Skip to content
← All tracked CVEs

Updated 04:00

Medium severity

Medium45d SLA

Our service-level agreement (SLA) gives a medium vulnerability a fix within 45 days of publication. 446 CVEs are tracked here: open, or fixed in the last 30 days.

Status
CVEStatusSummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAsecure-packages-25.11Jul 8, 2026Aug 22, 2026Aug 17, 202640 days
Fixed within SLAsecure-packages-25.11Jul 8, 2026Aug 22, 2026Aug 17, 202640 days
Fixed within SLAsecure-packages-25.11Jul 8, 2026Aug 22, 2026Aug 17, 202640 days
Fixed within SLAsecure-packages-25.11Jul 8, 2026Aug 22, 2026Aug 17, 202640 days
Fixed within SLAath11k EMA/MBSSID beacon template memory leak on parameter setup error pathssecure-packages-25.11Jul 27, 2026Sep 10, 2026Aug 15, 202618 days
Fixed within SLApowerpc/64s: munmap race with PMD migration entries hits VM_BUG_ON in pmdp_huge_get_and_clear_fullsecure-packages-25.11Jul 27, 2026Sep 10, 2026Aug 15, 202618 days
Fixed within SLAlibertas wifi: URBs killed in interrupt context causing sleep-in-atomic bug on TX pathsecure-packages-25.11Jul 27, 2026Sep 10, 2026Aug 15, 202618 days
Fixed within SLADeleting BPF local storage in NMI/reentrant contexts may deadlock via RCU deferralsecure-packages-25.11Jul 27, 2026Sep 10, 2026Aug 15, 202618 days
Fixed within SLAmt76 WiFi driver memory leak from RX queue page_pools on device destroysecure-packages-25.11Jul 27, 2026Sep 10, 2026Aug 15, 202618 days
Fixed within SLADeadlock during station removal: mt7925_roc_abort_sync vs roc_work holding dev->mt76.mutexsecure-packages-25.11Jul 23, 2026Sep 6, 2026Aug 15, 202622 days
Fixed within SLALinux mt76 skb memory leak when mt76_connac_mcu_alloc_sta_req fails in wed_update/key_tlvsecure-packages-25.11Jul 23, 2026Sep 6, 2026Aug 15, 202622 days
Fixed within SLAf2fs GC reads already updated page causing VM_BUG_ON in folio_end_readsecure-packages-25.11Jul 17, 2026Aug 31, 2026Aug 15, 202628 days
Fixed within SLAF2FS data loss from incorrect nat_entry flag use in fsync-checkpoint racesecure-packages-25.11Jul 17, 2026Aug 31, 2026Aug 15, 202628 days
Fixed within SLAvsock/virtio MSG_ZEROCOPY misaccounts pinned pages; last skb skips RLIMIT_MEMLOCK enforcementsecure-packages-25.11Jul 17, 2026Aug 31, 2026Aug 15, 202628 days
Fixed within SLAlm90_alert lacks hwmon_lock; race with sysfs re-enables alert, causing interrupt stormsecure-packages-25.11Aug 12, 2026Sep 26, 2026Aug 14, 20262 days
Fixed within SLAiwlwifi mld: Potential NULL pointer dereference in iwl_mld_remove_link storing link->fw_idsecure-packages-25.11Aug 12, 2026Sep 26, 2026Aug 14, 20262 days
Fixed within SLAMode change race memsetting team->ops leads to NULL deref in team_xmitsecure-packages-25.11Aug 12, 2026Sep 26, 2026Aug 14, 20262 days
Fixed within SLAMSM DRM recover_worker skips recovery when idle, leaving hung GPU state and repeated timeoutssecure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 14, 202610 days
Fixed within SLAath11k: memory leaks in beacon template setup error paths (EMA/MBSSID)secure-packages-26.05Jul 27, 2026Sep 10, 2026Aug 12, 202616 days
Fixed within SLABPF local storage deletion in NMI or reentrant contexts may deadlock via RCU freeingsecure-packages-26.05Jul 27, 2026Sep 10, 2026Aug 12, 202616 days
Fixed within SLAmt76 wifi driver memory leak on sta_wed_update/sta_key_tlv failures after skb allocationsecure-packages-26.05Jul 23, 2026Sep 6, 2026Aug 12, 202620 days
Fixed within SLALinux f2fs data loss when new-file fsync races with checkpoint nat_entry flagssecure-packages-26.05Jul 20, 2026Sep 3, 2026Aug 12, 202623 days
Fixed within SLALinux kernel af_alg AEAD AD length arithmetic overflow during TX buffer size checksecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAdrm/ttm: Infinite LRU walk restoring bulk_move after ttm_bo_swapout() swapout failuresecure-packages-26.05Jul 16, 2026Aug 30, 2026Aug 12, 202627 days
Fixed within SLAio_uring zcrx post-open error handling prematurely frees ctx; page pools may persistsecure-packages-26.05Aug 11, 2026Sep 25, 2026Aug 12, 20261 day
