Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP station,EPSS 0.2%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcp_rmem be set below 4096 We can hit a division by zero crash in tcp_rcvbuf_grow() and tcp_rcv_EPSS 0.2%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion andEPSS 0.2%Oct 6, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcms_free_timer() brcms_free_timer() calls brcms_del_timer() which uses the non-syncEPSS 0.2%Oct 6, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeroEPSS 0.4%Oct 6, 2026
- Unknownurllib3 is an HTTP client library for Python.Sep 29, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-bytEPSS 0.2%Sep 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops the stale namespaces in each gEPSS 0.6%Sep 25, 2026
- High7.1ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%Aug 24, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(), when an exact match for a tunnEPSS 0.6%Jun 25, 2026
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() , , the , , and ipset types, and access after eithEPSS 0.4%Jun 25, 2026
- Low3.3Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET/AF_INET6 socket mediation.EPSS 0.1%May 28, 2026
- Low3.3Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 socket mediation code.EPSS 0.1%May 28, 2026
- Medium5.5Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications.EPSS 0.1%May 28, 2026
- High8.4An issue was discovered in Canonical Multipass before version 1.16.3.EPSS 0.4%May 28, 2026
- High7.8An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199.EPSS 0.2%May 28, 2026
- Medium6.0Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial…Apr 10, 2026
- Medium6.5In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade.Apr 10, 2026
- Low2.7In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting.Apr 9, 2026
- Low2.7In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting.Apr 9, 2026
- Critical9.1In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests t…Apr 9, 2026
- Critical9.1In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from…Apr 9, 2026
- Critical9.1Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and…Apr 9, 2026
- High7.1Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’.Apr 3, 2026
- Medium6.9Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’.Apr 3, 2026