1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 16, 2026, 2:35 PM 20,347 active 1,448 known exploited

Catalog summary

20,347

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 16, 2026, 2:35 PM 20,347 active 1,448 known exploited

Catalog summary

20,347

Active CVEs

10,165

Critical + high

1,448

Known exploited

14

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 14,301–14,350 of 20,347 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-38607Unknown severity
    bpf: handle jset (if a & b ...) as a jump in CFG computation
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  2. CVE-2025-38604Unknown severity
    wifi: rtl818x: Kill URBs before clearing tx status queue
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  3. CVE-2025-38601Unknown severity
    wifi: ath11k: clear initialized flag for deinit-ed srng lists
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  4. CVE-2025-38600Unknown severity
    wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  5. CVE-2025-38599Unknown severity
    wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  6. CVE-2025-38598Unknown severity
    drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2025-38596Unknown severity
    drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  8. CVE-2025-38595Unknown severity
    xen: fix UAF in dmabuf_exp_from_pages()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  9. CVE-2025-38594Unknown severity
    iommu/vt-d: Fix UAF on sva unbind with pending IOPFs
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  10. CVE-2025-38593Unknown severity
    Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  11. CVE-2025-38592Unknown severity
    Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2025-38591Medium
    bpf: Reject narrower access to pointer ctx fields
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedAug 19, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  13. CVE-2025-38590Unknown severity
    net/mlx5e: Remove skb secpath if xfrm state is not found
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  14. CVE-2025-38586Unknown severity
    bpf, arm64: Fix fp initialization for exception boundary
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2025-38584Unknown severity
    padata: Fix pd UAF once and for all
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  16. CVE-2025-38582Unknown severity
    RDMA/hns: Fix double destruction of rsv_qp
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  17. CVE-2025-38580Unknown severity
    ext4: fix inode use after free in ext4_end_io_rsv_work()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  18. CVE-2025-38579Unknown severity
    f2fs: fix KMSAN uninit-value in extent_info usage
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  19. CVE-2025-38578Unknown severity
    f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  20. CVE-2025-38577Unknown severity
    f2fs: fix to avoid panic in f2fs_evict_inode
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  21. CVE-2025-38574Unknown severity
    pptp: ensure minimal skb length in pptp_xmit()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  22. CVE-2025-38573Unknown severity
    spi: cs42l43: Property entry should be a null-terminated array
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  23. CVE-2025-38572Unknown severity
    ipv6: reject malicious packets in ipv6_gso_segment()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  24. CVE-2025-38571Unknown severity
    sunrpc: fix client side handling of tls alerts
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  25. CVE-2025-38570Unknown severity
    eth: fbnic: unlink NAPIs from queues on error to open
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  26. CVE-2025-38568Unknown severity
    net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  27. CVE-2025-38566Unknown severity
    sunrpc: fix handling of server side tls alerts
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2025-38561Unknown severity
    ksmbd: fix Preauh_HashValue race condition
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2025-38560Unknown severity
    x86/sev: Evict cache lines during SNP memory validation
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2025-38555Unknown severity
    usb: gadget : fix use-after-free in composite_dev_cleanup()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2025-38554Unknown severity
    mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  32. CVE-2025-50567Critical
    CISA ADP Vulnrichment
    CVSS 10.0
    n/a/n/ageneric
    PublishedAug 19, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  33. CVE-2025-51529Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    n/a/n/ageneric
    PublishedAug 19, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  34. CVE-2025-51543Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    n/a/n/ageneric
    PublishedAug 19, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  35. CVE-2023-3867Critical
    ksmbd: fix out of bounds read in smb2_sess_setup
    CVSS 9.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  36. CVE-2023-4130High
    ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
    CVSS 8.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  37. CVE-2023-3866High
    ksmbd: validate session id and tree id in the compound request
    CVSS 7.5
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2023-3865High
    ksmbd: fix out-of-bound read in smb2_write
    CVSS 8.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  39. CVE-2023-4515Critical
    ksmbd: validate command request size
    CVSS 9.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2023-32249Critical
    ksmbd: not allow guest user on multichannel
    CVSS 9.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  41. CVE-2023-32246Medium
    ksmbd: call rcu_barrier() in ksmbd_server_exit()
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 15, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  42. CVE-2025-38552Unknown severity
    mptcp: plug races between subflow fail and subflow creation
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  43. CVE-2025-38550Unknown severity
    ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2025-38547Unknown severity
    iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2025-38545Unknown severity
    net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2025-38542Unknown severity
    net: appletalk: Fix device refcount leak in atrtr_create()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  47. CVE-2025-38539Unknown severity
    tracing: Add down_write(trace_event_sem) when adding trace event
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2025-38536Unknown severity
    net: airoha: fix potential use-after-free in airoha_npu_get()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  49. CVE-2025-38533Unknown severity
    net: libwx: fix the using of Rx buffer DMA
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2025-38532Unknown severity
    net: libwx: properly reset Rx ring descriptor
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 287 of 407
Previous285286287288289Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

