VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297692 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-53148 | microsoft_vex | thunderbolt: Clamp XDomain response data copy to allocation size | fixed: 1 known affected: 1 | 2026-06-28T02:05:41+00:00 | Vulnerability · Source |
| CVE-2025-21672 | microsoft_vex | afs: Fix merge preference rule failure condition | under investigation: 19 | 2026-06-28T02:05:14+00:00 | Vulnerability · Source |
| CVE-2026-23472 | microsoft_vex | serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN | known affected: 7 | 2026-06-28T02:05:08+00:00 | Vulnerability · Source |
| CVE-2025-21634 | microsoft_vex | cgroup/cpuset: remove kernfs active break | under investigation: 19 | 2026-06-28T02:05:00+00:00 | Vulnerability · Source |
| CVE-2026-53255 | microsoft_vex | Bluetooth: MGMT: validate advertising TLV before type checks | fixed: 1 known affected: 1 | 2026-06-28T02:04:56+00:00 | Vulnerability · Source |
| CVE-2026-35387 | microsoft_vex | OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms. | fixed: 2 known affected: 4 | 2026-06-28T02:04:54+00:00 | Vulnerability · Source |
| CVE-2024-56702 | microsoft_vex | bpf: Mark raw_tp arguments with PTR_MAYBE_NULL | under investigation: 16 | 2026-06-28T02:04:44+00:00 | Vulnerability · Source |
| CVE-2024-56544 | microsoft_vex | udmabuf: change folios array from kmalloc to kvmalloc | under investigation: 19 | 2026-06-28T02:04:29+00:00 | Vulnerability · Source |
| CVE-2025-66038 | microsoft_vex | OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers | fixed: 3 known affected: 3 known not affected: 1 | 2026-06-28T02:04:24+00:00 | Vulnerability · Source |
| CVE-2025-21649 | microsoft_vex | net: hns3: fix kernel crash when 1588 is sent on HIP08 devices | under investigation: 19 | 2026-06-28T02:04:08+00:00 | Vulnerability · Source |
| CVE-2026-9697 | microsoft_vex | undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent | fixed: 1 known affected: 1 | 2026-06-28T02:04:02+00:00 | Vulnerability · Source |
| CVE-2025-49010 | microsoft_vex | OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE | fixed: 4 known affected: 4 | 2026-06-28T02:04:00+00:00 | Vulnerability · Source |
| CVE-2024-57872 | microsoft_vex | scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() | under investigation: 19 | 2026-06-28T02:03:52+00:00 | Vulnerability · Source |
| CVE-2026-53149 | microsoft_vex | thunderbolt: Bound root directory content to block size | fixed: 1 known affected: 1 | 2026-06-28T02:03:51+00:00 | Vulnerability · Source |
| CVE-2026-53275 | microsoft_vex | ipv6: mcast: Fix use-after-free when processing MLD queries | fixed: 1 known affected: 1 | 2026-06-28T02:03:47+00:00 | Vulnerability · Source |
| CVE-2024-53187 | microsoft_vex | io_uring: check for overflows in io_pin_pages | under investigation: 19 | 2026-06-28T02:03:37+00:00 | Vulnerability · Source |
| CVE-2024-26944 | microsoft_vex | btrfs: zoned: fix use-after-free in do_zone_finish() | known affected: 17 | 2026-06-28T02:03:22+00:00 | Vulnerability · Source |
| CVE-2026-53249 | microsoft_vex | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | fixed: 1 known affected: 1 | 2026-06-28T02:03:15+00:00 | Vulnerability · Source |
| CVE-2024-56782 | microsoft_vex | ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() | under investigation: 19 | 2026-06-28T02:03:07+00:00 | Vulnerability · Source |
| CVE-2025-38359 | microsoft_vex | s390/mm: Fix in_atomic() handling in do_secure_storage_access() | known affected: 16 known not affected: 1 | 2026-06-28T02:03:01+00:00 | Vulnerability · Source |
| CVE-2026-52923 | microsoft_vex | ipc: limit next_id allocation to the valid ID range | fixed: 1 known affected: 1 | 2026-06-28T02:02:57+00:00 | Vulnerability · Source |
| CVE-2024-56775 | microsoft_vex | drm/amd/display: Fix handling of plane refcount | known affected: 19 | 2026-06-28T02:02:51+00:00 | Vulnerability · Source |
| CVE-2025-38311 | microsoft_vex | iavf: get rid of the crit lock | under investigation: 16 | 2026-06-28T02:02:47+00:00 | Vulnerability · Source |
| CVE-2024-53201 | microsoft_vex | drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe | under investigation: 16 | 2026-06-28T02:02:36+00:00 | Vulnerability · Source |
| CVE-2025-38272 | microsoft_vex | net: dsa: b53: do not enable EEE on bcm63xx | known affected: 19 | 2026-06-28T02:02:32+00:00 | Vulnerability · Source |
| CVE-2025-13462 | microsoft_vex | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | fixed: 2 known affected: 5 known not affected: 1 | 2026-06-28T02:02:25+00:00 | Vulnerability · Source |
| CVE-2023-52485 | microsoft_vex | drm/amd/display: Wake DMCUB before sending a command | under investigation: 19 | 2026-06-28T02:02:22+00:00 | Vulnerability · Source |
| CVE-2025-38269 | microsoft_vex | btrfs: exit after state insertion failure at btrfs_convert_extent_bit() | known affected: 19 | 2026-06-28T02:02:17+00:00 | Vulnerability · Source |
| CVE-2026-53181 | microsoft_vex | vsock/vmci: fix sk_ack_backlog leak on failed handshake | fixed: 1 known affected: 1 | 2026-06-28T02:02:07+00:00 | Vulnerability · Source |
| CVE-2024-42107 | microsoft_vex | ice: Don't process extts if PTP is disabled | under investigation: 20 | 2026-06-28T02:02:05+00:00 | Vulnerability · Source |
| CVE-2025-38279 | microsoft_vex | bpf: Do not include stack ptr register in precision backtracking bookkeeping | known affected: 16 | 2026-06-28T02:01:59+00:00 | Vulnerability · Source |
| CVE-2024-56742 | microsoft_vex | vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() | under investigation: 17 | 2026-06-28T02:01:49+00:00 | Vulnerability · Source |
| CVE-2025-38303 | microsoft_vex | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | known affected: 16 | 2026-06-28T02:01:45+00:00 | Vulnerability · Source |
| CVE-2024-56712 | microsoft_vex | udmabuf: fix memory leak on last export_udmabuf() error path | under investigation: 19 | 2026-06-28T02:01:34+00:00 | Vulnerability · Source |
| CVE-2025-38333 | microsoft_vex | f2fs: fix to bail out in get_new_segment() | known affected: 16 known not affected: 1 under investigation: 1 | 2026-06-28T02:01:28+00:00 | Vulnerability · Source |
| CVE-2026-53150 | microsoft_vex | thunderbolt: Reject zero-length property entries in validator | fixed: 1 known affected: 1 | 2026-06-28T02:01:19+00:00 | Vulnerability · Source |
| CVE-2024-53089 | microsoft_vex | LoongArch: KVM: Mark hrtimer to expire in hard interrupt context | under investigation: 19 | 2026-06-28T02:01:19+00:00 | Vulnerability · Source |
| CVE-2024-53090 | microsoft_vex | afs: Fix lock recursion | under investigation: 19 | 2026-06-28T02:01:04+00:00 | Vulnerability · Source |
| CVE-2026-52924 | microsoft_vex | sctp: purge outqueue on stale COOKIE-ECHO handling | fixed: 1 known affected: 1 | 2026-06-28T02:01:01+00:00 | Vulnerability · Source |
| CVE-2024-26962 | microsoft_vex | dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape | under investigation: 19 | 2026-06-28T02:00:44+00:00 | Vulnerability · Source |
| CVE-2025-38140 | microsoft_vex | dm: limit swapping tables for devices with zone write plugs | known affected: 19 | 2026-06-28T02:00:40+00:00 | Vulnerability · Source |
| CVE-2026-23207 | microsoft_vex | spi: tegra210-quad: Protect curr_xfer check in IRQ handler | known affected: 10 | 2026-06-28T02:00:39+00:00 | Vulnerability · Source |
| CVE-2026-43973 | microsoft_vex | gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion | fixed: 2 known affected: 2 | 2026-06-28T02:00:37+00:00 | Vulnerability · Source |
| CVE-2024-27010 | microsoft_vex | net/sched: Fix mirred deadlock on device recursion | under investigation: 19 | 2026-06-28T02:00:29+00:00 | Vulnerability · Source |
| CVE-2024-42139 | microsoft_vex | ice: Fix improper extts handling | under investigation: 19 | 2026-06-28T02:00:14+00:00 | Vulnerability · Source |
| CVE-2026-53146 | microsoft_vex | thunderbolt: Limit XDomain response copy to actual frame size | fixed: 1 known affected: 1 | 2026-06-28T02:00:12+00:00 | Vulnerability · Source |
| CVE-2024-53114 | microsoft_vex | x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client | under investigation: 19 | 2026-06-28T01:59:57+00:00 | Vulnerability · Source |
| CVE-2024-41008 | microsoft_vex | drm/amdgpu: change vm->task_info handling | known affected: 17 under investigation: 2 | 2026-06-28T01:59:40+00:00 | Vulnerability · Source |
| CVE-2024-42134 | microsoft_vex | virtio-pci: Check if is_avq is NULL | under investigation: 19 | 2026-06-28T01:59:36+00:00 | Vulnerability · Source |
| CVE-2026-53147 | microsoft_vex | thunderbolt: Validate XDomain request packet size before type cast | fixed: 1 known affected: 1 | 2026-06-28T01:59:32+00:00 | Vulnerability · Source |