Month: February 2026

Information published. Continue reading CVE-2025-21887 ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up→

Information published. Continue reading CVE-2024-4741 Use After Free with SSL_free_buffers→

Information published. Continue reading CVE-2025-38042 dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn→

Information published. Continue reading CVE-2024-41184 In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1 an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.→

Information published. Continue reading CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed→

Information published. Continue reading CVE-2022-49728 ipv6: Fix signed integer overflow in __ip6_append_data→

Information published. Continue reading CVE-2024-53166 block, bfq: fix bfqq uaf in bfq_limit_depth()→

Information published. Continue reading CVE-2023-34411 The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.→