VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
314757 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64540 | redhat_vex | kernel: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() | known affected: 276 | 2026-11-01T13:56:48+00:00 | Vulnerability · Source |
| CVE-2026-64546 | redhat_vex | kernel: drm/edid: fix OOB read in drm_parse_tiled_block() | known affected: 248 known not affected: 28 | 2026-11-01T13:56:48+00:00 | Vulnerability · Source |
| CVE-2026-64547 | redhat_vex | kernel: net: usb: net1080: validate packet_len before pad-byte access in rx_fixup | known affected: 276 | 2026-11-01T13:52:29+00:00 | Vulnerability · Source |
| CVE-2026-64553 | redhat_vex | kernel: net: psample: fix info leak in PSAMPLE_ATTR_DATA | known affected: 262 known not affected: 14 | 2026-11-01T13:52:29+00:00 | Vulnerability · Source |
| CVE-2026-46263 | redhat_vex | kernel: drm/amd/display: Fix out-of-bounds stream encoder index v3 | known affected: 198 known not affected: 78 | 2026-11-01T13:44:27+00:00 | Vulnerability · Source |
| CVE-2026-113776 | redhat_vex | virtualenv: virtualenv: Arbitrary command execution via sequential placeholder substitution in activation templates | known affected: 23 known not affected: 3 | 2026-11-01T13:39:37+00:00 | Vulnerability · Source |
| CVE-2026-113732 | redhat_vex | virtualenv: virtualenv: Arbitrary code execution via improperly quoted Fish activation scripts | known affected: 23 known not affected: 3 | 2026-11-01T13:39:37+00:00 | Vulnerability · Source |
| CVE-2026-113726 | redhat_vex | virtualenv: virtualenv: Arbitrary command execution via unescaped prompt variables in zsh | known affected: 23 known not affected: 3 | 2026-11-01T13:39:37+00:00 | Vulnerability · Source |
| CVE-2026-46220 | redhat_vex | kernel: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission | known affected: 248 known not affected: 28 | 2026-11-01T13:39:37+00:00 | Vulnerability · Source |
| CVE-2026-43400 | redhat_vex | kernel: drm/amdgpu: add upper bound check on user inputs in signal ioctl | known affected: 276 | 2026-11-01T13:34:20+00:00 | Vulnerability · Source |
| CVE-2026-116591 | redhat_vex | github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input | fixed: 114 known affected: 453 known not affected: 7 under investigation: 144 | 2026-11-01T13:34:20+00:00 | Vulnerability · Source |
| CVE-2026-43398 | redhat_vex | kernel: drm/amdgpu: add upper bound check on user inputs in wait ioctl | known affected: 276 | 2026-11-01T13:34:20+00:00 | Vulnerability · Source |
| CVE-2026-43318 | redhat_vex | kernel: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify | known affected: 200 known not affected: 76 | 2026-11-01T13:29:14+00:00 | Vulnerability · Source |
| CVE-2026-31765 | redhat_vex | kernel: drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB | known affected: 184 known not affected: 92 | 2026-11-01T13:24:08+00:00 | Vulnerability · Source |
| CVE-2026-43195 | redhat_vex | kernel: drm/amdgpu: validate user queue size constraints | known affected: 276 | 2026-11-01T13:24:08+00:00 | Vulnerability · Source |
| CVE-2026-64596 | redhat_vex | kernel: libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() | known affected: 91 known not affected: 185 | 2026-11-01T13:19:23+00:00 | Vulnerability · Source |
| CVE-2026-64604 | redhat_vex | kernel: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | known affected: 234 known not affected: 42 | 2026-11-01T13:13:55+00:00 | Vulnerability · Source |
| CVE-2026-46082 | redhat_vex | kernel: KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 | known affected: 234 known not affected: 42 | 2026-11-01T13:13:55+00:00 | Vulnerability · Source |
| CVE-2026-68372 | redhat_vex | kernel: usb: core: port: Deattach Type-C connector on component unbind | known affected: 184 known not affected: 92 | 2026-11-01T13:08:45+00:00 | Vulnerability · Source |
| CVE-2026-68259 | redhat_vex | kernel: drm/amdkfd: Check bounds in allocate_event_notification_slot | known affected: 276 | 2026-11-01T13:08:45+00:00 | Vulnerability · Source |
| CVE-2026-68153 | redhat_vex | kernel: libceph: remove debugfs files before client teardown | known affected: 262 known not affected: 14 | 2026-11-01T13:03:48+00:00 | Vulnerability · Source |
| CVE-2026-68096 | redhat_vex | kernel: audit: fix recursive locking deadlock in audit_dupe_exe() | known affected: 276 | 2026-11-01T13:01:14+00:00 | Vulnerability · Source |
| CVE-2026-68396 | redhat_vex | kernel: scsi: core: wake eh reliably when using scsi_schedule_eh | known affected: 248 known not affected: 28 | 2026-11-01T13:01:14+00:00 | Vulnerability · Source |
| CVE-2026-50252 | redhat_vex | unbound: Unbound: DNS cache poisoning via UDP source port predictability | fixed: 196 known affected: 8 known not affected: 5 | 2026-11-01T13:01:14+00:00 | Vulnerability · Source |
| CVE-2026-68189 | redhat_vex | kernel: Bluetooth: hci_sync: Protect UUID list traversal | known affected: 234 known not affected: 42 | 2026-11-01T12:55:13+00:00 | Vulnerability · Source |
