Security News

주요 제품 취약점 (3,435건)

기술CVE심각도유형KEV등재일
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never f…
CVE-2025-38614 7.8 CWE-674 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-aft…
CVE-2025-38250 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exports_proc As of now nfsd calls …
CVE-2025-38232 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Otherwise, …
CVE-2025-38201 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol A not-so-careful NAT46 BPF progra…
CVE-2025-38192 7.8 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation When cal…
CVE-2025-38162 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped tl;dr: …
CVE-2025-37964 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem wit…
CVE-2025-37785 7.8 CWE-125 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_…
CVE-2025-22083 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling mul…
CVE-2025-22056 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be eithe…
CVE-2025-22015 7.8 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode …
CVE-2025-21999 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: gso: fix ownership in __udp_gso_segment In __udp_gso_segment the skb destr…
CVE-2025-21926 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list child_cfs_r…
CVE-2025-21919 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The iss…
CVE-2025-21887 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a…
CVE-2025-21875 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a …
CVE-2025-21867 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hit…
CVE-2025-21864 7.8 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables, …
CVE-2025-21863 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after…
CVE-2025-21858 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: block: don't revert iter for -EIOCBQUEUED blkdev_read_iter() has a few odd chec…
CVE-2025-21832 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called withou…
CVE-2025-21791 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious…
CVE-2025-21780 7.8 CWE-120 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called …
CVE-2025-21764 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be calle…
CVE-2025-21763 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ovs_vport_cmd_fill…
CVE-2025-21761 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to mld_newpack() mld_newpack() can be called wi…
CVE-2025-21758 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; thi…
CVE-2025-21756 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When w…
CVE-2025-21753 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer revel…
CVE-2025-21738 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_con…
CVE-2025-21731 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASA…
CVE-2025-21727 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and…
CVE-2025-21726 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() R…
CVE-2025-21724 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the so…
CVE-2025-21718 7.8 CWE-362 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fra…
CVE-2025-21704 7.8 CWE-787 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() qdisc_tree_reduce_…
CVE-2025-21703 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In…
CVE-2025-21702 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion A…
CVE-2025-21700 7.8 CWE-416 —
Redis
In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion A…
CVE-2025-21700 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period io_event…
CVE-2025-21655 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroyed If the active performance…
CVE-2024-58086 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verif…
CVE-2024-58083 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wro…
CVE-2024-58079 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Up…
CVE-2024-58072 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync T…
CVE-2024-58013 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we …
CVE-2024-58002 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The current implementation does …
CVE-2024-57996 7.8 CWE-129 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() functio…
CVE-2024-57980 7.8 CWE-415 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consis…
CVE-2024-57979 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing cpumap During fuzz testing, …
CVE-2024-57917 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug…
CVE-2024-56631 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not ca…
CVE-2024-54458 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping(…
CVE-2024-53170 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or …
CVE-2024-53166 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEM_UNINIT's meaning Lonial reported an issue in the BP…
CVE-2024-50164 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to different hooks bpf progs can …
CVE-2024-50063 7.8 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF The fs…
CVE-2024-46786 7.8 CWE-416 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: ensure offloading TID queue exists The resume code path ass…
CVE-2024-27056 7.8 — —
OpenSSL
Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges a…
CVE-2024-0394 7.8 CWE-862 —