VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291904 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2024-40991 | redhat_vex | kernel: dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() | known not affected: 198 | 2026-08-04T18:43:39+00:00 | Vulnerability · Source |
| CVE-2024-41056 | redhat_vex | kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files | fixed: 943 known affected: 22 known not affected: 51 | 2026-08-04T18:43:37+00:00 | Vulnerability · Source |
| CVE-2024-41049 | redhat_vex | kernel: filelock: fix potential use-after-free in posix_lock_inode | fixed: 792 known affected: 50 known not affected: 72 | 2026-08-04T18:43:37+00:00 | Vulnerability · Source |
| CVE-2024-41015 | redhat_vex | kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry() | known not affected: 198 | 2026-08-04T18:43:31+00:00 | Vulnerability · Source |
| CVE-2024-40953 | redhat_vex | kernel: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() | known not affected: 198 | 2026-08-04T18:43:28+00:00 | Vulnerability · Source |
| CVE-2024-41069 | redhat_vex | kernel: ASoC: topology: Fix references to freed memory | known affected: 184 known not affected: 14 | 2026-08-04T18:43:26+00:00 | Vulnerability · Source |
| CVE-2024-41032 | redhat_vex | kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:43:23+00:00 | Vulnerability · Source |
| CVE-2024-40937 | redhat_vex | kernel: gve: Clear napi->skb before dev_kfree_skb_any() | known affected: 156 known not affected: 42 | 2026-08-04T18:43:22+00:00 | Vulnerability · Source |
| CVE-2024-40970 | redhat_vex | kernel: Avoid hw_desc array overrun in dw-axi-dmac | known not affected: 198 | 2026-08-04T18:43:21+00:00 | Vulnerability · Source |
| CVE-2024-40949 | redhat_vex | kernel: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio | known affected: 42 known not affected: 156 | 2026-08-04T18:43:18+00:00 | Vulnerability · Source |
| CVE-2024-41057 | redhat_vex | kernel: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() | fixed: 280 known affected: 64 known not affected: 56 | 2026-08-04T18:43:14+00:00 | Vulnerability · Source |
| CVE-2024-41026 | redhat_vex | kernel: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length | known not affected: 198 | 2026-08-04T18:43:13+00:00 | Vulnerability · Source |
| CVE-2024-41062 | redhat_vex | kernel: bluetooth/l2cap: sync sock recv cb and release | fixed: 305 known affected: 98 known not affected: 14 | 2026-08-04T18:43:10+00:00 | Vulnerability · Source |
| CVE-2024-40974 | redhat_vex | kernel: powerpc/pseries: Enforce hcall result buffer validity and size | fixed: 120 known affected: 166 | 2026-08-04T18:43:08+00:00 | Vulnerability · Source |
| CVE-2024-41048 | redhat_vex | kernel: skmsg: Skip zero length skb in sk_msg_recvmsg | known affected: 58 known not affected: 140 | 2026-08-04T18:43:05+00:00 | Vulnerability · Source |
| CVE-2024-40989 | redhat_vex | kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown | fixed: 943 known affected: 22 known not affected: 51 | 2026-08-04T18:42:19+00:00 | Vulnerability · Source |
| CVE-2024-41014 | redhat_vex | kernel: xfs: add bounds checking to xlog_recover_process_data | fixed: 926 known affected: 64 known not affected: 4 | 2026-08-04T18:42:14+00:00 | Vulnerability · Source |
| CVE-2017-15089 | redhat_vex | infinispan: Unsafe deserialization of malicious object injected into data cache | fixed: 321 known affected: 7 known not affected: 2 | 2026-08-04T18:42:08+00:00 | Vulnerability · Source |
| CVE-2016-6817 | redhat_vex | tomcat: Infinite loop in HTTP/2 header parser | known not affected: 6 under investigation: 5 | 2026-08-04T18:41:56+00:00 | Vulnerability · Source |
| CVE-2017-12615 | redhat_vex | tomcat: Remote Code Execution via JSP Upload | fixed: 267 known not affected: 11 | 2026-08-04T18:41:56+00:00 | Vulnerability · Source |
| CVE-2017-12617 | redhat_vex | tomcat: Remote Code Execution bypass for CVE-2017-12615 | fixed: 743 known affected: 2 known not affected: 10 | 2026-08-04T18:41:50+00:00 | Vulnerability · Source |
| CVE-2016-8735 | redhat_vex | tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener | fixed: 99 known affected: 16 known not affected: 35 | 2026-08-04T18:41:50+00:00 | Vulnerability · Source |
| CVE-2016-6497 | redhat_vex | groovy: allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods | known affected: 7 known not affected: 7 | 2026-08-04T18:41:48+00:00 | Vulnerability · Source |
| CVE-2016-7050 | redhat_vex | RESTEasy: SerializableProvider enabled by default and deserializes untrusted data | fixed: 64 known not affected: 4 | 2026-08-04T18:41:44+00:00 | Vulnerability · Source |
