VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
287448 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-37882 | redhat_vex | kernel: Linux kernel: xHCI driver isochronous event handling race condition leading to data loss or UAF | fixed: 1256 known affected: 274 | 2026-07-30T09:27:51+00:00 | Vulnerability · Source |
| CVE-2025-37885 | redhat_vex | kernel: KVM: x86: Reset IRTE to host control if *new* route isn't postable | known affected: 232 known not affected: 42 | 2026-07-30T09:27:50+00:00 | Vulnerability · Source |
| CVE-2026-4948 | redhat_vex | firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis-authorization | fixed: 6 known affected: 16 under investigation: 1 | 2026-07-30T09:27:48+00:00 | Vulnerability · Source |
| CVE-2025-21718 | redhat_vex | kernel: net: rose: fix timer races against user threads | known not affected: 274 | 2026-07-30T09:27:30+00:00 | Vulnerability · Source |
| CVE-2026-55223 | redhat_vex | c3p0: c3p0: Remote code execution via deserialization vulnerability | known affected: 5 known not affected: 7 | 2026-07-30T09:27:28+00:00 | Vulnerability · Source |
| CVE-2025-21735 | redhat_vex | kernel: NFC: nci: Add bounds checking in nci_hci_create_pipe() | known not affected: 274 | 2026-07-30T09:27:23+00:00 | Vulnerability · Source |
| CVE-2025-37957 | redhat_vex | kernel: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception | known affected: 184 known not affected: 90 | 2026-07-30T09:23:50+00:00 | Vulnerability · Source |
| CVE-2025-38146 | redhat_vex | kernel: Linux kernel Open vSwitch: Denial of Service via malformed MPLS packets | known affected: 232 known not affected: 42 | 2026-07-30T09:23:47+00:00 | Vulnerability · Source |
| CVE-2025-38083 | redhat_vex | kernel: net_sched: prio: fix a race in prio_tune() | known affected: 246 known not affected: 28 | 2026-07-30T09:23:45+00:00 | Vulnerability · Source |
| CVE-2025-37997 | redhat_vex | kernel: netfilter: ipset: fix region locking in hash types | known affected: 274 | 2026-07-30T09:23:41+00:00 | Vulnerability · Source |
| CVE-2025-38102 | redhat_vex | kernel: VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | known affected: 260 known not affected: 14 | 2026-07-30T09:23:40+00:00 | Vulnerability · Source |
| CVE-2025-38095 | redhat_vex | kernel: Linux kernel dma-buf: Denial of Service via memory reordering | known affected: 184 known not affected: 90 | 2026-07-30T09:23:37+00:00 | Vulnerability · Source |
| CVE-2025-38118 | redhat_vex | kernel: Linux kernel: Bluetooth MGMT use-after-free vulnerability allows privilege escalation | known affected: 232 known not affected: 42 | 2026-07-30T09:23:36+00:00 | Vulnerability · Source |
| CVE-2025-38154 | redhat_vex | kernel: Linux kernel: Use-after-free in BPF sockmap can lead to denial of service and privilege escalation | fixed: 1256 known affected: 184 known not affected: 90 | 2026-07-30T09:23:28+00:00 | Vulnerability · Source |
| CVE-2025-38060 | redhat_vex | kernel: Linux kernel: BPF verifier security bypass due to incorrect state handling | known affected: 260 known not affected: 14 | 2026-07-30T09:23:22+00:00 | Vulnerability · Source |
| CVE-2025-38078 | redhat_vex | kernel: Linux kernel: Use-After-Free vulnerability in PCM OSS layer due to race condition | known affected: 274 | 2026-07-30T09:23:16+00:00 | Vulnerability · Source |
| CVE-2025-38002 | redhat_vex | kernel: io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() | known not affected: 274 | 2026-07-30T09:23:15+00:00 | Vulnerability · Source |
| CVE-2025-37996 | redhat_vex | kernel: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() | known not affected: 274 | 2026-07-30T09:23:11+00:00 | Vulnerability · Source |
| CVE-2025-38018 | redhat_vex | kernel: Linux kernel: Local Denial of Service due to NULL pointer dereference in net/tls | known affected: 184 known not affected: 90 | 2026-07-30T09:23:10+00:00 | Vulnerability · Source |
| CVE-2025-38106 | redhat_vex | kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free | fixed: 1224 known affected: 22 known not affected: 90 | 2026-07-30T09:23:09+00:00 | Vulnerability · Source |
| CVE-2025-38064 | redhat_vex | kernel: virtio: break and reset virtio devices on device_shutdown() | known affected: 274 | 2026-07-30T09:23:03+00:00 | Vulnerability · Source |
| CVE-2025-38120 | redhat_vex | kernel: netfilter: nf_set_pipapo_avx2: fix initial map fill | known affected: 184 known not affected: 90 | 2026-07-30T09:22:59+00:00 | Vulnerability · Source |
| CVE-2025-37954 | redhat_vex | kernel: smb: client: Avoid race in open_cached_dir with lease breaks | known affected: 184 known not affected: 90 | 2026-07-30T09:22:56+00:00 | Vulnerability · Source |
| CVE-2025-38161 | redhat_vex | kernel: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | known affected: 232 known not affected: 42 | 2026-07-30T09:22:54+00:00 | Vulnerability · Source |
| CVE-2025-38028 | redhat_vex | kernel: Linux kernel: Privilege escalation via race condition in NFS/localio | known affected: 76 known not affected: 198 | 2026-07-30T09:22:51+00:00 | Vulnerability · Source |
