Latest CVE Feed
-
5.5
MEDIUMCVE-2023-23455
atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).... Read more
- EPSS Score: %0.02
- Published: Jan. 12, 2023
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2023-23454
cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid ... Read more
- EPSS Score: %0.05
- Published: Jan. 12, 2023
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2023-23394
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_20h2 windows_10_21h2 windows_10_22h2 windows_server_2022 +7 more products- EPSS Score: %0.54
- Published: Mar. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-23006
In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Mar. 01, 2023
- Modified: Mar. 19, 2025
-
5.5
MEDIUMCVE-2023-23000
In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Mar. 01, 2023
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2023-22129
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris execut... Read more
- EPSS Score: %0.03
- Published: Oct. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-2166
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial ... Read more
Affected Products : linux_kernel- EPSS Score: %0.01
- Published: Apr. 19, 2023
- Modified: Feb. 05, 2025
-
5.5
MEDIUMCVE-2023-20240
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. These vulnerabilities are due to an out-... Read more
- EPSS Score: %0.03
- Published: Nov. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-1095
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this result... Read more
- EPSS Score: %0.02
- Published: Feb. 28, 2023
- Modified: Mar. 18, 2025
-
5.5
MEDIUMCVE-2023-0190
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service.... Read more
- EPSS Score: %0.08
- Published: Apr. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2022-49925
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ib_core_cleanup() KASAN reported a null-ptr-deref error: KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] CPU: 1 PID: 379 H... Read more
Affected Products : linux_kernel- Published: May. 01, 2025
- Modified: May. 07, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49922
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() nfcmrvl_i2c_nci_send() will be called by nfcmrvl_nci_send(), and skb should be freed in nfcmrvl_i2c_nci_send(). However... Read more
Affected Products : linux_kernel- Published: May. 01, 2025
- Modified: May. 07, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49915
In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dyna... Read more
Affected Products : linux_kernel- Published: May. 01, 2025
- Modified: May. 07, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49731
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() In an unlikely (and probably wrong?) case that the 'ppi' parameter of ata_host_alloc_pinfo() points to an array starti... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 07, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49682
In the Linux kernel, the following vulnerability has been resolved: xtensa: Fix refcount leak bug in time.c In calibrate_ccount(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 11, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49678
In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 11, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2022-49664
In the Linux kernel, the following vulnerability has been resolved: tipc: move bc link creation back to tipc_node_create Shuang Li reported a NULL pointer dereference crash: [] BUG: kernel NULL pointer dereference, address: 0000000000000068 [] RIP:... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 11, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49615
In the Linux kernel, the following vulnerability has been resolved: ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error The initial settings will be written before the codec probe function. But, the rt711->component doesn't be assigned y... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 11, 2025
-
5.5
MEDIUMCVE-2022-49544
In the Linux kernel, the following vulnerability has been resolved: ipw2x00: Fix potential NULL dereference in libipw_xmit() crypt and crypt->ops could be null, so we need to checking null before dereference... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Feb. 26, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2022-49477
In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: Fix refcount leak in aries_audio_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. If extcon_find_ed... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2025
- Modified: Mar. 17, 2025
- Vuln Type: Memory Corruption