KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() ntfs_lookup_inode_by_name() returns MFT references read from directory index entries on disk. These values are…
Przepełnienie bufora w jądrze Linuxa w NTFS3 umożliwia zdalne wykonanie kodu.
In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head indx_insert_into_root() promotes a full resident $INDEX_ROOT into $INDEX_ALLOCATION and copies all non-last resident…
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow indx_find_buffer() recursively descends the B+ tree index with no depth limit. A crafted NTFS image with circular…
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() When ntfs_map_runlist_nolock() needs to look up the attribute extent containing a target VCN (ctx_needs_reset ==…
In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via show_sys_files and written from userspace, the volume is corrupted and, because…
In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send error nat_keepalive_send() frees the keepalive skb whenever the IPv4 or IPv6 send helper reports an error. That cleanup is only correct…
In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5sig_info kfree past RCU grace period in tcp_connect The md5+ao reconciliation in tcp_connect() (net/ipv4/tcp_output.c) has two symmetric branches: if (needs_md5)…
In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmet_rdma_use_inline_sg() maps the host-controlled inline data offset into the per-command inline scatterlist. The bounds check…
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers nvmet_execute_auth_receive() trusts the AUTH_RECEIVE allocation length after checking only that it is nonzero and matches the transfer…
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if (neras && *neras <= v->fec->roots) fio->erasures[(*neras)++] = i; This allows *neras to…
Przepełnienie bufora w jądrze Linuxa umożliwia zdalne wykonanie kodu przez iSCSI.
In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it scsiback_get_pend_req() obtains a command tag and returns a vscsibk_pend whose embedded se_cmd has only been…
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE core_scsi3_emulate_pro_register_and_move() maps the PERSISTENT RESERVE OUT parameter list with…
In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag_count is greater than 1. In that case the buffers remain DMA mapped by page pool and…
Brak walidacji długości pakietu w jądrze Linux umożliwia zdalne wykonanie kodu.
Błąd w rt_spin_unlock() w jądrze Linux umożliwia wykorzystanie UAF po zwolnieniu blokady.
Błąd w kernelu Linux związany z obsługą sk_msg umożliwia nieprawidłowe zarządzanie pamięcią.
In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs a per-buffer-queue-descriptor header_buf_addr at post time and reads the split header back…
In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fill_from_part() fill_from_part() computes the size of a directory entry in size_t but stores it in a __u32. An entry length near U32_MAX…
In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REPLY from a peer into the bio of an outstanding read request. The peer-supplied payload…
In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Commit 9a05475cebdd ("ipvs: avoid kmem_cache_zalloc in ip_vs_conn_new") changed ip_vs_conn_new() to allocate an ip_vs_conn object with…
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport offsets. The app code for TCP was assuming IPv4 network header even after the…
Realokacja nagłówka w ipvs w jądrze Linux może prowadzić do nieprzewidzianego zachowania.
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SET_SPARSE, SET_ZERO_DATA and SET_COMPRESSION operate on an open SMB handle but call VFS xattr, fallocate or fileattr helpers with the…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-72188 In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() ntfs_lookup_inode_by_name() returns MFT… |
Wysoki priorytet |
CVSS 9,1EPSS 0,5 % | ||
| CVE-2026-72191 Przepełnienie bufora w jądrze Linuxa w NTFS3 umożliwia zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,7 % | ||
| CVE-2026-72192 In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head indx_insert_into_root() promotes a full resident… |
Wysoki priorytet |
CVSS 9,8EPSS 0,74 % | ||
| CVE-2026-72194 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow indx_find_buffer() recursively descends the B+… |
Wysoki priorytet |
CVSS 9,8EPSS 0,8 % | ||
| CVE-2026-72185 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() When ntfs_map_runlist_nolock() needs to look up… |
Wysoki priorytet |
CVSS 9,8EPSS 0,67 % | ||
| CVE-2026-72186 In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via… |
Wysoki priorytet |
CVSS 9,1EPSS 0,5 % | ||
| CVE-2026-72137 In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send error nat_keepalive_send() frees the keepalive skb whenever the IPv4 or… |
Wysoki priorytet |
CVSS 9,8EPSS 0,67 % | ||
| CVE-2026-72139 In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5sig_info kfree past RCU grace period in tcp_connect The md5+ao reconciliation in tcp_connect()… |
Wysoki priorytet |
CVSS 9,8EPSS 0,63 % | ||
| CVE-2026-72129 In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmet_rdma_use_inline_sg() maps the host-controlled inline data… |
Wysoki priorytet |
CVSS 9,8EPSS 0,71 % | ||
| CVE-2026-72130 In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers nvmet_execute_auth_receive() trusts the AUTH_RECEIVE allocation… |
Wysoki priorytet |
CVSS 9,8EPSS 0,8 % | ||
| CVE-2026-72098 In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if (neras && *neras <=… |
Wysoki priorytet |
CVSS 9,8EPSS 0,74 % | ||
| CVE-2026-72084 Przepełnienie bufora w jądrze Linuxa umożliwia zdalne wykonanie kodu przez iSCSI. |
Wysoki priorytet |
CVSS 9,8EPSS 0,75 % | ||
| CVE-2026-72085 In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it scsiback_get_pend_req() obtains a command… |
Wysoki priorytet |
CVSS 9,3EPSS 0,18 % | ||
| CVE-2026-72083 In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE core_scsi3_emulate_pro_register_and_move() maps… |
Wysoki priorytet |
CVSS 9,8EPSS 0,72 % | ||
| CVE-2026-72064 In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag_count… |
Wysoki priorytet |
CVSS 9,8EPSS 0,65 % | ||
| CVE-2026-72065 Brak walidacji długości pakietu w jądrze Linux umożliwia zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,73 % | ||
| CVE-2026-72069 Błąd w rt_spin_unlock() w jądrze Linux umożliwia wykorzystanie UAF po zwolnieniu blokady. |
Wysoki priorytet |
CVSS 9,8EPSS 0,73 % | ||
| CVE-2026-72041 Błąd w kernelu Linux związany z obsługą sk_msg umożliwia nieprawidłowe zarządzanie pamięcią. |
Wysoki priorytet |
CVSS 9,8EPSS 0,76 % | ||
| CVE-2026-72046 In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-split and HW-GRO The DQO RX datapath programs a… |
Wysoki priorytet |
CVSS 9,8EPSS 0,67 % | ||
| CVE-2026-72033 In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fill_from_part() fill_from_part() computes the size of a directory… |
Wysoki priorytet |
CVSS 9,8EPSS 0,79 % | ||
| CVE-2026-72014 In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recv_dless_read() receives a P_DATA_REPLY from a peer into… |
Wysoki priorytet |
CVSS 9,8EPSS 0,72 % | ||
| CVE-2026-72020 In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Commit 9a05475cebdd ("ipvs: avoid kmem_cache_zalloc… |
Wysoki priorytet |
CVSS 9,8EPSS 0,71 % | ||
| CVE-2026-68477 In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6 transport… |
Wysoki priorytet |
CVSS 9,8EPSS 0,71 % | ||
| CVE-2026-68476 Realokacja nagłówka w ipvs w jądrze Linux może prowadzić do nieprzewidzianego zachowania. |
Wysoki priorytet |
CVSS 9,8EPSS 0,71 % | ||
| CVE-2026-68457 In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SET_SPARSE, SET_ZERO_DATA and SET_COMPRESSION operate on an open… |
Wysoki priorytet |
CVSS 9,1EPSS 0,7 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 4.11.2026, 14:21 UTC – 4.11.2026, 17:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.