Skip to content
← All tracked CVEs

Updated 17:00

last 30 days

910 fixed within SLA

CVEStatusSeveritySummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAMediumdamos_walk vs kdamond_fn exit race leads unhandled requests and indefinite wait deadlocksecure-packages-26.05Jun 19, 2026Aug 3, 2026Jul 30, 202642 days
Fixed within SLAMediumUnloading snd_soc_nau8821 while jdet_work pending triggers kernel crashsecure-packages-26.05Jun 17, 2026Aug 1, 2026Jul 30, 202643 days
Fixed within SLAMediumLinux GFS2 gfs2_fill_super error-path memory leaks: kthreads and quota bitmap on RW transitionsecure-packages-26.05Jun 17, 2026Aug 1, 2026Jul 30, 202643 days
Fixed within SLAHighpowerpc/pgtable-frag: pte_frag_destroy leaves folio active, causing bad page state on exitsecure-packages-25.11Jul 27, 2026Aug 11, 2026Jul 30, 20263 days
Fixed within SLAHighBPF verifier miscomputes delta when src==dst, causing linked reg verifier-vs-runtime mismatchsecure-packages-25.11Jul 27, 2026Aug 11, 2026Jul 30, 20263 days
Fixed within SLAHighOffloaded BPF map/prog info query triggers UAF via get_net during netns teardownsecure-packages-25.11Jul 27, 2026Aug 11, 2026Jul 30, 20263 days
Fixed within SLAHighAMD DRM: Out-of-bounds read in dp_get_eq_aux_rd_interval with 8 LTTPR repeaterssecure-packages-25.11Jul 27, 2026Aug 11, 2026Jul 30, 20263 days
Fixed within SLAHighLinux vdpa: Unlocked driver_override access during __driver_attach() match() causes UAFsecure-packages-25.11Jul 27, 2026Aug 11, 2026Jul 30, 20263 days
Fixed within SLAHighBPF verifier fails to simulate ld_{abs,ind} subprog failure path causing unsafe returnssecure-packages-25.11Jul 27, 2026Aug 11, 2026Jul 30, 20263 days
Fixed within SLAHighBPF sock_ops dst==src macro bug causes OOB read and kernel pointer leaksecure-packages-25.11Jul 23, 2026Aug 7, 2026Jul 30, 20267 days
Fixed within SLAHighGreybus gb_raw use-after-free on write after disconnect triggers kernel panicsecure-packages-25.11Jul 17, 2026Aug 1, 2026Jul 30, 202613 days
Fixed within SLAHighPerl ≤5.43.10 pack/unpack S_measure_struct overflow allows out-of-bounds heap read via large repeat countssecure-packages-rollingJul 16, 2026Jul 31, 2026Jul 29, 202613 days
Fixed within SLAMediumUnbound 1.20–1.25.1 counter not decremented in serve-expired discard-timeout; clients droppedsecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound ≤1.25.1 heap overflow processing absent second name in multi-dname RDATA (SOA) during DNSSEC validationsecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.22-1.25.1 DoQ remote crash: libngtcp2 assert via -1 application error on STREAM_DATA_BLOCKEDsecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.7.0–1.25.1 DNSCrypt cert/key count mismatch causes unauthenticated UDP-triggered crashsecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAHighUnbound 1.23–1.25.1 dns-error-reporting Report-Channel parsing bug allows remote DoSsecure-packages-rollingJul 27, 2026Aug 11, 2026Jul 29, 20262 days
Fixed within SLAMediumRemote Unbound 1.10.0–1.25.1 crash DoS with serve-expired + respip CNAME override, NULL derefsecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLALowUnbound unbound-control view_local_data(s) omits default-protected zones; protected queries leak to public DNSsecure-packages-rollingJul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLALowUnbound 1.18–1.25 PROXYv2 computes DNS cookie from proxy IP, enabling off-path UDP spoofingsecure-packages-rollingJul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.25.0–1.25.1 respip/dns64 shallow view-name copy corrupts memory under pressuresecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLACriticalUnbound 1.4.22–1.25.1 SO_REUSEPORT per-thread port partitioning leaks entropy, enabling DNS cache poisoningsecure-packages-rollingJul 27, 2026Aug 3, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound <=1.25.1: 0.0.0.0/::0 glue triggers unwanted-reply threshold DoS cache flushessecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.7.0–1.25.1 accepts BOGUS XFR primary hostname, enabling spoofed zone/RPZ takeoversecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound respip/RPZ ignores DNSSEC status, rewriting BOGUS A/AAAA to INSECURE spoofable redirectssecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound