Vulnerabilidades explotables hoy
367,069en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,685
Nuevos KEV · 24H0
Exploit Today ≥ 701,629
Distribución · última ventana
- Crítico2,242
- Alto9,242
- Medio5,232
- Bajo501
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-46774—0.1%
——0——CVE-2026-530084.7 MED0.1%
——0In the Linux kernel, the following vulnerability has been resolved:
ice: fix race condition in TX timestamp ring cleanup
Fix a race condition between ice_free_tx_tstamp_ring() and ice_tx_map()
that can cause a NULL pointer dereference.
ice_free_tx_tstamp_ring currently clears the ICE_TX_FLAGS_TXTIME flag
after NULLing the tstamp_ring. This could allow a concurrent ice_tx_map
call on another CPU to dereference the tstamp_ring, which could lead to
a NULL pointer dereference.
CPU A:ice_free_tx_tstamp_ring() | CPU B:ice_tx_map()
--------------------------------|---------------------------------
tx_ring->tstamp_ring = NULL |
| ice_is_txtime_cfg() -> true
| tstamp_ring = tx_ring->tstamp_ring
| tstamp_ring->count // NULL deref!
flags &= ~ICE_TX_FLAGS_TXTIME |
Fix by:
1. Reordering ice_free_tx_tstamp_ring() to clear the flag before
NULLing the pointer, with smp_wmb() to ensure proper ordering.
2. Adding smp_rmb() in ice_tx_map() after the flag check to order the
flag read before the pointer read, using READ_ONCE() for the
pointer, and adding a NULL check as a safety net.
3. Converting tx_ring->flags from u8 to DECLARE_BITMAP() and using
atomic bitops (set_bit(), clear_bit(), test_bit()) for all flag
operations throughout the driver:
- ICE_TX_RING_FLAGS_XDP
- ICE_TX_RING_FLAGS_VLAN_L2TAG1
- ICE_TX_RING_FLAGS_VLAN_L2TAG2
- ICE_TX_RING_FLAGS_TXTIME48dCVE-2018-9432—0.1%
——0——CVE-2026-32318—0.1%
——0——CVE-2022-20373—0.1%
——0——CVE-2026-419845.2 MED0.1%
——0UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.39dCVE-2024-34742—0.1%
——0——CVE-2026-10685.3 MED0.1%
——0An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.12dCVE-2023-38441—0.1%
——0——CVE-2023-37397—0.1%
——0——CVE-2026-41967—0.1%
——0——CVE-2023-33110—0.1%
——0——CVE-2024-29787—0.1%
——0——CVE-2023-20825—0.1%
——0——CVE-2026-20443—0.1%
——0——CVE-2024-32917—0.1%
——0——CVE-2023-38465—0.1%
——0——CVE-2024-32916—0.1%
——0——CVE-2024-20123—0.1%
——0——CVE-2025-48551—0.1%
——0——CVE-2026-11329—0.1%
——0——CVE-2026-204546.4 MED0.1%
——0In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.40dCVE-2025-26437—0.1%
——0——CVE-2026-0107—0.1%
——0——CVE-2024-53840—0.1%
——0——CVE-2024-20122—0.1%
——0——CVE-2025-22418—0.1%
——0——CVE-2026-4430—0.1%
——0——CVE-2025-36922—0.1%
——0——CVE-2024-53010—0.1%
——0——CVE-2024-32920—0.1%
——0——CVE-2025-27032—0.1%
——0——CVE-2026-20441—0.1%
——0——CVE-2025-47335—0.1%
——0——CVE-2023-40639—0.1%
——0——CVE-2025-32316—0.1%
——0——CVE-2024-20124—0.1%
——0——CVE-2018-9382—0.1%
——0——CVE-2023-20824—0.1%
——0——CVE-2022-20396—0.1%
——0——