
- Critical9.8Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.74%Jan 13, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
Sort