Vulnerabilities in linux

13,937 results
Vexday analysis

O Linux apresenta 2 vulnerabilidades catalogadas na base, nenhuma sob ataque ativo no momento e nenhuma com classificação crítica. A fraqueza dominante identificada é CWE-131 (Incorrect Calculation of Buffer Size), sem registros de publicação nos últimos 90 dias, indicando um panorama de risco residual e estável para este fornecedor.

CVE-2024-53144HIGHBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LEEPSS 0.4%CVE-2026-31533CRITICALnet/tls: fix use-after-free in -EBUSY error path of tls_do_encryptionEPSS 0.4%CVE-2021-47476MEDIUMcomedi: ni_usb6501: fix NULL-deref in command pathsEPSS 0.4%CVE-2025-38471CRITICALtls: always refresh the queue when reading sockEPSS 0.4%CVE-2022-1353—A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged useEPSS 0.4%CVE-2026-53049CRITICALgfs2: add some missing log lockingEPSS 0.4%CVE-2025-68806HIGHksmbd: fix buffer validation by including null terminator size in EA lengthEPSS 0.4%CVE-2026-43296HIGHocteontx2-af: Workaround SQM/PSE stalls by disabling stickyEPSS 0.4%CVE-2026-43232HIGHnet: wan: farsync: Fix use-after-free bugs caused by unfinished taskletsEPSS 0.4%CVE-2025-38124HIGHnet: fix udp gso skb_segment after pull from frag_listEPSS 0.4%CVE-2026-63893HIGHthunderbolt: property: Reject u32 wrap in tb_property_entry_valid()EPSS 0.4%CVE-2024-56749HIGHdlm: fix dlm_recover_members refcount on errorEPSS 0.4%CVE-2024-27058HIGHtmpfs: fix race on handling dquot rbtreeEPSS 0.4%CVE-2026-31631HIGHrxrpc: Fix buffer overread in rxgk_do_verify_authenticator()EPSS 0.4%CVE-2026-64024CRITICALtcp: fix stale per-CPU tcp_tw_isn leak enabling ISN predictionEPSS 0.4%CVE-2023-53827HIGHBluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}EPSS 0.4%CVE-2025-38563—perf/core: Prevent VMA split of buffer mappingsEPSS 0.4%CVE-2026-64534CRITICALnvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error pathEPSS 0.4%CVE-2026-68118HIGHtcp: challenge ACK for non-exact RST in SYN-RECEIVEDEPSS 0.4%CVE-2026-53217HIGHnet: mvpp2: sync RX data at the hardware packet offsetEPSS 0.4%