Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7In the Linux kernel, the following vulnerability has been resolved: bpf: Defer the free of inner map when necessary When updating or deleting an inner map in map array…Check if you run itEPSS 0.25%Feb 22, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid dirent corruption As Al reported in link[1]: f2fs_rename() ...Check if you run itEPSS 0.24%Feb 22, 2024
- Medium5.5create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.Check if you run itEPSS 0.25%Feb 12, 2024
- Medium5.5linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.Check if you run itEPSS 0.46%Feb 6, 2024
- High7.5A flaw was found in m2crypto.Check if you run itEPSS 1.12%Feb 5, 2024
- Medium4.8A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function.Check if you run itEPSS 0.71%Feb 5, 2024
- Medium5.3A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function.Check if you run itEPSS 0.33%Feb 5, 2024
- Medium6.8A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function.Check if you run itEPSS 0.32%Feb 5, 2024
- High7.8Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 28.06%Jan 31, 2024
- High7.8In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunksCheck if you run itEPSS 0.41%Jan 26, 2024
- High7.8Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.Check if you run itEPSS 0.58%Jan 25, 2024
- Medium5.5NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers.Check if you run itEPSS 0.61%Jan 25, 2024
- Medium5.5In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.Check if you run itEPSS 0.25%Jan 23, 2024
- Medium5.5A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel.Check if you run itEPSS 0.28%Jan 15, 2024
- High7.0io_uring UAF, Unix SCM garbage collectionCheck if you run itEPSS 1.43%Jan 8, 2024
- High7.8It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.Check if you run itEPSS 5.87%Jan 8, 2024
- High7.8Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 10.20%Jan 8, 2024
- High7.0A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.37%Dec 19, 2023
- High7.0A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.71%Dec 19, 2023
- High7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.Check if you run itEPSS 0.33%Dec 18, 2023
- High7.1An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.Check if you run itEPSS 0.53%Dec 8, 2023
- Medium5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.Check if you run itEPSS 1.27%Nov 28, 2023
- Medium4.3An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel.Check if you run itEPSS 1.64%Nov 16, 2023
- Medium4.3The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code.Check if you run itEPSS 0.32%Nov 3, 2023
- High8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.Check if you run itEPSS 9.62%Nov 1, 2023
Sort