Search CVE reports


Toggle filters

11 – 20 of 37185 results

Status is adjusted based on your filters.


CVE-2025-20053

Medium priority
Needs evaluation

Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.

1 affected package

intel-microcode

Package 18.04 LTS
intel-microcode Needs evaluation
Show less packages

CVE-2025-38500

Medium priority
Ignored

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation, thus...

142 affected packages

linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11, linux-hwe-5.13...

Package 18.04 LTS
linux-hwe Ignored
linux-hwe-5.4 Not affected
linux-hwe-5.8 Not in release
linux-hwe-5.11 Not in release
linux-hwe-5.13 Not in release
linux-hwe-5.15 Not in release
linux-hwe-5.19 Not in release
linux-hwe-6.2 Not in release
linux-hwe-6.5 Not in release
linux-hwe-6.8 Not in release
linux-hwe-6.11 Not in release
linux-hwe-6.14 Not in release
linux-hwe-edge Ignored
linux-lts-xenial Not in release
linux-kvm Not affected
linux-allwinner-5.19 Not in release
linux-aws-5.0 Ignored
linux-aws-5.3 Ignored
linux-aws-5.4 Not affected
linux-aws-5.8 Not in release
linux-aws-5.11 Not in release
linux-aws-5.13 Not in release
linux-aws-5.15 Not in release
linux-aws-5.19 Not in release
linux-aws-6.2 Not in release
linux-aws-6.5 Not in release
linux-aws-6.8 Not in release
linux-aws-6.14 Not in release
linux-aws-hwe Not in release
linux-azure Ignored
linux-azure-4.15 Not affected
linux-azure-5.3 Ignored
linux-azure-5.4 Not affected
linux-azure-5.8 Not in release
linux-azure-5.11 Not in release
linux-azure-5.13 Not in release
linux-azure-5.15 Not in release
linux-azure-5.19 Not in release
linux-azure-6.2 Not in release
linux-azure-6.5 Not in release
linux-azure-6.8 Not in release
linux-azure-6.11 Not in release
linux-azure-fde Not in release
linux-azure-fde-5.15 Not in release
linux-azure-fde-5.19 Not in release
linux-azure-fde-6.2 Not in release
linux-azure-nvidia Not in release
linux-bluefield Not in release
linux-azure-edge Ignored
linux-fips Not affected
linux-aws-fips Not affected
linux-azure-fips Not affected
linux-gcp-fips Not affected
linux-gcp Ignored
linux-gcp-4.15 Not affected
linux-gcp-5.3 Ignored
linux-gcp-5.4 Not affected
linux-gcp-5.8 Not in release
linux-gcp-5.11 Not in release
linux-gcp-5.13 Not in release
linux-gcp-5.15 Not in release
linux-gcp-5.19 Not in release
linux-gcp-6.2 Not in release
linux-gcp-6.5 Not in release
linux-gcp-6.8 Not in release
linux-gcp-6.11 Not in release
linux-gcp-6.14 Not in release
linux-gke Not in release
linux-gke-4.15 Ignored
linux-gke-5.4 Ignored
linux-gke-5.15 Not in release
linux-gkeop Not in release
linux-gkeop-5.4 Ignored
linux-gkeop-5.15 Not in release
linux-ibm Not in release
linux-ibm-5.4 Not affected
linux-ibm-5.15 Not in release
linux-ibm-6.8 Not in release
linux-intel-5.13 Not in release
linux-intel-iotg Not in release
linux-intel-iotg-5.15 Not in release
linux-iot Not in release
linux-intel-iot-realtime Not in release
linux-lowlatency Not in release
linux-lowlatency-hwe-5.15 Not in release
linux-lowlatency-hwe-5.19 Not in release
linux-lowlatency-hwe-6.2 Not in release
linux-lowlatency-hwe-6.5 Not in release
linux-lowlatency-hwe-6.8 Not in release
linux-lowlatency-hwe-6.11 Not in release
linux-nvidia Not in release
linux-nvidia-6.2 Not in release
linux-nvidia-6.5 Not in release
linux-nvidia-6.8 Not in release
linux-nvidia-6.11 Not in release
linux-nvidia-lowlatency Not in release
linux-nvidia-tegra Not in release
linux-nvidia-tegra-5.15 Not in release
linux-nvidia-tegra-igx Not in release
linux-oracle-5.0 Ignored
linux-oracle-5.3 Ignored
linux-oracle-5.4 Not affected
linux-oracle-5.8 Not in release
linux-oracle-5.11 Not in release
linux-oracle-5.13 Not in release
linux-oracle-5.15 Not in release
linux-oracle-6.5 Not in release
linux-oracle-6.8 Not in release
linux-oracle-6.14 Not in release
linux-oem Ignored
linux-oem-5.6 Not in release
linux-oem-5.10 Not in release
linux-oem-5.13 Not in release
linux-oem-5.14 Not in release
linux-oem-5.17 Not in release
linux-oem-6.0 Not in release
linux-oem-6.1 Not in release
linux-oem-6.5 Not in release
linux-oem-6.8 Not in release
linux-oem-6.11 Not in release
linux-oem-6.14 Not in release
linux-raspi2 Ignored
linux-raspi-5.4 Not affected
linux-raspi-realtime Not in release
linux-riscv Not in release
linux-riscv-5.8 Not in release
linux-riscv-5.11 Not in release
linux-riscv-5.15 Not in release
linux-riscv-5.19 Not in release
linux-riscv-6.5 Not in release
linux-riscv-6.8 Not in release
linux-riscv-6.14 Not in release
linux-starfive-5.19 Not in release
linux-starfive-6.2 Not in release
linux-starfive-6.5 Not in release
linux-xilinx-zynqmp Not in release
linux Not affected
linux-aws Not affected
linux-oracle Not affected
linux-raspi Not in release
linux-realtime Not in release
linux-intel Not in release
Show all 142 packages Show less packages

