Latest CVE Feed
-
0.0
NACVE-2022-50379
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota enable and quota rescan ioctl When enabling quotas, at btrfs_quota_enable(), after committing the transaction, we change fs_info->quota_root to point to th... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Race Condition
-
0.0
NACVE-2022-50378
In the Linux kernel, the following vulnerability has been resolved: drm/meson: reorder driver deinit sequence to fix use-after-free bug Unloading the driver triggers the following KASAN warning: [ +0.006275] ===========================================... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2022-50377
In the Linux kernel, the following vulnerability has been resolved: ext4: check and assert if marking an no_delete evicting inode dirty In ext4_evict_inode(), if we evicting an inode in the 'no_delete' path, it cannot be raced by another mark_inode_dirt... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Race Condition
-
0.0
NACVE-2022-50376
In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() When insert and remove the orangefs module, there are memory leaked as below: unreferenced object 0xffff88816b0cc000 (si... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2022-50375
In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown lpuart_dma_shutdown tears down lpuart dma, but lpuart_flush_buffer can still occur which in turn tries to acc... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Denial of Service
-
5.5
MEDIUMCVE-2024-26946
In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-26947
In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 ("arm: extend pfn_valid to take into account freed memory map alignment") changes t... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-26948
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dc_state NULL check in dc_state_release [How] Check wheather state is NULL before releasing it.... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-26953
In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reorganized during esp_output (!esp->inline), the pages coming from the original skb fragments are supposed to be rele... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-26959
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix btnxpuart_close Fix scheduling while atomic BUG in btnxpuart_close(), properly purge the transmit queue and free the receive skb. [ 10.973809] BUG: scheduli... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-26963
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is enabled, the module can be runtime suspended when .remove() is called. Do a pm_runtime_get_sync() to make sure module... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
6.5
MEDIUMCVE-2025-48493
The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and... Read more
Affected Products : yii2-redis- Published: Jun. 05, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Cryptography
-
5.5
MEDIUMCVE-2024-36025
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison... Read more
Affected Products : linux_kernel- Published: May. 30, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2022-48643
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot is reporting underflow of nft_counters_enabled counter at nf_tables_addchain() [1], for commit 43... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 18, 2025
-
7.5
HIGHCVE-2025-23252
The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure.... Read more
Affected Products : nvdebug- Published: Jun. 18, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2023-52647
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access When translating source to sink streams in the crossbar subdev, the driver tries to locate the remote subdev c... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
6.1
MEDIUMCVE-2025-50181
urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users ... Read more
- Published: Jun. 19, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Server-Side Request Forgery
-
8.8
HIGHCVE-2025-10533
This vulnerability affects Firefox < 143, Firefox ESR < 115.28, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
5.4
MEDIUM- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
6.5
MEDIUMCVE-2025-10532
This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025