Vulnerability index

Browse CVEs

276 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use of Uninitialized ResourceCWE-908 × clear
Linux Kernel HIGH 7.1
CVE-2024-50035

In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_asyn…

Fix: 5.10.227 / 5.15.168+
Fix from $1,950 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2022-48949

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned…

Fix: 4.14.303 / 4.19.270+
Fix from $1,600 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2024-50014

In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel t…

Fix: 6.10.14 / 6.11.3+
Fix from $1,600 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2024-49990

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initialized w…

Fix: 6.10.14 / 6.11.3+
Fix from $1,600 2024-10-21
Linux Kernel HIGH 7.1
CVE-2024-49900

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1…

Fix: 5.10.227 / 5.15.168+
Fix from $1,950 2024-10-21
Linux Kernel MEDIUM 5.5
CVE-2024-47687

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_d…

Fix: 6.10.13 / 6.11.2+
Fix from $1,600 2024-10-21
Linux Kernel HIGH 7.1
CVE-2024-46865

In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a…

Patch available
Fix from $1,950 2024-09-27
Linux Kernel MEDIUM 5.5
CVE-2024-46784

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently n…

Fix: 6.1.110 / 6.6.51+
Fix from $1,600 2024-09-18
Linux Kernel HIGH 7.1
CVE-2024-44999

In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit…

Fix: 4.19.321 / 5.4.283+
Fix from $1,950 2024-09-04
Linux Kernel MEDIUM 5.5
CVE-2024-45005

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might r…

Fix: 6.6.48 / 6.10.7+
Fix from $1,600 2024-09-04
Linux Kernel HIGH 7.1
CVE-2024-44983

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to a…

Fix: 5.15.166 / 6.1.107+
Fix from $1,950 2024-09-04
Linux Kernel HIGH 7.1
CVE-2024-43815

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stac…

Fix: 6.10.3+
Fix from $1,950 2024-08-17
Linux Kernel MEDIUM 5.5
CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot …

Fix: 4.19.320 / 5.4.282+
Fix from $1,600 2024-08-17
Linux Kernel MEDIUM 5.5
CVE-2024-42312

In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the …

Fix: 4.10 / 4.15+
Fix from $1,600 2024-08-17
Linux Kernel MEDIUM 5.5
CVE-2024-42283

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp conta…

Fix: 5.4.282 / 5.10.224+
Fix from $1,600 2024-08-17
Linux Kernel MEDIUM 5.5
CVE-2024-42272

In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increa…

Fix: 5.10.224 / 5.15.165+
Fix from $1,600 2024-08-17
Linux Kernel HIGH 7.5
CVE-2024-42225

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uniniti…

Fix: 5.15.163 / 6.1.98+
Fix from $1,950 2024-07-30
Linux Kernel HIGH 7.0
CVE-2024-42228

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc In…

Fix: 6.6.39 / 6.9.9+
Fix from $1,950 2024-07-30
Linux Kernel MEDIUM 6.3
CVE-2024-42161

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - U…

Fix: 5.10.222 / 5.15.163+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42128

In the Linux kernel, the following vulnerability has been resolved: leds: an30259a: Use devm_mutex_init() for mutex initialization In this driver L…

Fix: 6.6.39 / 6.9.9+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42129

In the Linux kernel, the following vulnerability has been resolved: leds: mlxreg: Use devm_mutex_init() for mutex initialization In this driver LED…

Fix: 6.1.132 / 6.6.63+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42106

In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported unini…

Fix: 4.19.318 / 5.4.280+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42113

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INT…

Fix: 6.6.39 / 6.9.9+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42096

In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is us…

Fix: 4.19.317 / 5.4.279+
Fix from $1,600 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2024-42063

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot …

Fix: 6.1.97 / 6.6.37+
Fix from $1,600 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2024-42076

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported ker…

Fix: 5.4 / 5.4.279+
Fix from $1,600 2024-07-29
Linux Kernel HIGH 7.1
CVE-2024-41059

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-val…

Fix: 4.19.319 / 5.4.281+
Fix from $1,950 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2024-41052

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count var…

Fix: 6.6.41 / 6.9.10+
Fix from $1,600 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2022-48864

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When cont…

Fix: 5.15.29 / 5.16.15+
Fix from $1,600 2024-07-16
Linux Kernel MEDIUM 5.5
CVE-2022-48807

In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handl…

Fix: 5.15 / 5.15.24+
Fix from $1,600 2024-07-16