CVE-2024-38805

Medium priority
Needs evaluation

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

1 affected package

edk2

Package 18.04 LTS
edk2 Needs evaluation
Show less packages

CVE-2025-8885

Medium priority
Needs evaluation

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java on All (API modules) allows Excessive Allocation. This vulnerability is associated with program...

1 affected package

bouncycastle

Package 18.04 LTS
bouncycastle Needs evaluation
Show less packages

CVE-2025-55158

Medium priority
Needs evaluation

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operations, an error during evaluation can trigger a double-free in...

1 affected package

vim

Package 18.04 LTS
vim Needs evaluation
Show less packages

CVE-2025-55157

Medium priority
Needs evaluation

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference...

1 affected package

vim

Package 18.04 LTS
vim Needs evaluation
Show less packages

CVE-2025-51824

Medium priority
Needs evaluation

libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart_open() function at drivers/usart/zephyr.c.

1 affected package

libcsp

Package 18.04 LTS
libcsp Needs evaluation
Show less packages

CVE-2025-51823

Medium priority
Needs evaluation

libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name)...

1 affected package

libcsp

Package 18.04 LTS
libcsp Needs evaluation
Show less packages

CVE-2025-38499

Medium priority
Vulnerable

In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify there is that clone won't expose something hidden by a...

