Linuxfoundation vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-37532 AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library.High 7.1 · May 1, 2026
• CVE-2026-37531 AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget instCritical 9.8 · May 1, 2026
• CVE-2026-37530 AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library.High 7.5 · May 1, 2026
• CVE-2026-37526 AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision commands (Exit, Do, Sclose, Config, Trace, DebHigh 7.8 · May 1, 2026
• CVE-2026-37525 AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command.High 7.8 · May 1, 2026
• CVE-2025-65566 A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.High 7.5 · Dec 18, 2025
• CVE-2025-55560 An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is coHigh 7.5 · Sep 25, 2025
• CVE-2025-55558 A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() anHigh 7.5 · Sep 25, 2025
• CVE-2025-55557 A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).High 7.5 · Sep 25, 2025
• CVE-2025-55553 A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).High 7.5 · Sep 25, 2025
• CVE-2025-55552 pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.High 7.5 · Sep 25, 2025
• CVE-2025-55551 An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.High 7.5 · Sep 25, 2025
• CVE-2025-51480 Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted eHigh 8.8 · Jul 22, 2025
• CVE-2024-53351 Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.Critical 9.8 · Mar 21, 2025
• CVE-2024-53349 Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escalation of privileges via the secretes comHigh 7.4 · Mar 21, 2025
• CVE-2024-24423 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esHigh 7.5 · Jan 21, 2025
• CVE-2024-24422 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the decode_proHigh 7.5 · Jan 21, 2025
• CVE-2024-24421 A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to executCritical 9.8 · Jan 21, 2025
• CVE-2024-24420 A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to High 7.5 · Jan 21, 2025
• CVE-2024-24419 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_trHigh 7.5 · Jan 21, 2025
• CVE-2024-24418 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdHigh 7.5 · Jan 21, 2025
• CVE-2024-24417 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_prHigh 7.5 · Jan 21, 2025
• CVE-2024-24416 The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_acHigh 7.5 · Jan 21, 2025
• CVE-2023-37032 A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) aHigh 7.5 · Jan 21, 2025
• CVE-2023-37029 Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packetHigh 7.5 · Jan 21, 2025