| CVE-2025-37977 | redhat_vex | kernel: scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set | known not affected: 274 | 2026-07-30T09:22:51+00:00 | Vulnerability · Source |
| CVE-2025-37973 | redhat_vex | kernel: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation | known affected: 226 known not affected: 48 | 2026-07-30T09:22:42+00:00 | Vulnerability · Source |
| CVE-2025-21789 | redhat_vex | kernel: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths | known not affected: 274 | 2026-07-30T09:22:40+00:00 | Vulnerability · Source |
| CVE-2025-38035 | redhat_vex | kernel: nvmet-tcp: don't restore null sk_state_change | known affected: 232 known not affected: 42 | 2026-07-30T09:22:40+00:00 | Vulnerability · Source |
| CVE-2025-38087 | redhat_vex | kernel: net/sched: fix use-after-free in taprio_dev_notifier | fixed: 891 known affected: 22 known not affected: 90 | 2026-07-30T09:22:33+00:00 | Vulnerability · Source |
| CVE-2025-38108 | redhat_vex | kernel: net_sched: red: fix a race in __red_change() | known affected: 274 | 2026-07-30T09:19:13+00:00 | Vulnerability · Source |
| CVE-2025-38084 | redhat_vex | kernel: mm/hugetlb: unshare page tables during VMA split, not before | fixed: 612 known affected: 90 known not affected: 22 | 2026-07-30T09:19:11+00:00 | Vulnerability · Source |
| CVE-2025-38107 | redhat_vex | kernel: Linux kernel: Race condition in network scheduler can cause denial of service and data compromise. | known affected: 232 known not affected: 42 | 2026-07-30T09:19:07+00:00 | Vulnerability · Source |
| CVE-2025-38057 | redhat_vex | kernel: espintcp: fix skb leaks | known affected: 232 known not affected: 42 | 2026-07-30T09:19:04+00:00 | Vulnerability · Source |
| CVE-2025-37959 | redhat_vex | kernel: bpf: Scrub packet on bpf_redirect_peer | known affected: 274 | 2026-07-30T09:19:02+00:00 | Vulnerability · Source |
| CVE-2025-38024 | redhat_vex | kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution | fixed: 1435 known affected: 22 known not affected: 90 | 2026-07-30T09:18:59+00:00 | Vulnerability · Source |
| CVE-2025-38051 | redhat_vex | kernel: smb: client: Fix use-after-free in cifs_fill_dirent | fixed: 1643 known affected: 184 known not affected: 98 | 2026-07-30T09:18:51+00:00 | Vulnerability · Source |
| CVE-2025-38141 | redhat_vex | kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting | fixed: 1224 known affected: 22 known not affected: 90 | 2026-07-30T09:18:47+00:00 | Vulnerability · Source |
| CVE-2025-38079 | redhat_vex | kernel: crypto: algif_hash - fix double free in hash_accept | fixed: 1801 known affected: 22 known not affected: 17 | 2026-07-30T09:18:42+00:00 | Vulnerability · Source |
| CVE-2025-38124 | redhat_vex | kernel: net: fix udp gso skb_segment after pull from frag_list | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-30T09:18:40+00:00 | Vulnerability · Source |
| CVE-2025-38116 | redhat_vex | kernel: wifi: ath12k: fix uaf in ath12k_core_init() | fixed: 612 known affected: 22 known not affected: 90 | 2026-07-30T09:18:37+00:00 | Vulnerability · Source |
| CVE-2025-38075 | redhat_vex | kernel: Linux kernel: Denial of Service due to NULL pointer dereference in iSCSI target NOPIN timer handling | fixed: 303 known affected: 174 known not affected: 14 | 2026-07-30T09:18:36+00:00 | Vulnerability · Source |
| CVE-2026-66010 | redhat_vex | dompurify: DOMPurify: Cross-Site Scripting (XSS) via custom element attribute bypass | known affected: 64 known not affected: 1 under investigation: 29 | 2026-07-30T09:18:29+00:00 | Vulnerability · Source |
| CVE-2025-38012 | redhat_vex | kernel: sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator | fixed: 309 known not affected: 198 | 2026-07-30T09:18:22+00:00 | Vulnerability · Source |
| CVE-2025-38085 | redhat_vex | kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | fixed: 1690 known affected: 64 known not affected: 9 | 2026-07-30T09:18:22+00:00 | Vulnerability · Source |
| CVE-2025-38115 | redhat_vex | kernel: Linux kernel: Local Denial of Service in network scheduler | known affected: 274 | 2026-07-30T09:18:18+00:00 | Vulnerability · Source |
| CVE-2025-38110 | redhat_vex | kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | fixed: 891 known affected: 22 known not affected: 90 | 2026-07-30T09:18:12+00:00 | Vulnerability · Source |
| CVE-2025-37988 | redhat_vex | kernel: fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() | known affected: 118 known not affected: 156 | 2026-07-30T09:18:09+00:00 | Vulnerability · Source |
| CVE-2025-38117 | redhat_vex | kernel: Bluetooth: MGMT: Protect mgmt_pending list with its own lock | known affected: 274 | 2026-07-30T09:18:07+00:00 | Vulnerability · Source |
| CVE-2025-38127 | redhat_vex | kernel: ice: fix Tx scheduler error handling in XDP callback | fixed: 303 known affected: 146 known not affected: 42 | 2026-07-30T09:18:04+00:00 | Vulnerability · Source |