Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the l…EPSS 0.1%Sep 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no r…EPSS 0.1%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if register is null Nicholas Carlini reported a bug when v…EPSS 0.1%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() In stmmac_tso_xmit(), if the DMA mapping of…EPSS 0.1%Sep 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpf_convert_ctx_accesses() rewrites an atomi…EPSS 0.1%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit iEPSS 0.2%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vduse_validate_config() only checks the upper bound of vq_align.EPSS 0.2%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-bytEPSS 0.2%Sep 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops the stale namespaces in each gEPSS 0.6%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure.EPSS 0.1%Sep 25, 2026
- High7.4In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xive_init_ipis() fails (e.g.EPSS 0.1%Sep 24, 2026
- Unknownperf/x86/intel/pt: Fix stop/start with no updateEPSS 0.2%Sep 24, 2026
- UnknownExpat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted.Sep 19, 2026
- High7.8ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution VulnerabilitySep 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY device registration can fail before a cdev is allocated.EPSS 0.2%Sep 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPU_DM_MAX_DISPLAY_INDEX is 31.EPSS 0.2%Sep 17, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED.EPSS 0.2%Sep 17, 2026
- Critical9.8NFSv4.1: zero referring call lists before decodingEPSS 0.5%Sep 17, 2026
- High7.8media: cx231xx: reject geometry changes while the VBI queue is busyEPSS 0.2%Sep 16, 2026
- High8.8drm/amdkfd: Add TLB flush after MES queue eviction/suspensionEPSS 0.2%Sep 16, 2026
- Medium5.2ZDI-26-699: Linux Kernel NTFS3 Out-of-Bounds Read Information Disclosure VulnerabilitySep 14, 2026
- Medium5.2ZDI-26-698: Linux Kernel NTFS3 Out-Of-Bounds Read Information Disclosure VulnerabilitySep 14, 2026
- High7.3ZDI-26-697: Linux Kernel NTFS3 Out-Of-Bounds Read Information Disclosure VulnerabilitySep 14, 2026
- High8.5ZDI-26-693: Linux Kernel ksmbd Share Configuration Race Condition Remote Code Execution VulnerabilitySep 14, 2026
- High8.5ZDI-26-695: Linux Kernel NFSv4 Server Race Condition Remote Code Execution VulnerabilityEPSS 0.7%Sep 14, 2026