| CVE-2026-68173 | redhat_vex | kernel: ublk: wait on ublk_dev_ready() instead of ub->completion | known affected: 77 known not affected: 199 | 2026-11-01T12:50:04+00:00 | Vulnerability · Source |
| CVE-2026-68411 | redhat_vex | kernel: wifi: mac80211_hwsim: clamp virtio RX length before skb_put | known not affected: 276 | 2026-11-01T12:50:04+00:00 | Vulnerability · Source |
| CVE-2026-68447 | redhat_vex | kernel: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size | known affected: 279 known not affected: 1 | 2026-11-01T12:46:27+00:00 | Vulnerability · Source |
| CVE-2026-72450 | redhat_vex | kernel: xfrm: validate selector family and prefixlen during match | known affected: 246 known not affected: 30 | 2026-11-01T12:39:03+00:00 | Vulnerability · Source |
| CVE-2026-72175 | redhat_vex | kernel: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race | known affected: 91 known not affected: 185 | 2026-11-01T12:39:03+00:00 | Vulnerability · Source |
| CVE-2026-72124 | redhat_vex | kernel: can: isotp: serialize TX state transitions under so->rx_lock | known affected: 186 known not affected: 90 | 2026-11-01T12:34:00+00:00 | Vulnerability · Source |
| CVE-2026-33818 | redhat_vex | encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal | fixed: 8457 known affected: 314 known not affected: 4450 | 2026-11-01T12:29:05+00:00 | Vulnerability · Source |
| CVE-2026-72304 | redhat_vex | kernel: ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put | known affected: 232 known not affected: 44 | 2026-11-01T12:29:05+00:00 | Vulnerability · Source |
| CVE-2026-74260 | redhat_vex | kernel: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them | known affected: 77 known not affected: 199 | 2026-11-01T12:29:05+00:00 | Vulnerability · Source |
| CVE-2026-74339 | redhat_vex | kernel: ALSA: seq: Clear variable event pointer on read | known affected: 276 | 2026-11-01T12:22:54+00:00 | Vulnerability · Source |
| CVE-2026-72122 | redhat_vex | kernel: can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure | known affected: 276 | 2026-11-01T12:17:56+00:00 | Vulnerability · Source |
| CVE-2026-74392 | redhat_vex | kernel: dm: limit target bio polling to one shot | known affected: 91 known not affected: 185 | 2026-11-01T12:15:36+00:00 | Vulnerability · Source |
| CVE-2026-72349 | redhat_vex | kernel: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() | known affected: 276 | 2026-11-01T12:15:36+00:00 | Vulnerability · Source |
| CVE-2026-74272 | redhat_vex | kernel: cxl/region: Resolve region deletion races | known affected: 184 known not affected: 92 | 2026-11-01T12:15:36+00:00 | Vulnerability · Source |
| CVE-2026-21441 | redhat_vex | urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) | fixed: 1957 known affected: 385 known not affected: 3029 under investigation: 1 | 2026-11-01T12:09:57+00:00 | Vulnerability · Source |
| CVE-2026-72488 | redhat_vex | kernel: soundwire: fix bug in sdw_add_element_group_count found by syzkaller | known affected: 234 known not affected: 42 | 2026-11-01T12:09:57+00:00 | Vulnerability · Source |
| CVE-2026-72312 | redhat_vex | kernel: octeontx2-af: fix VF bringup affecting PF promiscuous state | known affected: 186 known not affected: 90 | 2026-11-01T12:09:57+00:00 | Vulnerability · Source |
| CVE-2026-72464 | redhat_vex | kernel: xprtrdma: Repost Receive buffers for malformed replies | known affected: 248 known not affected: 28 | 2026-11-01T12:01:15+00:00 | Vulnerability · Source |
| CVE-2026-74532 | redhat_vex | kernel: Bluetooth: btintel: Validate length before parsing diagnostics TLV | known affected: 184 known not affected: 92 | 2026-11-01T12:01:15+00:00 | Vulnerability · Source |
| CVE-2026-70622 | redhat_vex | tar: tar-rs: Information Disclosure via Symlink Escape | known affected: 85 known not affected: 66 | 2026-11-01T12:01:15+00:00 | Vulnerability · Source |
| CVE-2026-74542 | redhat_vex | kernel: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool | known affected: 77 known not affected: 199 | 2026-11-01T11:53:59+00:00 | Vulnerability · Source |
| CVE-2026-74411 | redhat_vex | kernel: wifi: rtw89: Correct data type for scan index to avoid infinite loop | known affected: 232 known not affected: 44 | 2026-11-01T11:53:52+00:00 | Vulnerability · Source |
| CVE-2026-74333 | redhat_vex | kernel: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration | known affected: 184 known not affected: 92 | 2026-11-01T11:53:52+00:00 | Vulnerability · Source |
| CVE-2026-74336 | redhat_vex | kernel: wifi: mac80211: bound S1G TIM PVB walk to the TIM element | known affected: 198 known not affected: 78 | 2026-11-01T11:45:08+00:00 | Vulnerability · Source |
| CVE-2026-90049 | redhat_vex | kernel: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() | known affected: 265 under investigation: 14 | 2026-11-01T11:45:08+00:00 | Vulnerability · Source |