Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE With CONFIG_HIGHPTE on 32-bit ARM, move_pages_ptCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryOct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bsearch to look for the 'cCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm When send a broadcast packCheck if you run itEPSS 0.33%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remaCheck if you run itEPSS 0.13%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() soc-generic-dmaengine-pcm.c uses saCheck if you run itEPSS 0.13%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The adapter->chan_stats[] array is initialized in mwifiexCheck if you run itEPSS 0.17%Oct 1, 2025
- Critical9.8chef automate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 25.95%Sep 29, 2025
- High8.8In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple seCheck if you run itEPSS 0.38%Sep 29, 2025
- High7.5A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication.Check if you run itEPSS 0.64%Sep 26, 2025
- Medium5.5A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.Check if you run itEPSS 0.17%Sep 25, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event Currently, in ath12k_service_ready_ext_event(),Check if you run itEPSS 0.15%Sep 24, 2025
- High8.8A flaw was found in Libtiff.Check if you run itEPSS 0.97%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() A crash was observed with the following output: BUG: kCheck if you run itEPSS 0.13%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() Currently, calling bpf_map_kmalloc_node() fCheck if you run itEPSS 0.15%Sep 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap call syzbot detected a OCFS2 hang due to a recursive semaphoreCheck if you run itEPSS 0.12%Sep 23, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by inodes xarray race There is a race condition between inode evictiCheck if you run itEPSS 0.11%Sep 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory When I did memory failure tests,Check if you run itEPSS 0.16%Sep 23, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to ceph_connection_v1_info There is a place where generic code in messenger.c is rCheck if you run itEPSS 0.33%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ceph: always call ceph_shift_unused_folios_left() The function ceph_process_folio_batch() sets folio_batch entriCheck if you run itEPSS 0.15%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash after fscrypt_encrypt_pagecache_blocks() error The function move_dirty_folio_in_page_array() wasCheck if you run itEPSS 0.15%Sep 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sCheck if you run itEPSS 0.15%Sep 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function of_phy_find_device may return NCheck if you run itEPSS 0.15%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: igb: Fix NULL pointer dereference in ethtool loopback test The igb driver currently causes a NULL pointer derefeCheck if you run itEPSS 0.13%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: macsec: sync features on RTM_NEWLINK Syzkaller managed to lock the lower device via ETHTOOL_SFEATURES: netdev_loCheck if you run itEPSS 0.13%Sep 23, 2025
Sort