VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
299464 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2022-0847 | redhat_vex | kernel: improper initialization of the "flags" member of the new pipe_buffer | fixed: 499 known not affected: 154 | 2026-06-28T05:23:53+00:00 | Vulnerability · Source |
| CVE-2022-0168 | redhat_vex | kernel: smb2_ioctl_query_info NULL pointer dereference | fixed: 475 known not affected: 42 | 2026-06-28T05:23:49+00:00 | Vulnerability · Source |
| CVE-2022-0500 | redhat_vex | kernel: Linux ebpf logic vulnerability leads to critical memory read and write gaining root privileges | fixed: 399 known affected: 108 known not affected: 42 | 2026-06-28T05:23:49+00:00 | Vulnerability · Source |
| CVE-2021-44907 | redhat_vex | qs: Insufficient sanitization of property in the gs.parse function | known affected: 1 known not affected: 66 | 2026-06-28T05:23:32+00:00 | Vulnerability · Source |
| CVE-2021-44716 | redhat_vex | golang: net/http: limit growth of header canonicalization cache | fixed: 891 known affected: 97 known not affected: 806 | 2026-06-28T05:23:31+00:00 | Vulnerability · Source |
| CVE-2026-53228 | microsoft_vex | ipv6: sit: reload inner IPv6 header after GSO offloads | fixed: 1 known affected: 1 | 2026-06-28T02:06:40+00:00 | Vulnerability · Source |
| CVE-2026-53225 | microsoft_vex | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | fixed: 1 known affected: 1 | 2026-06-28T02:06:33+00:00 | Vulnerability · Source |
| CVE-2026-53237 | microsoft_vex | gpio: mvebu: fix NULL pointer dereference in suspend/resume | fixed: 1 known affected: 1 | 2026-06-28T02:05:51+00:00 | Vulnerability · Source |
| CVE-2026-53148 | microsoft_vex | thunderbolt: Clamp XDomain response data copy to allocation size | fixed: 1 known affected: 1 | 2026-06-28T02:05:41+00:00 | Vulnerability · Source |
| CVE-2025-21672 | microsoft_vex | afs: Fix merge preference rule failure condition | under investigation: 19 | 2026-06-28T02:05:14+00:00 | Vulnerability · Source |
| CVE-2026-23472 | microsoft_vex | serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN | known affected: 7 | 2026-06-28T02:05:08+00:00 | Vulnerability · Source |
| CVE-2025-21634 | microsoft_vex | cgroup/cpuset: remove kernfs active break | under investigation: 19 | 2026-06-28T02:05:00+00:00 | Vulnerability · Source |
| CVE-2026-53255 | microsoft_vex | Bluetooth: MGMT: validate advertising TLV before type checks | fixed: 1 known affected: 1 | 2026-06-28T02:04:56+00:00 | Vulnerability · Source |
| CVE-2026-35387 | microsoft_vex | OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms. | fixed: 2 known affected: 4 | 2026-06-28T02:04:54+00:00 | Vulnerability · Source |
| CVE-2024-56702 | microsoft_vex | bpf: Mark raw_tp arguments with PTR_MAYBE_NULL | under investigation: 16 | 2026-06-28T02:04:44+00:00 | Vulnerability · Source |
| CVE-2024-56544 | microsoft_vex | udmabuf: change folios array from kmalloc to kvmalloc | under investigation: 19 | 2026-06-28T02:04:29+00:00 | Vulnerability · Source |
| CVE-2025-66038 | microsoft_vex | OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers | fixed: 3 known affected: 3 known not affected: 1 | 2026-06-28T02:04:24+00:00 | Vulnerability · Source |
| CVE-2025-21649 | microsoft_vex | net: hns3: fix kernel crash when 1588 is sent on HIP08 devices | under investigation: 19 | 2026-06-28T02:04:08+00:00 | Vulnerability · Source |
| CVE-2026-9697 | microsoft_vex | undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent | fixed: 1 known affected: 1 | 2026-06-28T02:04:02+00:00 | Vulnerability · Source |
| CVE-2025-49010 | microsoft_vex | OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE | fixed: 4 known affected: 4 | 2026-06-28T02:04:00+00:00 | Vulnerability · Source |
| CVE-2024-57872 | microsoft_vex | scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() | under investigation: 19 | 2026-06-28T02:03:52+00:00 | Vulnerability · Source |
| CVE-2026-53149 | microsoft_vex | thunderbolt: Bound root directory content to block size | fixed: 1 known affected: 1 | 2026-06-28T02:03:51+00:00 | Vulnerability · Source |
| CVE-2026-53275 | microsoft_vex | ipv6: mcast: Fix use-after-free when processing MLD queries | fixed: 1 known affected: 1 | 2026-06-28T02:03:47+00:00 | Vulnerability · Source |
| CVE-2024-53187 | microsoft_vex | io_uring: check for overflows in io_pin_pages | under investigation: 19 | 2026-06-28T02:03:37+00:00 | Vulnerability · Source |