| CVE-2016-6814 | redhat_vex | Groovy: Remote code execution via deserialization | fixed: 33 known affected: 8 known not affected: 2 under investigation: 1 | 2026-08-04T18:41:43+00:00 | Vulnerability · Source |
| CVE-2016-7054 | redhat_vex | openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS | known not affected: 22 | 2026-08-04T18:41:20+00:00 | Vulnerability · Source |
| CVE-2016-8745 | redhat_vex | tomcat: information disclosure due to incorrect Processor sharing | fixed: 191 known affected: 14 known not affected: 9 | 2026-08-04T18:41:16+00:00 | Vulnerability · Source |
| CVE-2016-8656 | redhat_vex | jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation | fixed: 1493 known affected: 1 | 2026-08-04T18:41:12+00:00 | Vulnerability · Source |
| CVE-2017-11103 | redhat_vex | krb5: Metadata taken from the unauthenticated plaintext | known not affected: 115 | 2026-08-04T18:40:35+00:00 | Vulnerability · Source |
| CVE-2017-12629 | redhat_vex | Solr: Code execution via entity expansion | fixed: 460 known affected: 5 known not affected: 14 | 2026-08-04T18:39:55+00:00 | Vulnerability · Source |
| CVE-2024-41059 | redhat_vex | kernel: hfsplus: fix uninit-value in copy_name | known not affected: 198 | 2026-08-04T18:38:46+00:00 | Vulnerability · Source |
| CVE-2024-41022 | redhat_vex | kernel: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() | known affected: 28 known not affected: 170 | 2026-08-04T18:38:45+00:00 | Vulnerability · Source |
| CVE-2024-41019 | redhat_vex | kernel: fs/ntfs3: Validate ff offset | known not affected: 198 | 2026-08-04T18:38:41+00:00 | Vulnerability · Source |
| CVE-2024-40984 | redhat_vex | kernel: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." | fixed: 827 known affected: 64 known not affected: 1 | 2026-08-04T18:38:32+00:00 | Vulnerability · Source |
| CVE-2024-41045 | redhat_vex | kernel: bpf: Defer work in bpf_timer_cancel_and_free | known affected: 136 known not affected: 62 | 2026-08-04T18:38:26+00:00 | Vulnerability · Source |
| CVE-2024-41020 | redhat_vex | kernel: filelock: Fix fcntl/close race recovery compat path | fixed: 280 known affected: 112 known not affected: 8 | 2026-08-04T18:38:24+00:00 | Vulnerability · Source |
| CVE-2024-41010 | redhat_vex | kernel: bpf: Fix too early release of tcx_entry | fixed: 305 known affected: 112 | 2026-08-04T18:38:23+00:00 | Vulnerability · Source |
| CVE-2024-40958 | redhat_vex | kernel: netns: Make get_net_ns() handle zero refcount net | fixed: 429 known affected: 64 known not affected: 8 | 2026-08-04T18:38:19+00:00 | Vulnerability · Source |
| CVE-2024-41018 | redhat_vex | kernel: fs/ntfs3: Add a check for attr_names and oatbl | known not affected: 198 | 2026-08-04T18:38:18+00:00 | Vulnerability · Source |
| CVE-2024-41034 | redhat_vex | kernel: nilfs2: fix kernel bug on rename operation of broken directory | known not affected: 198 | 2026-08-04T18:38:14+00:00 | Vulnerability · Source |
| CVE-2024-41016 | redhat_vex | kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() | known not affected: 198 | 2026-08-04T18:38:11+00:00 | Vulnerability · Source |
| CVE-2024-41070 | redhat_vex | kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() | known not affected: 198 | 2026-08-04T18:38:08+00:00 | Vulnerability · Source |
| CVE-2024-40980 | redhat_vex | kernel: drop_monitor: replace spin_lock by raw_spin_lock | known affected: 198 | 2026-08-04T18:38:07+00:00 | Vulnerability · Source |
| CVE-2024-41007 | redhat_vex | kernel: tcp: avoid too many retransmit packets | fixed: 709 known affected: 64 known not affected: 8 | 2026-08-04T18:38:07+00:00 | Vulnerability · Source |
| CVE-2024-40983 | redhat_vex | kernel: tipc: force a dst refcount before doing decryption | fixed: 663 known affected: 22 known not affected: 43 | 2026-08-04T18:37:55+00:00 | Vulnerability · Source |
| CVE-2024-41009 | redhat_vex | kernel: bpf: Fix overrunning reservations in ringbuf | fixed: 1209 known affected: 50 known not affected: 15 | 2026-08-04T18:37:50+00:00 | Vulnerability · Source |
| CVE-2024-40954 | redhat_vex | kernel: net: do not leave a dangling sk pointer, when socket creation fails | fixed: 429 known affected: 64 known not affected: 8 | 2026-08-04T18:37:45+00:00 | Vulnerability · Source |
| CVE-2024-41040 | redhat_vex | kernel: net/sched: Fix UAF when resolving a clash | fixed: 783 known affected: 22 known not affected: 43 | 2026-08-04T18:37:44+00:00 | Vulnerability · Source |
| CVE-2024-40990 | redhat_vex | kernel: RDMA/mlx5: Add check for srq max_sge attribute | known affected: 198 | 2026-08-04T18:37:40+00:00 | Vulnerability · Source |
| CVE-2024-40986 | redhat_vex | kernel: dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr() | known not affected: 198 | 2026-08-04T18:37:39+00:00 | Vulnerability · Source |