CVE Database

151104+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-38337
9.1 CRITICAL

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due to …

Jan 19, 2025
CVE-2024-57929
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due …

Jan 19, 2025
CVE-2024-57928
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfs_read_to_pagecache() gets an error from either ->prepare_read() …

Jan 19, 2025
CVE-2024-57927
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib wants to copy some …

Jan 19, 2025
CVE-2024-57926
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err The pointer need to be set …

Jan 19, 2025
CVE-2024-57925
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to …

Jan 19, 2025
CVE-2024-57924
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed …

Jan 19, 2025
CVE-2024-57923
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path Since the input data …

Jan 19, 2025
CVE-2024-57922
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml ceil/floor helpers [Why] Wrapper functions for dcn_bw_ceil2() and …

Jan 19, 2025
CVE-2024-57921
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy trim function When running YouTube videos and …

Jan 19, 2025
CVE-2024-57920

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Jan 19, 2025
CVE-2024-57919
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix divide error in DM plane scale calcs dm_get_plane_scale doesn't take into account plane …

Jan 19, 2025
CVE-2024-57918
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix page fault due to max surface definition mismatch DC driver is using two …

Jan 19, 2025
CVE-2024-57917
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing cpumap During fuzz testing, the following warning was …

Jan 19, 2025
CVE-2024-57916
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling Resolve kernel panic caused by …

Jan 19, 2025
CVE-2024-57915

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Jan 19, 2025
CVE-2024-57914
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpci_irq() may meet …

Jan 19, 2025
CVE-2024-57913
4.7 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Remove WARN_ON in functionfs_bind This commit addresses an issue related to below …

Jan 19, 2025
CVE-2024-57912
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in triggered buffer The 'sample' local struct is used …

Jan 19, 2025
CVE-2024-57911
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer The 'data' array is allocated via …

Jan 19, 2025
CVE-2024-57910
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in triggered buffer The 'buffer' local array is used …

Jan 19, 2025
CVE-2024-57909
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1745: fix information leak in triggered buffer The 'scan' local struct is used …

Jan 19, 2025
CVE-2024-57908
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in triggered buffer The 'buffer' local array is used …

Jan 19, 2025
CVE-2024-57907
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in triggered buffer The 'data' local struct is used …

Jan 19, 2025
CVE-2024-57906
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in triggered buffer The 'buffer' local array is used …

Jan 19, 2025
CVE-2024-57905
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in triggered buffer The 'scan' local struct is used …

Jan 19, 2025
CVE-2024-57904
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocated iio_dev Current implementation of at91_ts_register() calls input_free_deivce() on …

Jan 19, 2025
CVE-2025-21654
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ovl: support encoding fid from inode with no alias Dmitry Safonov reported that a WARN_ON() …

Jan 19, 2025
CVE-2025-21653
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute syzbot found that TCA_FLOW_RSHIFT attribute was not validated. Right shitfing …

Jan 19, 2025
CVE-2025-21652
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlan_get_iflink(). syzbot presented an use-after-free report [0] regarding ipvlan and linkwatch. …

Jan 19, 2025
CVE-2025-21651
4.7 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently, there is a time window between misc …

Jan 19, 2025
CVE-2025-21650
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue The TQP BAR space …

Jan 19, 2025
CVE-2025-21649
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices Currently, HIP08 devices …

Jan 19, 2025
CVE-2025-21648
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamp maximum hashtable size to INT_MAX Use INT_MAX as maximum size for the …

Jan 19, 2025
CVE-2025-21647
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed …

Jan 19, 2025
CVE-2025-21646
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of …

Jan 19, 2025
CVE-2025-21645
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be …

Jan 19, 2025
CVE-2025-21644
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC fails to load, the driver wedges, but …

Jan 19, 2025
CVE-2025-21643
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel async DIO Netfslib needs to be able to handle kernel-initiated asynchronous DIO …

Jan 19, 2025
CVE-2025-21642
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: sched: avoid using current->nsproxy Using the 'net' structure via 'current' is not recommended …

Jan 19, 2025
CVE-2025-21641
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current->nsproxy As mentioned in the previous commit, using the …

Jan 19, 2025
CVE-2025-21640
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, …

Jan 19, 2025
CVE-2025-21639
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rto_min/max: avoid using current->nsproxy As mentioned in a previous commit of this series, …

Jan 19, 2025
CVE-2025-21638
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, …

Jan 19, 2025
CVE-2025-21637
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, …

Jan 19, 2025
CVE-2025-21636
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy As mentioned in a previous commit of this series, …

Jan 19, 2025
CVE-2025-21635
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy As mentioned in a previous commit of this series, …

Jan 19, 2025
CVE-2025-21634
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warning was found: WARNING: CPU: 10 PID: 3486953 at …

Jan 19, 2025
CVE-2025-21633

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Jan 19, 2025
CVE-2025-21632
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "getting" registers The x86 shadow stack support has …

Jan 19, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.