Browse CVEs

HIGH 7.8 CVE-2022-49779 In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case In __u… Linux Kernel 5.4.225 / 5.10.156+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2022-49763 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix use-after-free in ntfs_attr_find() Patch series "ntfs: fix bugs about… Linux Kernel 4.9.334 / 4.14.300+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2022-49770 In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the… Linux Kernel 4.19.268 / 5.4.226+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2025-37796 In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed… Linux Kernel 5.4.293 / 5.10.237+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2025-37786 In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_se… Linux Kernel 6.6.88 / 6.12.25+ Fix from $1,9502025-05-01 HIGH 7.0 CVE-2025-37776 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in sm… Linux Kernel 6.6.88 / 6.12.25+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2025-37777 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free … Linux Kernel 6.6.101 / 6.12.26+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2025-37778 In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->us… Linux Kernel 6.1.135 / 6.6.88+ Fix from $1,9502025-05-01 MEDIUM 5.5 CVE-2025-37765 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix ttm_bo_delayed_delete oops Fix an oops in ttm_bo_delaye… Linux Kernel 5.4.293 / 5.10.237+ Fix from $1,6002025-05-01 HIGH 7.8 CVE-2025-37763 In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment j… Linux Kernel 6.12.25 / 6.14.4+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2025-37750 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 … Linux Kernel 5.11 / 5.16+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2025-37738 In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we shou… Linux Kernel 5.4.293 / 5.10.237+ Fix from $1,9502025-05-01 HIGH 7.8 CVE-2025-23142 In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendms… Linux Kernel 3.19 / 4.5+ Fix from $1,9502025-05-01 HIGH 7.5 CVE-2025-30194 When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that trigger… Mitigation only Fix from $1,9502025-04-29 HIGH 8.8 CVE-2025-24252 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 1… Ipados 2.4 / 13.7.5+ Fix from $1,9502025-04-29 MEDIUM 5.7 CVE-2025-31197 The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5… Ipados 2.4 / 13.7.5+ Fix from $1,6002025-04-29 HIGH 7.8 CVE-2025-1046 Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c… Keyshot 2025.1+ Fix from $1,9502025-04-23 HIGH 8.8 CVE-2025-1048 Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arb… S1 57.22-61162 / 83.1-61240+ Fix from $1,9502025-04-23 HIGH 7.8 CVE-2025-37838 In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due t… Linux Kernel 6.1.135 / 6.6.88+ Fix from $1,9502025-04-18 HIGH 8.8 CVE-2021-47668 In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), d… Linux Kernel 4.4.254 / 4.9.254+ Fix from $1,9502025-04-17 HIGH 7.8 CVE-2021-47669 In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), … Linux Kernel 4.14.218 / 4.19.171+ Fix from $1,9502025-04-17 HIGH 8.8 CVE-2021-47670 In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb),… Linux Kernel 4.19.171 / 5.4.93+ Fix from $1,9502025-04-17 HIGH 8.1 CVE-2025-1290 A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allo… Chrome Os No fix yet Fix from $1,9502025-04-17 MEDIUM 6.5 CVE-2025-1704 ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenrol… Chrome Os No fix yet Fix from $1,6002025-04-16 HIGH 8.8 CVE-2025-3620 Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 135.0.7049.95+ Fix from $1,9502025-04-16 HIGH 7.8 CVE-2025-22126 In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs li… Linux Kernel 6.1.135 / 6.6.88+ Fix from $1,9502025-04-16 HIGH 7.8 CVE-2025-22097 In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initia… Linux Kernel 5.15.180 / 6.1.134+ Fix from $1,9502025-04-16 CRITICAL 9.8 CVE-2025-22088 In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_ce… Linux Kernel 6.1.134 / 6.6.87+ Fix from $2,3002025-04-16 HIGH 7.8 CVE-2025-22083 In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_… Linux Kernel 6.6.87 / 6.12.23+ Fix from $1,9502025-04-16 HIGH 7.8 CVE-2025-22085 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-us… Linux Kernel 6.12.23 / 6.13.11+ Fix from $1,9502025-04-16