Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 5.5

    MEDIUM
    CVE-2024-46742

    In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL. ... Read more

    Affected Products : linux_kernel
    • Published: Sep. 18, 2024
    • Modified: May. 02, 2025

  • 5.5

    MEDIUM
    CVE-2024-44938

    In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller log2 block, BLKSTOL2() returned 0, causing shift exponent -1 to be negative. This patch fixes the issue ... Read more

    Affected Products : linux_kernel
    • Published: Aug. 26, 2024
    • Modified: May. 02, 2025

  • 5.5

    MEDIUM
    CVE-2024-43904

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and 'plane' variables in the dcn30_apply_idle_power_optimiza... Read more

    Affected Products : linux_kernel
    • Published: Aug. 26, 2024
    • Modified: May. 02, 2025

  • 0.0

    NA
    CVE-2024-42322

    In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1471:27: warning: dereference of noderef expression... Read more

    Affected Products : linux_kernel
    • Published: Aug. 17, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2024-42160

    In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build_fault_attr() - It missed to check validation of fault attrs in parse_options(), let's fix to add check condition in f2fs_build_fault_... Read more

    Affected Products : linux_kernel
    • Published: Jul. 30, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2024-41073

    In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF... Read more

    Affected Products : linux_kernel
    • Published: Jul. 29, 2024
    • Modified: May. 02, 2025

  • 4.4

    MEDIUM
    CVE-2024-38540

    In the Linux kernel, the following vulnerability has been resolved: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Undefined behavior is triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr-... Read more

    Affected Products : linux_kernel
    • Published: Jun. 19, 2024
    • Modified: May. 02, 2025

  • 7.1

    HIGH
    CVE-2024-36908

    In the Linux kernel, the following vulnerability has been resolved: blk-iocost: do not WARN if iocg was already offlined In iocg_pay_debt(), warn is triggered if 'active_list' is empty, which is intended to confirm iocg is active when it has debt. Howev... Read more

    Affected Products : linux_kernel
    • Published: May. 30, 2024
    • Modified: May. 02, 2025

  • 0.0

    NA
    CVE-2024-35943

    In the Linux kernel, the following vulnerability has been resolved: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init devm_kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocati... Read more

    Affected Products : linux_kernel
    • Published: May. 19, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2024-35867

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.... Read more

    Affected Products : linux_kernel
    • Published: May. 19, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2024-35866

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.... Read more

    Affected Products : linux_kernel
    • Published: May. 19, 2024
    • Modified: May. 02, 2025

  • 5.8

    MEDIUM
    CVE-2024-27402

    In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skb_peek() unexpectedly returning NULL... Read more

    Affected Products : linux_kernel
    • Published: May. 17, 2024
    • Modified: May. 02, 2025

  • 5.5

    MEDIUM
    CVE-2024-27054

    In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix double module refcount decrement Once the discipline is associated with the device, deleting the device takes care of decrementing the module's refcount. Doing it manual... Read more

    Affected Products : linux_kernel
    • Published: May. 01, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2024-26928

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.... Read more

    Affected Products : linux_kernel
    • Published: Apr. 28, 2024
    • Modified: May. 02, 2025

  • 5.5

    MEDIUM
    CVE-2024-26744

    In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with this parameter set work. The current behavior is that setting that parameter while loading the ib... Read more

    Affected Products : linux_kernel debian_linux
    • Published: Apr. 03, 2024
    • Modified: May. 02, 2025

  • 5.5

    MEDIUM
    CVE-2024-26686

    In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time a... Read more

    Affected Products : linux_kernel
    • Published: Apr. 03, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2023-52757

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) un... Read more

    Affected Products : linux_kernel
    • Published: May. 21, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2023-52621

    In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the c... Read more

    Affected Products : linux_kernel
    • Published: Mar. 26, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2023-52572

    In the Linux kernel, the following vulnerability has been resolved: cifs: Fix UAF in cifs_demultiplex_thread() There is a UAF when xfstests on cifs: BUG: KASAN: use-after-free in smb2_is_network_name_deleted+0x27/0x160 Read of size 4 at addr ffff88... Read more

    Affected Products : linux_kernel
    • Published: Mar. 02, 2024
    • Modified: May. 02, 2025

  • 7.8

    HIGH
    CVE-2022-49535

    In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfc_issue_els_flogi() fails and returns non-zero status, the node reference count is decremented to t... Read more

    Affected Products : linux_kernel
    • Published: Feb. 26, 2025
    • Modified: May. 02, 2025
Showing 20 of 291132 Results