https://vulnogram.org/ Most recent CVEs assigned by OpenAnolis (anolis). https://vulnogram.org/seaview/icons/anolis.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-1390 https://vulnogram.org/CVE-2025-1390 The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inh… Medium Tue, 18 Feb 2025 02:34:44 GMT https://vulnogram.org/CVE-2024-24856 https://vulnogram.org/CVE-2024-24856 The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference. To fix this issue, a null pointer… Medium Wed, 17 Apr 2024 08:34:59 GMT https://vulnogram.org/CVE-2024-24864 https://vulnogram.org/CVE-2024-24864 A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Medium Mon, 05 Feb 2024 07:36:04 GMT https://vulnogram.org/CVE-2024-24857 https://vulnogram.org/CVE-2024-24857 A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service. Medium Mon, 05 Feb 2024 07:31:31 GMT https://vulnogram.org/CVE-2024-24858 https://vulnogram.org/CVE-2024-24858 A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service. Medium Mon, 05 Feb 2024 07:30:55 GMT https://vulnogram.org/CVE-2024-24859 https://vulnogram.org/CVE-2024-24859 A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service. Medium Mon, 05 Feb 2024 07:28:06 GMT https://vulnogram.org/CVE-2024-24860 https://vulnogram.org/CVE-2024-24860 A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Medium Mon, 05 Feb 2024 07:27:31 GMT https://vulnogram.org/CVE-2024-24861 https://vulnogram.org/CVE-2024-24861 A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow issue, possibly leading to malfunction or denial of service issue. Low Mon, 05 Feb 2024 07:26:43 GMT https://vulnogram.org/CVE-2024-24855 https://vulnogram.org/CVE-2024-24855 A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Medium Mon, 05 Feb 2024 07:25:41 GMT https://vulnogram.org/CVE-2024-23196 https://vulnogram.org/CVE-2024-23196 A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Medium Mon, 05 Feb 2024 07:22:39 GMT https://vulnogram.org/CVE-2024-22386 https://vulnogram.org/CVE-2024-22386 A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Medium Mon, 05 Feb 2024 07:21:20 GMT https://vulnogram.org/CVE-2024-21803 https://vulnogram.org/CVE-2024-21803 Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/a… Low Tue, 30 Jan 2024 07:15:33 GMT https://vulnogram.org/CVE-2024-22099 https://vulnogram.org/CVE-2024-22099 NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel… Medium Thu, 25 Jan 2024 07:02:59 GMT https://vulnogram.org/CVE-2024-23307 https://vulnogram.org/CVE-2024-23307 Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow. Medium Thu, 25 Jan 2024 06:59:37 GMT https://vulnogram.org/CVE-2022-36402 https://vulnogram.org/CVE-2022-36402 An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system… Medium Fri, 16 Sep 2022 16:08:01 GMT https://vulnogram.org/CVE-2022-40133 https://vulnogram.org/CVE-2022-40133 A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user… Medium Fri, 09 Sep 2022 14:39:51 GMT https://vulnogram.org/CVE-2022-38457 https://vulnogram.org/CVE-2022-38457 A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user accou… Medium Fri, 09 Sep 2022 14:39:51 GMT https://vulnogram.org/CVE-2022-38096 https://vulnogram.org/CVE-2022-38096 A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the… Medium Fri, 09 Sep 2022 14:39:51 GMT https://vulnogram.org/CVE-2022-36280 https://vulnogram.org/CVE-2022-36280 An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user accou… Medium Fri, 09 Sep 2022 14:39:50 GMT https://vulnogram.org/CVE-2022-1678 https://vulnogram.org/CVE-2022-1678 An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients. Medium Network Exploitable Wed, 25 May 2022 14:49:30 GMT