Security News

주요 제품 취약점 (3,481건)

기술CVE심각도유형KEV등재일
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal device_del() can…
CVE-2025-21838 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: fix MIDI Streaming descriptor lengths While the MIDI jacks…
CVE-2025-21835 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set The ioctl and sysfs handlers un…
CVE-2025-21814 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero The following problem was encou…
CVE-2025-21806 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling When unload hclge driver, i…
CVE-2025-21802 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlan_vnigroup_init() return value vxlan_init() must check vxlan_v…
CVE-2025-21790 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported following splat…
CVE-2025-21787 5.5 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel Ad…
CVE-2025-21779 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robe…
CVE-2025-21776 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic c…
CVE-2025-21767 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root…
CVE-2025-21745 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() On removal o…
CVE-2025-21744 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execute in al…
CVE-2025-21728 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-valu…
CVE-2025-21716 5.5 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports [1] encount…
CVE-2025-21708 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, …
CVE-2025-21706 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mptcp: handle fastopen disconnect correctly Syzbot was able to trigger a data s…
CVE-2025-21705 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamp maximum hashtable size to INT_MAX Use INT_MAX as ma…
CVE-2025-21648 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it …
CVE-2025-21645 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback commit 1f5664351410…
CVE-2024-58077 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: team: prevent adding a device which is already a team device lower Prevent addi…
CVE-2024-58071 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized If a drive…
CVE-2024-58068 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and invalid access at probe error path Deinitia…
CVE-2024-58063 5.5 CWE-401 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls …
CVE-2024-58061 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free a…
CVE-2024-58058 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Fix ida_free call while not allocated In the rproc_alloc() fu…
CVE-2024-58056 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf() can ret…
CVE-2024-58020 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 <<…
CVE-2024-58017 5.5 CWE-190 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a…
CVE-2024-58016 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Check for adev == NULL Not all devices have an ACPI comp…
CVE-2024-58011 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc A NULL sock poin…
CVE-2024-58009 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc() in eventlog/acpi.c The following failure was reported …
CVE-2024-58005 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint chec…
CVE-2024-57993 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command …
CVE-2024-57981 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft lockup issue was found in the …
CVE-2024-57977 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is…
CVE-2024-57924 5.5 CWE-617 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Avoid WARN() for symlink errors Using WARN() for showing the err…
CVE-2024-56657 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering ip_rt_bug arp link failure may trigger i…
CVE-2024-56647 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In the previous implementation, …
CVE-2024-50298 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel t…
CVE-2024-50014 5.5 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscovered com…
CVE-2024-49994 5.5 CWE-190 —
Redis
In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscovered com…
CVE-2024-49994 5.5 CWE-190 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without casefold feature cannot be mounted with siphash When …
CVE-2024-49968 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkb_resource null dereference This patch fixes a possible nul…
CVE-2024-47809 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: erofs: handle overlapped pclusters out of crafted images properly syzbot report…
CVE-2024-47736 5.5 CWE-667 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set…
CVE-2024-42079 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() sh…
CVE-2024-40945 5.5 CWE-476 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in c…
CVE-2024-36903 5.5 CWE-908 —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index With numa …
CVE-2024-26783 5.5 — —
Linux 커널
In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After gra…
CVE-2023-53292 5.5 CWE-476 —
OpenSSH
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during ad…
CVE-2023-51384 5.5 CWE-284 —
Windows
Windows Mobile Device Management Information Disclosure Vulnerability
CVE-2021-24084 5.5 CWE-59 —
nginx
Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /au…
CVE-2026-107334 5.4 CWE-863 —
nginx
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering …
CVE-2026-95101 5.3 CWE-172 —
Windows
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
CVE-2026-85939 5.3 CWE-1390 —
wolfSSL
src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and …
CVE-2026-84897 5.3 CWE-372 —
Windows
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the rendere…
CVE-2026-84329 5.3 CWE-441 —
Apache HTTP
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard Us…
CVE-2026-79768 5.3 CWE-55 —
Windows
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
CVE-2026-78446 5.3 CWE-416 —
Fortinet
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 a…
CVE-2026-71408 5.3 CWE-770 —