Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_ownership() uses a sign…Check if you run itEPSS 0.15%Jun 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shm_nattch updates shm_destroy_orphaned() walks the shm idr…Check if you run itEPSS 0.12%Jun 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADD_OUT_STREAMS is denied, SCTP only shr…Check if you run itEPSS 0.53%Jun 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports whether the receive queue is at…Check if you run itEPSS 0.11%Jun 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request…Check if you run itEPSS 0.17%Jun 24, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize accept_q access bt_sock_poll() walks the accept queue without synchronization,…Check if you run itEPSS 0.28%Jun 24, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dump_one path The SCTP exact sock_diag lookup can hold a t…Check if you run itEPSS 0.13%Jun 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from th…Check if you run itEPSS 0.16%Jun 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period.Check if you run itEPSS 0.11%Jun 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device.Check if you run itEPSS 0.12%Jun 19, 2026
- High7.8Linux Kernel Integer Overflow or WraparoundPatch nowKEVEPSS 0.58%Jun 16, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40.Check if you run itEPSS 0.11%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and…Check if you run itEPSS 0.14%Jun 9, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in tun_xdp_one(), the f…Check if you run itEPSS 0.13%Jun 9, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_one() returns -EINVAL on a frame s…Check if you run itEPSS 0.13%Jun 9, 2026
- High7.4In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than…Check if you run itEPSS 0.25%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm root bo a…Check if you run itEPSS 0.12%Jun 8, 2026
- High8.3In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to do an array-index…Check if you run itEPSS 0.38%Jun 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol Field Compr…Check if you run itEPSS 0.45%Jun 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queue_work() runs on nvm…Check if you run itEPSS 0.44%Jun 8, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue() reads rs->con…Check if you run itEPSS 0.56%Jun 8, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing ->ioctl handler or ->release h…Check if you run itEPSS 0.11%Jun 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer overflow i…Check if you run itEPSS 0.19%Jun 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading t…Check if you run itEPSS 0.19%Jun 8, 2026
- Medium5.5OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.17%Jun 3, 2026