| CVE-2024-26944 | microsoft_vex | btrfs: zoned: fix use-after-free in do_zone_finish() | known affected: 17 | 2026-06-28T02:03:22+00:00 | Vulnerability · Source |
| CVE-2026-53249 | microsoft_vex | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | fixed: 1 known affected: 1 | 2026-06-28T02:03:15+00:00 | Vulnerability · Source |
| CVE-2024-56782 | microsoft_vex | ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() | under investigation: 19 | 2026-06-28T02:03:07+00:00 | Vulnerability · Source |
| CVE-2025-38359 | microsoft_vex | s390/mm: Fix in_atomic() handling in do_secure_storage_access() | known affected: 16 known not affected: 1 | 2026-06-28T02:03:01+00:00 | Vulnerability · Source |
| CVE-2026-52923 | microsoft_vex | ipc: limit next_id allocation to the valid ID range | fixed: 1 known affected: 1 | 2026-06-28T02:02:57+00:00 | Vulnerability · Source |
| CVE-2024-56775 | microsoft_vex | drm/amd/display: Fix handling of plane refcount | known affected: 19 | 2026-06-28T02:02:51+00:00 | Vulnerability · Source |
| CVE-2025-38311 | microsoft_vex | iavf: get rid of the crit lock | under investigation: 16 | 2026-06-28T02:02:47+00:00 | Vulnerability · Source |
| CVE-2024-53201 | microsoft_vex | drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe | under investigation: 16 | 2026-06-28T02:02:36+00:00 | Vulnerability · Source |
| CVE-2025-38272 | microsoft_vex | net: dsa: b53: do not enable EEE on bcm63xx | known affected: 19 | 2026-06-28T02:02:32+00:00 | Vulnerability · Source |
| CVE-2025-13462 | microsoft_vex | tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling | fixed: 2 known affected: 5 known not affected: 1 | 2026-06-28T02:02:25+00:00 | Vulnerability · Source |
| CVE-2023-52485 | microsoft_vex | drm/amd/display: Wake DMCUB before sending a command | under investigation: 19 | 2026-06-28T02:02:22+00:00 | Vulnerability · Source |
| CVE-2025-38269 | microsoft_vex | btrfs: exit after state insertion failure at btrfs_convert_extent_bit() | known affected: 19 | 2026-06-28T02:02:17+00:00 | Vulnerability · Source |
| CVE-2026-53181 | microsoft_vex | vsock/vmci: fix sk_ack_backlog leak on failed handshake | fixed: 1 known affected: 1 | 2026-06-28T02:02:07+00:00 | Vulnerability · Source |
| CVE-2024-42107 | microsoft_vex | ice: Don't process extts if PTP is disabled | under investigation: 20 | 2026-06-28T02:02:05+00:00 | Vulnerability · Source |
| CVE-2025-38279 | microsoft_vex | bpf: Do not include stack ptr register in precision backtracking bookkeeping | known affected: 16 | 2026-06-28T02:01:59+00:00 | Vulnerability · Source |
| CVE-2024-56742 | microsoft_vex | vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() | under investigation: 17 | 2026-06-28T02:01:49+00:00 | Vulnerability · Source |
| CVE-2025-38303 | microsoft_vex | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | known affected: 16 | 2026-06-28T02:01:45+00:00 | Vulnerability · Source |
| CVE-2024-56712 | microsoft_vex | udmabuf: fix memory leak on last export_udmabuf() error path | under investigation: 19 | 2026-06-28T02:01:34+00:00 | Vulnerability · Source |
| CVE-2025-38333 | microsoft_vex | f2fs: fix to bail out in get_new_segment() | known affected: 16 known not affected: 1 under investigation: 1 | 2026-06-28T02:01:28+00:00 | Vulnerability · Source |
| CVE-2026-53150 | microsoft_vex | thunderbolt: Reject zero-length property entries in validator | fixed: 1 known affected: 1 | 2026-06-28T02:01:19+00:00 | Vulnerability · Source |
| CVE-2024-53089 | microsoft_vex | LoongArch: KVM: Mark hrtimer to expire in hard interrupt context | under investigation: 19 | 2026-06-28T02:01:19+00:00 | Vulnerability · Source |
| CVE-2024-53090 | microsoft_vex | afs: Fix lock recursion | under investigation: 19 | 2026-06-28T02:01:04+00:00 | Vulnerability · Source |
| CVE-2026-52924 | microsoft_vex | sctp: purge outqueue on stale COOKIE-ECHO handling | fixed: 1 known affected: 1 | 2026-06-28T02:01:01+00:00 | Vulnerability · Source |
| CVE-2024-26962 | microsoft_vex | dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape | under investigation: 19 | 2026-06-28T02:00:44+00:00 | Vulnerability · Source |
| CVE-2025-38140 | microsoft_vex | dm: limit swapping tables for devices with zone write plugs | known affected: 19 | 2026-06-28T02:00:40+00:00 | Vulnerability · Source |
| CVE-2026-43973 | microsoft_vex | gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion | fixed: 2 known affected: 2 | 2026-06-28T02:00:37+00:00 | Vulnerability · Source |