142 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 18.04 LTS
linux Ignored
linux-hwe Ignored
linux-hwe-5.4 Ignored
linux-hwe-5.8 Not in release
linux-hwe-5.11 Not in release
linux-hwe-5.13 Not in release
linux-hwe-5.15 Not in release
linux-hwe-5.19 Not in release
linux-hwe-6.2 Not in release
linux-hwe-6.5 Not in release
linux-hwe-6.8 Not in release
linux-hwe-6.11 Not in release
linux-hwe-6.14 Not in release
linux-hwe-edge Ignored
linux-lts-xenial Not in release
linux-kvm Ignored
linux-allwinner-5.19 Not in release
linux-aws-5.0 Ignored
linux-aws-5.3 Ignored
linux-aws-5.4 Ignored
linux-aws-5.8 Not in release
linux-aws-5.11 Not in release
linux-aws-5.13 Not in release
linux-aws-5.15 Not in release
linux-aws-5.19 Not in release
linux-aws-6.2 Not in release
linux-aws-6.5 Not in release
linux-aws-6.8 Not in release
linux-aws-6.14 Not in release
linux-aws-hwe Not in release
linux-azure Ignored
linux-azure-4.15 Ignored
linux-azure-5.3 Ignored
linux-azure-5.4 Ignored
linux-azure-5.8 Not in release
linux-azure-5.11 Not in release
linux-azure-5.13 Not in release
linux-azure-5.15 Not in release
linux-azure-5.19 Not in release
linux-azure-6.2 Not in release
linux-azure-6.5 Not in release
linux-azure-6.8 Not in release
linux-azure-6.11 Not in release
linux-azure-fde Not in release
linux-azure-fde-5.15 Not in release
linux-azure-fde-5.19 Not in release
linux-azure-fde-6.2 Not in release
linux-azure-nvidia Not in release
linux-bluefield Not in release
linux-azure-edge Ignored
linux-fips Vulnerable
linux-aws-fips Vulnerable
linux-azure-fips Vulnerable
linux-gcp-fips Vulnerable
linux-gcp Ignored
linux-gcp-4.15 Ignored
linux-gcp-5.3 Ignored
linux-gcp-5.4 Ignored
linux-gcp-5.8 Not in release
linux-gcp-5.11 Not in release
linux-gcp-5.13 Not in release
linux-gcp-5.15 Not in release
linux-gcp-5.19 Not in release
linux-gcp-6.2 Not in release
linux-gcp-6.5 Not in release
linux-gcp-6.8 Not in release
linux-gcp-6.11 Not in release
linux-gcp-6.14 Not in release
linux-gke Not in release
linux-gke-4.15 Ignored
linux-gke-5.4 Ignored
linux-gke-5.15 Not in release
linux-gkeop Not in release
linux-gkeop-5.4 Ignored
linux-gkeop-5.15 Not in release
linux-ibm Not in release
linux-ibm-5.4 Ignored
linux-ibm-5.15 Not in release
linux-ibm-6.8 Not in release
linux-intel-5.13 Not in release
linux-intel-iotg Not in release
linux-intel-iotg-5.15 Not in release
linux-iot Not in release
linux-intel-iot-realtime Not in release
linux-lowlatency Not in release
linux-lowlatency-hwe-5.15 Not in release
linux-lowlatency-hwe-5.19 Not in release
linux-lowlatency-hwe-6.2 Not in release
linux-lowlatency-hwe-6.5 Not in release
linux-lowlatency-hwe-6.8 Not in release
linux-lowlatency-hwe-6.11 Not in release
linux-nvidia Not in release
linux-nvidia-6.2 Not in release
linux-nvidia-6.5 Not in release
linux-nvidia-6.8 Not in release
linux-nvidia-6.11 Not in release
linux-nvidia-lowlatency Not in release
linux-nvidia-tegra Not in release
linux-nvidia-tegra-5.15 Not in release
linux-nvidia-tegra-igx Not in release
linux-oracle-5.0 Ignored
linux-oracle-5.3 Ignored
linux-oracle-5.4 Ignored
linux-oracle-5.8 Not in release
linux-oracle-5.11 Not in release
linux-oracle-5.13 Not in release
linux-oracle-5.15 Not in release
linux-oracle-6.5 Not in release
linux-oracle-6.8 Not in release
linux-oracle-6.14 Not in release
linux-oem Ignored
linux-oem-5.6 Not in release
linux-oem-5.10 Not in release
linux-oem-5.13 Not in release
linux-oem-5.14 Not in release
linux-oem-5.17 Not in release
linux-oem-6.0 Not in release
linux-oem-6.1 Not in release
linux-oem-6.5 Not in release
linux-oem-6.8 Not in release
linux-oem-6.11 Not in release
linux-oem-6.14 Not in release
linux-raspi2 Ignored
linux-raspi-5.4 Ignored
linux-raspi-realtime Not in release
linux-riscv Not in release
linux-riscv-5.8 Not in release
linux-riscv-5.11 Not in release
linux-riscv-5.15 Not in release
linux-riscv-5.19 Not in release
linux-riscv-6.5 Not in release
linux-riscv-6.8 Not in release
linux-riscv-6.14 Not in release
linux-starfive-5.19 Not in release
linux-starfive-6.2 Not in release
linux-starfive-6.5 Not in release
linux-xilinx-zynqmp Not in release
linux-aws Ignored
linux-oracle Ignored
linux-raspi Not in release
linux-realtime Not in release
linux-intel Not in release
Show all 142 packages Show less packages

CVE-2025-8851

Medium priority
Needs evaluation

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 18.04 LTS
tiff Needs evaluation
qtwebengine-opensource-src Needs evaluation
texmaker Needs evaluation
gdal Not affected
neuron Needs evaluation
Show less packages