Main entries ~3682 :
Date Id Summary Products Score Patch Annotated
2017-08-07 CVE-2006-3635 The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid Register Stack Engine (RSE) state. Linux_kernel 5.5
2016-05-02 CVE-2008-7316 mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length. Linux_kernel 5.5
2017-04-24 CVE-2007-6761 drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trigger an incorrect count value and videobuf leak via unspecified vectors, a different vulnerability than CVE-2010-5321. Linux_kernel 7.8
2017-10-29 CVE-2006-5331 The altivec_unavailable_exception function in arch/powerpc/kernel/traps.c in the Linux kernel before 2.6.19 on 64-bit systems mishandles the case where CONFIG_ALTIVEC is defined and the CPU actually supports Altivec, but the Altivec support was not detected by the kernel, which allows local users to cause a denial of service (panic) by triggering execution of an Altivec instruction. Linux_kernel 5.5
2012-06-21 CVE-2010-4250 Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files. Linux_kernel N/A
2012-06-21 CVE-2011-1023 The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation. Linux_kernel N/A
2012-06-21 CVE-2011-1021 drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347. Linux_kernel N/A
Remaining NVD entries (unprocessed / no code available): ~301148 :
Date Id Summary Products Score Patch
2025-04-08 CVE-2025-26675 Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Windows_10_21h2, Windows_10_22h2, Windows_11_22h2, Windows_11_23h2, Windows_11_24h2, Windows_server_2022, Windows_server_2022_23h2, Windows_server_2025 N/A
2025-04-08 CVE-2025-22013 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE state, including: * Host SVE being discarded unexpectedly due to inconsistent configuration of TIF_SVE and CPACR_ELx.ZEN. This has been seen to result in QEMU crashes where SVE is used by memmove(), as reported by Eric Auger: ... N/A N/A
2025-04-07 CVE-2024-45556 Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. Fastconnect_6900_firmware, Fastconnect_7800_firmware, Immersive_home_3210_platform_firmware, Immersive_home_326_platform_firmware, Ipq5300_firmware, Ipq5302_firmware, Ipq5312_firmware, Ipq5332_firmware, Ipq9008_firmware, Ipq9048_firmware, Ipq9554_firmware, Ipq9570_firmware, Ipq9574_firmware, Qca0000_firmware, Qca8075_firmware, Qca8081_firmware, Qca8082_firmware, Qca8084_firmware, Qca8085_firmware, Qca8386_firmware, Qcf8000_firmware, Qcf8000sfp_firmware, Qcf8001_firmware, Qcn5124_firmware, Qcn6224_firmware, Qcn6402_firmware, Qcn6412_firmware, Qcn6422_firmware, Qcn6432_firmware, Qcn9000_firmware, Qcn9012_firmware, Qcn9013_firmware, Qcn9024_firmware, Qcn9074_firmware, Qcn9160_firmware, Qcn9274_firmware, Qxm8083_firmware, Sd_8_gen1_5g_firmware, Sdm429w_firmware, Sdx65m_firmware, Snapdragon_429_mobile_platform_firmware, Snapdragon_ar1_gen_1_platform_\"luna1\"_firmware, Snapdragon_ar1_gen_1_platform_firmware, Snapdragon_ar2_gen_1_platform_firmware, Snapdragon_wear_4100\+_platform_firmware, Snapdragon_x65_5g_modem\-Rf_system_firmware, Ssg2115p_firmware, Ssg2125p_firmware, Sxr1230p_firmware, Sxr2230p_firmware, Sxr2250p_firmware, Wcd9380_firmware, Wcd9385_firmware, Wcn3620_firmware, Wcn3660b_firmware, Wcn3680b_firmware, Wcn3980_firmware, Wsa8830_firmware, Wsa8832_firmware, Wsa8835_firmware 6.5
2025-04-02 CVE-2025-31477 The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener (e.g. xdg-open on Linux). This was meant to be restricted to a reasonable number of protocols like https or mailto by default. This default restriction was not functional due to improper validation of the allowed protocols, allowing... Plugin\-Shell 9.8
2025-04-01 CVE-2025-21915 In the Linux kernel, the following vulnerability has been resolved: cdx: Fix possible UAF error in driver_override_show() Fixed a possible UAF problem in driver_override_show() in drivers/cdx/cdx.c This function driver_override_show() is part of DEVICE_ATTR_RW, which includes both driver_override_show() and driver_override_store(). These functions can be executed concurrently in sysfs. The driver_override_store() function uses driver_set_override() to update the driver_override value,... Linux_kernel 7.8
2025-04-01 CVE-2025-21942 In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix extent range end unlock in cow_file_range() Running generic/751 on the for-next branch often results in a hang like below. They are both stack by locking an extent. This suggests someone forget to unlock an extent. INFO: task kworker/u128:1:12 blocked for more than 323 seconds. Not tainted 6.13.0-BTRFS-ZNS+ #503 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ... N/A N/A
2025-04-01 CVE-2025-21931 In the Linux kernel, the following vulnerability has been resolved: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 ("hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined) add page poison checks in do_migrate_range in order to make offline hwpoisoned page possible by introducing isolate_lru_page and try_to_unmap for hwpoisoned page. However folio lock must be held before calling try_to_unmap. Add it to fix this problem. Warning will be... N/A N/A