Fixed within SLALinux wifi ath11k: memory leaks in beacon template setup error paths (EMA/MBSSID)secure-packages-rollingJul 27, 2026Sep 10, 2026Aug 12, 202616 days
Fixed within SLALinux kernel: Deadlock deleting BPF local storage in NMI due to RCU deferralsecure-packages-rollingJul 27, 2026Sep 10, 2026Aug 12, 202616 days
Fixed within SLALinux mt76 WiFi driver leaks skb on error path before mt76_mcu_skb_send_msgsecure-packages-rollingJul 23, 2026Sep 6, 2026Aug 12, 202620 days
Fixed within SLAf2fs data loss when fsync of new file races with checkpoint due to nat flagssecure-packages-rollingJul 20, 2026Sep 3, 2026Aug 12, 202623 days
Fixed within SLALinux kernel af_alg AEAD AD length overflow when checking TX buffer sizesecure-packages-rollingAug 10, 2026Sep 24, 2026Aug 12, 20262 days
Fixed within SLAdrm/ttm: Infinite LRU loop on ttm_bo_swapout when swapout failssecure-packages-rollingJul 16, 2026Aug 30, 2026Aug 12, 202627 days
Fixed within SLAsecure-packages-rollingAug 11, 2026Sep 25, 2026Aug 12, 20261 day
Fixed within SLAImageMagick <7.1.2-27 magick CLI memory leak on invalid options enables memory exhaustionsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAHeap buffer over-read in ImageMagick BGR decoder due to missing EOF checks (<7.1.2-27)secure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLALarge JNX files on 32-bit ImageMagick cause integer overflow and heap buffer overwritesecure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAImageMagick <7.1.2-27 heap buffer overwrite in fx operation via crafted argumentsecure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAPre-5.0.8/6.0.0-alpha8 Capstone reduced x86 NULL deref on 3DNow! 0F 0F remote crashsecure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAcJSON <=1.7.19 JSON Patch non-atomic; failed replace/move deletes target memberssecure-packages-rollingAug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAcJSON ≤1.7.19 JSON Patch non-atomic; failed replace/move deletes target memberssecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAcJSON ≤1.7.19: non-atomic JSON Patch lets failed replace/move delete target memberssecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAChrome Android <151.0.7922.109 GPU uninitialized use leaks memory via crafted HTMLsecure-packages-26.05Aug 11, 2026Sep 25, 2026Aug 11, 2026same day
Fixed within SLAChrome Android GPU uninitialized-use pre-151.0.7922.109 lets compromised renderer leak memory via crafted HTMLsecure-packages-25.11Aug 10, 2026Sep 24, 2026Aug 11, 20261 day
Fixed within SLAUninitialized GPU use in Chrome Android leaks process memory via crafted HTML (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Sep 24, 2026Aug 11, 20261 day
Fixed within SLAChrome pre-151.0.7922.72 SiteIsolation bug let compromised renderer bypass isolation via crafted HTMLsecure-packages-25.11Aug 10, 2026Sep 24, 2026Aug 11, 20261 day
Fixed within SLAWindows Chrome Updater bug allows local UI spoofing via malicious file pre-151.0.7922.72secure-packages-rollingAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAAndroid Chrome <151.0.7922.72 GPU side-channel leaks cross-origin data via crafted HTMLsecure-packages-rollingAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAChrome Cast prior to 151.0.7922.72 cross-origin data leak via crafted HTML pagesecure-packages-rollingAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAGoogle Chrome pre-151.0.7922.72 CSS bug allows remote UXSS via crafted HTMLsecure-packages-rollingAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAGetUserMedia cross-origin data leak in Chrome before 151.0.7922.72 via compromised renderer using crafted HTML pagesecure-packages-rollingAug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAGoogle Chrome Credential Management vulnerability enables remote UI spoofing via crafted HTML pre-151.0.7922.72secure-packages-rollingAug 5, 2026Sep 19, 2026Aug 11, 20266 days