DoT TLS server name dangling pointer during handshake triggers crash/DoS (1.15–1.25.1)secure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.22.0–1.25.1 bypasses max-global-quota via deeply nested DNSSEC query amplificationsecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLALowUnbound 1.6.0–1.25.1 DNSSEC wildcard replay causes cache poisoning on serve-expiredsecure-packages-rollingJul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLAHighUnbound 1.7–1.25.1 RRSIG.Labels/aggressive NSEC flaw enables cross-sibling DNS cache poisoningsecure-packages-rollingJul 27, 2026Aug 11, 2026Jul 29, 20262 days
Fixed within SLALowUnbound 1.13.2-1.25.1: harden-below-nxdomain off-by-one shadows stub/forward zones under DNSSECsecure-packages-rollingJul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLAMediumlibunbound up to 1.25.1 crash: unwanted-reply-threshold triggers disallowed libworker_alloc_cleanup callsecure-packages-rollingJul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLALowUnbound 1.16.2–1.25.1 A/AAAA glue ghost domain TTL extension via cache overwritesecure-packages-rollingJul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLALowUnbound 1.22–1.25.1 DoQ termination miscount inflates waiters, causing service degradation and silent dropssecure-packages-rollingJul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLAHighHeap overflow in Unbound DNSCrypt TCP reply path enables DoS (1.9.0–1.25.1)secure-packages-rollingJul 27, 2026Aug 11, 2026Jul 29, 20262 days
Fixed within SLAHighUnbound 1.22–1.25.1: first DoQ streams bypass per-stream quic-size, enabling memory DoSsecure-packages-rollingJul 27, 2026Aug 11, 2026Jul 29, 20262 days
Fixed within SLAMediumHeap buffer overflow in audiofile 0.3.6 FilePOSIX::read triggers DoS via crafted WAV (sfconvert)secure-packages-rollingJun 15, 2026Jul 30, 2026Jul 29, 202644 days
Fixed within SLAHighPerl <=5.43.10 pack/unpack integer overflow in S_measure_struct enables out-of-bounds heap readsecure-packages-26.05Jul 16, 2026Jul 31, 2026Jul 29, 202613 days
Fixed within SLAMediumUnbound 1.20–1.25 misconfigured serve-expired discard-timeout fails counter decrement, drops duplicate clientssecure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound ≤1.25.1 heap overflow canonicalizing RRSIG-covered PX/RP/MINFO/SOA with missing second namesecure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnauthenticated DoQ client crashes Unbound 1.22–1.25.1 via libngtcp2 assertion from -1 errorsecure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.7.0–1.25.1 DNSCrypt DoS from cert/secret mismatch; 0xdb-triggered UDP crashsecure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAHighUnbound 1.23–1.25.1 EDNS Report-Channel length bug causes stack overwrite, crash with dns-error-reportingsecure-packages-26.05Jul 27, 2026Aug 11, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.10.0–1.25.1 DoS: serve-expired with respip/RPZ CNAME triggers NULL pointer crashsecure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLALowUnbound 1.6.0–1.25.1: unbound-control creates view local zones without defaults; protected queries leaksecure-packages-26.05Jul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLALowUnbound PROXYv2 server cookie keyed to proxy, enabling off-path UDP cookie replaysecure-packages-26.05Jul 27, 2026Oct 25, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.25.0–1.25.1 subquery shallow view-name copy risks memory corruption with respip/dns64secure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLACriticalUnbound 1.4.22–1.25.1 SO_REUSEPORT per-thread port partition leaks entropy, enabling DNS cache poisoningsecure-packages-26.05Jul 27, 2026Aug 3, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound ≤1.25.1 DoS: 0.0.0.0/::0 glue with unwanted-reply-threshold triggers endless cache flushessecure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound 1.7.0–1.25.1 accepts bogus RPZ primary, enabling spoofed XFR and policy takeoversecure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days
Fixed within SLAMediumUnbound ≤1.25.1 respip before validator ignores DNSSEC, rewriting BOGUS A/AAAA INSECURE, enabling poisoning.secure-packages-26.05Jul 27, 2026Sep 10, 2026Jul 29, 20262 days