VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
287117 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-40307 | redhat_vex | kernel: exfat: validate cluster allocation bits of the allocation bitmap | known affected: 184 known not affected: 90 | 2026-07-30T08:43:07+00:00 | Vulnerability · Source |
| CVE-2025-40249 | redhat_vex | kernel: Kernel: Use-after-free in GPIO character device allows privilege escalation or denial of service | fixed: 309 known not affected: 198 | 2026-07-30T08:43:07+00:00 | Vulnerability · Source |
| CVE-2025-40304 | redhat_vex | kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. | fixed: 2311 known affected: 22 known not affected: 42 | 2026-07-30T08:42:59+00:00 | Vulnerability · Source |
| CVE-2025-40269 | redhat_vex | kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service | fixed: 2286 known affected: 47 known not affected: 17 | 2026-07-30T08:42:57+00:00 | Vulnerability · Source |
| CVE-2026-59998 | redhat_vex | openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory | fixed: 3 known affected: 41 | 2026-07-30T08:42:55+00:00 | Vulnerability · Source |
| CVE-2025-40319 | redhat_vex | kernel: bpf: Sync pending IRQ work before freeing ring buffer | known affected: 232 known not affected: 42 | 2026-07-30T08:42:50+00:00 | Vulnerability · Source |
| CVE-2025-40362 | redhat_vex | kernel: Linux kernel (ceph): Incorrect authorization allows privilege escalation in multifs clusters | known affected: 260 known not affected: 14 | 2026-07-30T08:42:49+00:00 | Vulnerability · Source |
| CVE-2025-40301 | redhat_vex | kernel: Linux kernel: Information disclosure and denial of service in Bluetooth HCI event handling | fixed: 616 known not affected: 198 | 2026-07-30T08:42:48+00:00 | Vulnerability · Source |
| CVE-2025-38590 | redhat_vex | kernel: net/mlx5e: Remove skb secpath if xfrm state is not found | known affected: 14 known not affected: 260 | 2026-07-30T08:40:39+00:00 | Vulnerability · Source |
| CVE-2025-40250 | redhat_vex | kernel: net/mlx5: Clean up only new IRQ glue on request_irq() failure | known affected: 198 known not affected: 76 | 2026-07-30T08:39:14+00:00 | Vulnerability · Source |
| CVE-2025-40331 | redhat_vex | kernel: sctp: Prevent TOCTOU out-of-bounds write | known affected: 232 known not affected: 42 | 2026-07-30T08:38:48+00:00 | Vulnerability · Source |
| CVE-2025-40277 | redhat_vex | kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | fixed: 2311 known affected: 22 known not affected: 42 | 2026-07-30T08:38:47+00:00 | Vulnerability · Source |
| CVE-2025-40273 | redhat_vex | kernel: NFSD: free copynotify stateid in nfs4_free_ol_stateid() | known affected: 184 known not affected: 90 | 2026-07-30T08:38:47+00:00 | Vulnerability · Source |
| CVE-2025-40324 | redhat_vex | kernel: NFSD: Fix crash in nfsd4_read_release() | known affected: 246 known not affected: 28 | 2026-07-30T08:38:41+00:00 | Vulnerability · Source |
| CVE-2025-40350 | redhat_vex | kernel: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ | known affected: 198 known not affected: 76 | 2026-07-30T08:38:39+00:00 | Vulnerability · Source |
| CVE-2025-40297 | redhat_vex | kernel: net: bridge: fix use-after-free due to MST port state bypass | known affected: 246 known not affected: 28 | 2026-07-30T08:38:37+00:00 | Vulnerability · Source |
| CVE-2025-40291 | redhat_vex | kernel: io_uring: fix regbuf vector size truncation | known affected: 76 known not affected: 198 | 2026-07-30T08:38:34+00:00 | Vulnerability · Source |
| CVE-2025-40309 | redhat_vex | kernel: Bluetooth: SCO: Fix UAF on sco_conn_free | known affected: 274 | 2026-07-30T08:38:33+00:00 | Vulnerability · Source |
| CVE-2025-68167 | redhat_vex | kernel: gpiolib: fix invalid pointer access in debugfs | known affected: 90 known not affected: 184 | 2026-07-30T08:38:28+00:00 | Vulnerability · Source |
| CVE-2025-40292 | redhat_vex | kernel: virtio-net: fix received length check in big packets | known affected: 198 known not affected: 76 | 2026-07-30T08:38:27+00:00 | Vulnerability · Source |
| CVE-2025-40336 | redhat_vex | kernel: drm/gpusvm: fix hmm_pfn_to_map_order() usage | known affected: 184 known not affected: 90 | 2026-07-30T08:38:26+00:00 | Vulnerability · Source |
| CVE-2026-59999 | redhat_vex | openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options | fixed: 3 known affected: 41 | 2026-07-30T08:38:24+00:00 | Vulnerability · Source |
| CVE-2025-40334 | redhat_vex | kernel: drm/amdgpu: validate userq buffer virtual address and size | known not affected: 274 | 2026-07-30T08:38:24+00:00 | Vulnerability · Source |
| CVE-2025-40261 | redhat_vex | kernel: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | known affected: 232 known not affected: 42 | 2026-07-30T08:38:21+00:00 | Vulnerability · Source |
| CVE-2025-40258 | redhat_vex | kernel: mptcp: fix race condition in mptcp_schedule_work() | fixed: 2230 known affected: 22 known not affected: 48 | 2026-07-30T08:38:20+00:00 | Vulnerability · Source |
