Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownCVE-2024-49995 is listed by ALAS-2025-1961 (important): kernel.Mar 6, 2025
- UnknownCVE-2024-42285 is listed by ALAS-2025-1962 (important): kernel.Mar 6, 2025
- UnknownCVE-2024-42284 is listed by ALAS-2025-1962 (important): kernel.Mar 6, 2025
- UnknownCVE-2024-39487, CVE-2024-42104Mar 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the target vCPU is fully onlineEPSS 0.2%Mar 6, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access and acl_defaultEPSS 0.7%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() iEPSS 0.3%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are trying to join the currentEPSS 0.3%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: 1) grab nbd_config tempoEPSS 0.2%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit()EPSS 0.3%Feb 27, 2025
- UnknownCVE-2024-49860, CVE-2024-50055Feb 19, 2025
- UnknownCVE-2024-49860, CVE-2024-50055Feb 19, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In case we reach scheduler's limit,EPSS 0.3%Feb 18, 2025
- UnknownCVE-2024-50230 is listed by ALAS-2025-1957 (important): kernel.Feb 5, 2025
- UnknownCVE-2024-50067 is listed by ALAS-2025-1957 (important): kernel.Feb 5, 2025
- UnknownCVE-2024-49936 is listed by ALAS-2025-1957 (important): kernel.Feb 5, 2025
- UnknownCVE-2024-47742 is listed by ALAS-2025-1957 (important): kernel.Feb 5, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following BUG detected by KASAN:EPSS 0.3%Dec 27, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug in sg_release(), detected by syzEPSS 0.3%Dec 27, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT In qdisc_tree_reduce_backlog, Qdiscs with major handle ffEPSS 0.3%Nov 19, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slEPSS 0.3%Nov 19, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_async_encode() [1] In this case, pppoEPSS 0.3%Oct 21, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: slip: make slhc_remember() more robust against malicious packets syzbot found that slhc_remember() was missing cEPSS 0.8%Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ===================EPSS 0.3%Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an entry in an inliEPSS 0.2%Oct 21, 2024