Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.4ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls.May 21, 2026
- Medium5.5When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace daemon to retrieve the list of extended attribu…May 21, 2026
- High7.8A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor.May 21, 2026
- High8.8libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for data to become available.May 21, 2026
- High7.8The setcred(2) system call is only available to privileged users.May 21, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.May 13, 2026
- Medium6.5OPNsense is a FreeBSD based firewall and routing platform.May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.May 13, 2026
- High8.1As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers.Apr 30, 2026
- High7.8When exchanging data over a socket, libnv uses select(2) to wait for data to arrive.Apr 30, 2026
- High8.1When processing the header of an incoming message, libnv failed to properly validate the message size.Apr 30, 2026
- High7.5Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters.Apr 30, 2026
- High7.8An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.Apr 30, 2026
- High8.1The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives.Apr 30, 2026
- Low3.6The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using file-descriptor-relative sys…Apr 22, 2026
- Medium6.2In order to apply a particular protection key to an address range, the kernel must update the corresponding page table entries.Apr 22, 2026
- High8.4The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session.Apr 22, 2026
- High8.2OPNsense is a FreeBSD based firewall and routing platform.Apr 9, 2026
- High7.5A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved t…Apr 1, 2026
- High8.8Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet.Mar 26, 2026
- High7.5On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID.Mar 26, 2026
- High7.5When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in.Mar 26, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.Mar 11, 2026
- High7.5The rtsock_msg_buffer() function serializes routing information into a buffer.Mar 9, 2026