| CVE-2025-40284 | redhat_vex | kernel: Bluetooth: MGMT: cancel mesh send timer when hdev removed | known affected: 184 known not affected: 90 | 2026-07-30T08:38:12+00:00 | Vulnerability · Source |
| CVE-2025-40242 | redhat_vex | kernel: gfs2: Fix unlikely race in gdlm_put_lock | known affected: 198 known not affected: 76 | 2026-07-30T08:38:10+00:00 | Vulnerability · Source |
| CVE-2025-40244 | redhat_vex | kernel: hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() | known affected: 14 known not affected: 260 | 2026-07-30T08:38:08+00:00 | Vulnerability · Source |
| CVE-2025-40240 | redhat_vex | kernel: sctp: avoid NULL dereference when chunk data buffer is missing | fixed: 2366 known affected: 22 known not affected: 64 | 2026-07-30T08:38:04+00:00 | Vulnerability · Source |
| CVE-2025-40283 | redhat_vex | kernel: Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF | known affected: 246 known not affected: 28 | 2026-07-30T08:38:03+00:00 | Vulnerability · Source |
| CVE-2025-40302 | redhat_vex | kernel: media: videobuf2: forbid remove_bufs when legacy fileio is active | known affected: 184 known not affected: 90 | 2026-07-30T08:38:02+00:00 | Vulnerability · Source |
| CVE-2025-40280 | redhat_vex | kernel: tipc: Fix use-after-free in tipc_mon_reinit_self() | known affected: 232 known not affected: 42 | 2026-07-30T08:37:59+00:00 | Vulnerability · Source |
| CVE-2025-40343 | redhat_vex | kernel: nvmet-fc: avoid scheduling association deletion twice | known affected: 260 known not affected: 14 | 2026-07-30T08:37:58+00:00 | Vulnerability · Source |
| CVE-2025-40344 | redhat_vex | kernel: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM | known affected: 184 known not affected: 90 | 2026-07-30T08:37:54+00:00 | Vulnerability · Source |
| CVE-2025-40271 | redhat_vex | kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. | fixed: 2410 known affected: 22 known not affected: 20 | 2026-07-30T08:37:53+00:00 | Vulnerability · Source |
| CVE-2025-40328 | redhat_vex | kernel: smb: client: fix potential UAF in smb2_close_cached_fid() | known affected: 184 known not affected: 90 | 2026-07-30T08:37:50+00:00 | Vulnerability · Source |
| CVE-2025-40251 | redhat_vex | kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | fixed: 1868 known affected: 22 known not affected: 90 | 2026-07-30T08:37:47+00:00 | Vulnerability · Source |
| CVE-2025-40323 | redhat_vex | kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released | known affected: 232 known not affected: 42 | 2026-07-30T08:37:44+00:00 | Vulnerability · Source |
| CVE-2025-40252 | redhat_vex | kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | fixed: 150 known affected: 212 known not affected: 14 | 2026-07-30T08:37:42+00:00 | Vulnerability · Source |
| CVE-2025-68168 | redhat_vex | kernel: jfs: fix uninitialized waitqueue in transaction manager | known affected: 14 known not affected: 260 | 2026-07-30T08:37:40+00:00 | Vulnerability · Source |
| CVE-2025-40270 | redhat_vex | kernel: mm, swap: fix potential UAF issue for VMA readahead | known affected: 14 known not affected: 260 | 2026-07-30T08:37:37+00:00 | Vulnerability · Source |
| CVE-2025-40320 | redhat_vex | kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound | fixed: 309 known affected: 106 known not affected: 92 | 2026-07-30T08:37:36+00:00 | Vulnerability · Source |
| CVE-2025-40318 | redhat_vex | kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once | fixed: 1224 known affected: 22 known not affected: 90 | 2026-07-30T08:37:33+00:00 | Vulnerability · Source |
| CVE-2025-40216 | redhat_vex | kernel: io_uring/rsrc: don't rely on user vaddr alignment | known affected: 184 known not affected: 90 | 2026-07-30T08:37:32+00:00 | Vulnerability · Source |
| CVE-2025-68360 | redhat_vex | kernel: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks | known affected: 184 known not affected: 90 | 2026-07-30T08:37:17+00:00 | Vulnerability · Source |
| CVE-2025-68340 | redhat_vex | kernel: team: Move team device type change at the end of team_port_add | known affected: 108 known not affected: 166 | 2026-07-30T08:37:16+00:00 | Vulnerability · Source |
| CVE-2025-68232 | redhat_vex | kernel: Linux kernel: Denial of Service in veth due to race condition | known affected: 14 known not affected: 260 | 2026-07-30T08:37:15+00:00 | Vulnerability · Source |
| CVE-2025-68208 | redhat_vex | kernel: bpf: account for current allocated stack depth in widen_imprecise_scalars() | known affected: 184 known not affected: 90 | 2026-07-30T08:37:10+00:00 | Vulnerability · Source |
| CVE-2025-68347 | redhat_vex | kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events | fixed: 150 known not affected: 226 | 2026-07-30T08:37:02+00:00 | Vulnerability · Source |
| CVE-2025-68349 | redhat_vex | kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid | fixed: 2416 known affected: 36 | 2026-07-30T08:37:02+00:00 | Vulnerability · Source |