Vulnerabilidades em linux
18.382 resultadosAnálise Vexday
O Linux apresenta 2 vulnerabilidades catalogadas na base, nenhuma sob ataque ativo no momento e nenhuma com classificação crítica. A fraqueza dominante identificada é CWE-131 (Incorrect Calculation of Buffer Size), sem registros de publicação nos últimos 90 dias, indicando um panorama de risco residual e estável para este fornecedor.
CVE-2026-90036CRITICALNFSD: Prevent client use-after-free during blocked-lock reapingEPSS 0.5%CVE-2023-54250HIGHksmbd: avoid out of bounds access in decode_preauth_ctxt()EPSS 0.5%CVE-2025-38734CRITICALnet/smc: fix UAF on smcsk after smc_listen_out()EPSS 0.5%CVE-2025-38057HIGHespintcp: fix skb leaksEPSS 0.5%CVE-2025-38018HIGHnet/tls: fix kernel panic when alloc_page failedEPSS 0.5%CVE-2023-53110HIGHnet/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()EPSS 0.5%CVE-2022-49452HIGHdpaa2-eth: retrieve the virtual address before dma_unmapEPSS 0.5%CVE-2021-47496CRITICALnet/tls: Fix flipped sign in tls_err_abort() callsEPSS 0.5%CVE-2021-47132HIGHmptcp: fix sk_forward_memory corruption on retransmissionEPSS 0.5%CVE-2025-22059HIGHudp: Fix multiple wraparounds of sk->sk_rmem_alloc.EPSS 0.5%CVE-2022-42895MEDIUMInfo Leak in l2cap_core in the Linux KernelEPSS 0.5%CVE-2026-43074HIGHeventpoll: defer struct eventpoll free to RCU grace periodEPSS 0.5%CVE-2025-40337HIGHnet: stmmac: Correctly handle Rx checksum offload errorsEPSS 0.5%CVE-2026-43208CRITICALnet: do not pass flow_id to set_rps_cpu()EPSS 0.5%CVE-2024-53185HIGHsmb: client: fix NULL ptr deref in crypto_aead_setkey()EPSS 0.5%CVE-2025-39841CRITICALscsi: lpfc: Fix buffer free/clear order in deferred receive pathEPSS 0.5%CVE-2024-50152CRITICALsmb: client: fix possible double free in smb2_set_ea()EPSS 0.5%CVE-2024-50085CRITICALmptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflowEPSS 0.5%CVE-2026-63825CRITICALgcov: use atomic counter updates to fix concurrent access crashesEPSS 0.5%CVE-2024-47658HIGHcrypto: stm32/cryp - call finalize with bh disabledEPSS 0.5%