Vulnerabilities in linux

13,937 results
Vexday analysis

O Linux apresenta 2 vulnerabilidades catalogadas na base, nenhuma sob ataque ativo no momento e nenhuma com classificação crítica. A fraqueza dominante identificada é CWE-131 (Incorrect Calculation of Buffer Size), sem registros de publicação nos últimos 90 dias, indicando um panorama de risco residual e estável para este fornecedor.

CVE-2025-38120CRITICALnetfilter: nf_set_pipapo_avx2: fix initial map fillEPSS 0.4%CVE-2025-68263CRITICALksmbd: ipc: fix use-after-free in ipc_msg_send_requestEPSS 0.4%CVE-2026-23457HIGHnetfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()EPSS 0.4%CVE-2026-46037HIGHipv4: icmp: validate reply type before using icmp_pointersEPSS 0.4%CVE-2024-57947CRITICALnetfilter: nf_set_pipapo: fix initial map fillEPSS 0.4%CVE-2024-46696CRITICALnfsd: fix potential UAF in nfsd4_cb_getattr_releaseEPSS 0.4%CVE-2026-64208HIGHcrypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checksEPSS 0.4%CVE-2025-39975CRITICALsmb: client: fix wrong index reference in smb2_compound_op()EPSS 0.4%CVE-2025-40204HIGHsctp: Fix MAC comparison to be constant-timeEPSS 0.4%CVE-2022-3533LOWLinux Kernel BPF usdt.c parse_usdt_arg memory leakEPSS 0.4%CVE-2026-53010CRITICALksmbd: fix use-after-free in smb2_open during durable reconnectEPSS 0.4%CVE-2026-53055CRITICALcrypto: hisilicon/sec2 - prevent req used-after-free for secEPSS 0.4%CVE-2025-21676HIGHnet: fec: handle page_pool_dev_alloc_pages errorEPSS 0.4%CVE-2026-64037CRITICALwifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabledEPSS 0.4%CVE-2026-64439CRITICALcrypto: krb5 - filter out async aead implementations at allocEPSS 0.4%CVE-2025-22021CRITICALnetfilter: socket: Lookup orig tuple for IPv6 SNATEPSS 0.4%CVE-2025-71120HIGHSUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verfEPSS 0.4%CVE-2022-49051—net: usb: aqc111: Fix out-of-bounds accesses in RX fixupEPSS 0.4%CVE-2023-2236HIGHUse-after-free in Linux kernel's Performance Events subsystemEPSS 0.4%CVE-2026-31538HIGHsmb: server: make use of smbdirect_socket.recv_io.credits.availableEPSS 0.4%