10,165

Critical + high

1,448

Known exploited

14

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 14,301–14,350 of 20,347 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-38607Unknown severity
    bpf: handle jset (if a & b ...) as a jump in CFG computation
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  2. CVE-2025-38604Unknown severity
    wifi: rtl818x: Kill URBs before clearing tx status queue
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  3. CVE-2025-38601Unknown severity
    wifi: ath11k: clear initialized flag for deinit-ed srng lists
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  4. CVE-2025-38600Unknown severity
    wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  5. CVE-2025-38599Unknown severity
    wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  6. CVE-2025-38598Unknown severity
    drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2025-38596Unknown severity
    drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  8. CVE-2025-38595Unknown severity
    xen: fix UAF in dmabuf_exp_from_pages()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  9. CVE-2025-38594Unknown severity
    iommu/vt-d: Fix UAF on sva unbind with pending IOPFs
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  10. CVE-2025-38593Unknown severity
    Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  11. CVE-2025-38592Unknown severity
    Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2025-38591Medium
    bpf: Reject narrower access to pointer ctx fields
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedAug 19, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  13. CVE-2025-38590Unknown severity
    net/mlx5e: Remove skb secpath if xfrm state is not found
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  14. CVE-2025-38586Unknown severity
    bpf, arm64: Fix fp initialization for exception boundary
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2025-38584Unknown severity
    padata: Fix pd UAF once and for all
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  16. CVE-2025-38582Unknown severity
    RDMA/hns: Fix double destruction of rsv_qp
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  17. CVE-2025-38580Unknown severity
    ext4: fix inode use after free in ext4_end_io_rsv_work()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  18. CVE-2025-38579Unknown severity
    f2fs: fix KMSAN uninit-value in extent_info usage
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  19. CVE-2025-38578Unknown severity
    f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  20. CVE-2025-38577Unknown severity
    f2fs: fix to avoid panic in f2fs_evict_inode
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  21. CVE-2025-38574Unknown severity
    pptp: ensure minimal skb length in pptp_xmit()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  22. CVE-2025-38573Unknown severity
    spi: cs42l43: Property entry should be a null-terminated array
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  23. CVE-2025-38572Unknown severity
    ipv6: reject malicious packets in ipv6_gso_segment()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  24. CVE-2025-38571Unknown severity
    sunrpc: fix client side handling of tls alerts
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  25. CVE-2025-38570Unknown severity
    eth: fbnic: unlink NAPIs from queues on error to open
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  26. CVE-2025-38568Unknown severity
    net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  27. CVE-2025-38566Unknown severity
    sunrpc: fix handling of server side tls alerts
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2025-38561Unknown severity
    ksmbd: fix Preauh_HashValue race condition
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2025-38560Unknown severity
    x86/sev: Evict cache lines during SNP memory validation
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2025-38555Unknown severity
    usb: gadget : fix use-after-free in composite_dev_cleanup()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2025-38554Unknown severity
    mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 19, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  32. CVE-2025-50567Critical
    CISA ADP Vulnrichment
    CVSS 10.0
    n/a/n/ageneric
    PublishedAug 19, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  33. CVE-2025-51529Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    n/a/n/ageneric
    PublishedAug 19, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  34. CVE-2025-51543Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    n/a/n/ageneric
    PublishedAug 19, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  35. CVE-2023-3867Critical
    ksmbd: fix out of bounds read in smb2_sess_setup
    CVSS 9.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  36. CVE-2023-4130High
    ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
    CVSS 8.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  37. CVE-2023-3866High
    ksmbd: validate session id and tree id in the compound request
    CVSS 7.5
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2023-3865High
    ksmbd: fix out-of-bound read in smb2_write
    CVSS 8.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  39. CVE-2023-4515Critical
    ksmbd: validate command request size
    CVSS 9.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2023-32249Critical
    ksmbd: not allow guest user on multichannel
    CVSS 9.1
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 4, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  41. CVE-2023-32246Medium
    ksmbd: call rcu_barrier() in ksmbd_server_exit()
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 15, 2026Updated Aug 15, 2026 Fix availableView HOL analysis
  42. CVE-2025-38552Unknown severity
    mptcp: plug races between subflow fail and subflow creation
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  43. CVE-2025-38550Unknown severity
    ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2025-38547Unknown severity
    iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2025-38545Unknown severity
    net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2025-38542Unknown severity
    net: appletalk: Fix device refcount leak in atrtr_create()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  47. CVE-2025-38539Unknown severity
    tracing: Add down_write(trace_event_sem) when adding trace event
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2025-38536Unknown severity
    net: airoha: fix potential use-after-free in airoha_npu_get()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  49. CVE-2025-38533Unknown severity
    net: libwx: fix the using of Rx buffer DMA
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2025-38532Unknown severity
    net: libwx: properly reset Rx ring descriptor
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedAug 16, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 287 of 407
Previous285286287288289Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard