VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-39472 | redhat_vex | kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup | fixed: 663 known affected: 64 known not affected: 1 | 2026-08-04T18:48:29+00:00 | Vulnerability · Source |
| CVE-2024-39471 | redhat_vex | kernel: drm/amdgpu: add error handle to avoid out-of-bounds | fixed: 709 known affected: 50 known not affected: 22 | 2026-08-04T18:48:26+00:00 | Vulnerability · Source |
| CVE-2024-39502 | redhat_vex | kernel: ionic: fix use after netif_napi_del() | fixed: 1220 known affected: 22 known not affected: 55 | 2026-08-04T18:48:24+00:00 | Vulnerability · Source |
| CVE-2024-38592 | redhat_vex | kernel: drm/mediatek: Init `ddp_comp` with devm_kcalloc() | known not affected: 198 | 2026-08-04T18:48:21+00:00 | Vulnerability · Source |
| CVE-2024-40920 | redhat_vex | kernel: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state | known not affected: 198 | 2026-08-04T18:48:20+00:00 | Vulnerability · Source |
| CVE-2024-40901 | redhat_vex | kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:48:16+00:00 | Vulnerability · Source |
| CVE-2024-40923 | redhat_vex | kernel: vmxnet3: disable rx data ring on dma allocation failure | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-04T18:48:13+00:00 | Vulnerability · Source |
| CVE-2024-38599 | redhat_vex | kernel: jffs2: prevent xattr node from overflowing the eraseblock | known affected: 14 known not affected: 184 | 2026-08-04T18:48:11+00:00 | Vulnerability · Source |
| CVE-2024-40900 | redhat_vex | kernel: cachefiles: remove requests from xarray during flushing requests | known affected: 150 known not affected: 48 | 2026-08-04T18:48:07+00:00 | Vulnerability · Source |
| CVE-2024-39496 | redhat_vex | kernel: btrfs: zoned: fix use-after-free due to race with dev replace | known not affected: 198 | 2026-08-04T18:48:06+00:00 | Vulnerability · Source |
| CVE-2024-40910 | redhat_vex | kernel: ax25: Fix refcount imbalance on inbound connections | known not affected: 198 | 2026-08-04T18:48:03+00:00 | Vulnerability · Source |
| CVE-2024-39503 | redhat_vex | kernel: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type | fixed: 430 known affected: 64 known not affected: 8 | 2026-08-04T18:47:58+00:00 | Vulnerability · Source |
| CVE-2024-39486 | redhat_vex | kernel: drm/drm_file: Fix pid refcounting race | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:47:57+00:00 | Vulnerability · Source |
| CVE-2024-39481 | redhat_vex | kernel: media: mc: Fix graph walk in media_pipeline_start | known not affected: 198 | 2026-08-04T18:47:53+00:00 | Vulnerability · Source |
| CVE-2024-39487 | redhat_vex | kernel: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() | fixed: 429 known affected: 64 known not affected: 8 | 2026-08-04T18:47:48+00:00 | Vulnerability · Source |
| CVE-2024-38606 | redhat_vex | kernel: crypto: qat - validate slices count returned by FW | known affected: 108 known not affected: 90 | 2026-08-04T18:47:47+00:00 | Vulnerability · Source |
| CVE-2024-39494 | redhat_vex | kernel: ima: Fix use-after-free on a dentry's dname.name | known affected: 198 | 2026-08-04T18:47:45+00:00 | Vulnerability · Source |
| CVE-2024-40909 | redhat_vex | kernel: bpf: Fix a potential use-after-free in bpf_link_free() | known affected: 28 known not affected: 170 | 2026-08-04T18:47:39+00:00 | Vulnerability · Source |
| CVE-2024-39500 | redhat_vex | kernel: sock_map: avoid race between sock_map_close and sk_psock_put | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:47:36+00:00 | Vulnerability · Source |
| CVE-2024-39292 | redhat_vex | kernel: um: Add winch to winch_handlers before registering winch IRQ | known not affected: 198 | 2026-08-04T18:47:35+00:00 | Vulnerability · Source |
| CVE-2024-39467 | redhat_vex | kernel: f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() | known not affected: 198 | 2026-08-04T18:47:31+00:00 | Vulnerability · Source |
| CVE-2024-38612 | redhat_vex | kernel: ipv6: sr: fix invalid unregister error path | fixed: 280 known affected: 38 known not affected: 82 | 2026-08-04T18:47:30+00:00 | Vulnerability · Source |
| CVE-2024-38659 | redhat_vex | kernel: enic: Validate length of nl attributes in enic_set_vf_port | known affected: 14 known not affected: 184 | 2026-08-04T18:47:29+00:00 | Vulnerability · Source |
| CVE-2024-39507 | redhat_vex | kernel: net: hns3: fix kernel crash problem in concurrent scenario | fixed: 559 known affected: 22 known not affected: 98 | 2026-08-04T18:47:25+00:00 | Vulnerability · Source |
| CVE-2024-40925 | redhat_vex | kernel: block: fix request.queuelist usage in flush | fixed: 280 known affected: 50 known not affected: 70 | 2026-08-04T18:47:23+00:00 | Vulnerability · Source |
| CVE-2024-40907 | redhat_vex | kernel: ionic: fix kernel panic in XDP_TX action | fixed: 280 known affected: 22 known not affected: 98 | 2026-08-04T18:47:17+00:00 | Vulnerability · Source |
| CVE-2024-39293 | redhat_vex | kernel: Revert "xsk: Support redirect to any socket bound to the same umem" | known affected: 48 known not affected: 150 | 2026-08-04T18:47:14+00:00 | Vulnerability · Source |
| CVE-2024-38623 | redhat_vex | kernel: fs/ntfs3: Use variable length array instead of fixed size | known not affected: 198 | 2026-08-04T18:47:13+00:00 | Vulnerability · Source |
| CVE-2024-40911 | redhat_vex | kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station | fixed: 429 known affected: 64 | 2026-08-04T18:47:12+00:00 | Vulnerability · Source |
| CVE-2024-38610 | redhat_vex | kernel: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() | known not affected: 198 | 2026-08-04T18:47:09+00:00 | Vulnerability · Source |
| CVE-2024-40957 | redhat_vex | kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors | fixed: 279 known affected: 64 known not affected: 48 | 2026-08-04T18:47:01+00:00 | Vulnerability · Source |
| CVE-2016-6309 | redhat_vex | openssl: Use After Free for large message sizes | known not affected: 23 | 2026-08-04T18:46:59+00:00 | Vulnerability · Source |
| CVE-2015-8392 | redhat_vex | pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27) | fixed: 339 known not affected: 95 | 2026-08-04T18:46:57+00:00 | Vulnerability · Source |
| CVE-2016-2141 | redhat_vex | JGroups: Authorization bypass | fixed: 329 known affected: 4 known not affected: 3 | 2026-08-04T18:46:55+00:00 | Vulnerability · Source |
| CVE-2016-2510 | redhat_vex | bsh2: remote code execution via deserialization | fixed: 6 known affected: 4 known not affected: 2 | 2026-08-04T18:46:53+00:00 | Vulnerability · Source |
| CVE-2016-1240 | redhat_vex | tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation | fixed: 99 known affected: 16 known not affected: 34 | 2026-08-04T18:46:49+00:00 | Vulnerability · Source |
| CVE-2016-5425 | redhat_vex | tomcat: Local privilege escalation via systemd-tmpfiles service | fixed: 50 known not affected: 41 | 2026-08-04T18:46:46+00:00 | Vulnerability · Source |
| CVE-2016-2108 | redhat_vex | openssl: Memory corruption in the ASN.1 encoder | fixed: 367 known affected: 8 known not affected: 2 | 2026-08-04T18:46:44+00:00 | Vulnerability · Source |
| CVE-2016-0800 | redhat_vex | SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN) | fixed: 443 known affected: 6 known not affected: 14 | 2026-08-04T18:46:41+00:00 | Vulnerability · Source |
| CVE-2015-8385 | redhat_vex | pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30) | fixed: 415 known affected: 55 known not affected: 35 | 2026-08-04T18:46:40+00:00 | Vulnerability · Source |
| CVE-2016-4000 | redhat_vex | jython: Unsafe deserialization leads to code execution | known affected: 2 known not affected: 9 | 2026-08-04T18:46:38+00:00 | Vulnerability · Source |
| CVE-2015-8383 | redhat_vex | pcre: Buffer overflow caused by repeated conditional group (8.38/3) | fixed: 339 known not affected: 95 | 2026-08-04T18:46:02+00:00 | Vulnerability · Source |
| CVE-2016-5397 | redhat_vex | thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands | fixed: 2 known affected: 6 known not affected: 17 | 2026-08-04T18:45:49+00:00 | Vulnerability · Source |
| CVE-2015-8384 | redhat_vex | pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4) | fixed: 339 known not affected: 95 | 2026-08-04T18:45:37+00:00 | Vulnerability · Source |
| CVE-2015-8395 | redhat_vex | pcre: Buffer overflow caused by duplicate named references (8.38/36) | fixed: 339 known not affected: 95 | 2026-08-04T18:45:10+00:00 | Vulnerability · Source |
| CVE-2016-1283 | redhat_vex | pcre: heap buffer overflow in handling of duplicate named groups (8.39/14) | fixed: 88 known affected: 62 known not affected: 95 | 2026-08-04T18:45:03+00:00 | Vulnerability · Source |
| CVE-2016-5003 | redhat_vex | xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag | fixed: 87 known affected: 5 known not affected: 2 | 2026-08-04T18:44:24+00:00 | Vulnerability · Source |
| CVE-2024-41051 | redhat_vex | kernel: cachefiles: wait for ondemand_object_worker to finish when dropping object | known not affected: 198 | 2026-08-04T18:43:45+00:00 | Vulnerability · Source |
| CVE-2024-41017 | redhat_vex | kernel: jfs: don't walk off the end of ealist | known affected: 14 known not affected: 184 | 2026-08-04T18:43:44+00:00 | Vulnerability · Source |
| CVE-2024-41038 | redhat_vex | kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers | fixed: 709 known affected: 22 known not affected: 50 | 2026-08-04T18:43:42+00:00 | Vulnerability · Source |