Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12,175

CVE-2024-26624

kernel: af_unix: fix lockdep positive in sk_diag_dump_icons()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 7.1 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2021-47084

kernel: hamradio: defer ax25 kfree after unregister_netdev

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 6.7 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2024-26609

kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-0584

kernel: refcnt uaf issue when receiving igmp query packet in igmp_start_timer

Do not use this CVE as it is duplicate of CVE-2023-6932

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-7122

kernel: slab-use-after-free in iommufd_test

A slab-use-after-free vulnerability was found in the Linux kernel 6.6. Invoking the iommufd_test call in the iommufd driver can result in a crash and kernel panic.

CVSS 3.1 · 6.2 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-4128

kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route

** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

CVSS 3.1 · 7.8 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Aus Rhel E4s and 4 more
CVE-2023-4610

kernel: KASAN: slab-use-after-free Read in radix_tree_lookup while fuzzing Linux kernel 6.4-rc6 with syzkaller.

The SRCU code was added in upstream kernel v6.4-rc1 and removed before v6.4. This bug only existed in development kernels. Please see https://lore.kernel.org/all/ZTKVfoQZplpB8rki@casper.infradead.org and https://bugzilla.suse.com/show_bug.cgi?id=1215932 for more information.

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2023-35825

kernel: r592: race condition leading to use-after-free in r592_remove()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 6.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhev Hypervisor
CVE-2022-1836

kernel: Concurrency use-after-free in floppy's raw_cmd

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2021-20200

kernel: close race between munmap() and expand_upwards()/downwards()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2019-18392

virglrenderer: double free in the vrend_renderer_transfer_write_iov function

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

CVSS 3.0 · 3.8 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2018-12938

openslp: Double free in slp_buffer:SLPBufferRealloc() may allow a remote attacker to execute arbitrary code

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17833. Reason: This candidate is a duplicate of CVE-2017-17833. Notes: All CVE users should reference CVE-2017-17833 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 8.6 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2010-3410

webkit: use-after-free vulnerability when using SVG nested elements

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1825. Reason: This candidate is a duplicate of CVE-2010-1825. Notes: All CVE users should reference CVE-2010-1825 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 3.7 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2010-3409

webkit: use-after-free vulnerability in SVG use

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1824. Reason: This candidate is a duplicate of CVE-2010-1824. Notes: All CVE users should reference CVE-2010-1824 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 3.7 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2010-3408

webkit: use-after-free vulnerability in document.close()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1823. Reason: This candidate is a duplicate of CVE-2010-1823. Notes: All CVE users should reference CVE-2010-1823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 3.7 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—