{"kind": "product", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "name": "linux-snapdragon", "product": "linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS", "items": [{"id": "CVE-2021-0447", "noindex": false, "published": "2025-01-17T23:15:00Z", "modified": "2026-10-13T15:12:47.086899213Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-0447", "title": "UBUNTU-CVE-2021-0447", "description": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "references": ["https://ubuntu.com/security/CVE-2021-0447", "https://source.android.com/security/bulletin/pixel/2021-03-01", "https://www.cve.org/CVERecord?id=CVE-2021-0447"], "fixes": ["4.4.0-1140.148"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-11935", "noindex": false, "published": "2023-04-07T00:00:00.000Z", "modified": "2024-08-04T11:42:00.593Z", "cvss": 4.4, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.002, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-11935", "title": "aufs: improperly managed inode reference counts in the vfsub_dentry_open() method", "description": "It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.", "references": ["https://ubuntu.com/security/CVE-2020-11935", "https://bugs.launchpad.net/bugs/1873074", "https://nvd.nist.gov/vuln/detail/CVE-2020-11935"], "fixes": ["4.4.0-1140.148"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2017-1000", "noindex": false, "published": "2023-02-22T23:15:00Z", "modified": "2026-04-22T11:08:46.041723Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2017-1000", "title": "UBUNTU-CVE-2017-1000", "description": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none.", "references": ["https://ubuntu.com/security/CVE-2017-1000", "https://git.kernel.org/linus/85f1bd9a7b5a79d5baa8bf44af19658f7bf77bfa", "https://www.cve.org/CVERecord?id=CVE-2017-1000"], "fixes": ["4.4.0-1071.76"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-27815", "noindex": false, "published": "2021-05-26T12:18:11.000Z", "modified": "2024-08-04T16:25:43.353Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00788, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-27815", "title": "CVE-2020-27815", "description": "A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.", "references": ["http://www.openwall.com/lists/oss-security/2020/11/30/5", "http://www.openwall.com/lists/oss-security/2020/12/28/1", "https://www.debian.org/security/2021/dsa-4843"], "fixes": ["4.4.0-1150.160"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-25669", "noindex": false, "published": "2021-05-26T11:25:08.000Z", "modified": "2024-08-04T15:40:36.924Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00627, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-25669", "title": "CVE-2020-25669", "description": "A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.", "references": ["http://www.openwall.com/lists/oss-security/2020/11/05/2", "http://www.openwall.com/lists/oss-security/2020/11/20/5", "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html"], "fixes": ["4.4.0-1149.159"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-25668", "noindex": false, "published": "2021-05-26T11:11:04.000Z", "modified": "2024-08-04T15:40:36.882Z", "cvss": 7, "cvss_vector": "", "severity": "high", "epss": 0.01026, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-25668", "title": "CVE-2020-25668", "description": "A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.", "references": ["http://www.openwall.com/lists/oss-security/2020/10/30/1", "http://www.openwall.com/lists/oss-security/2020/11/04/3", "https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html"], "fixes": ["4.4.0-1147.157"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-35519", "noindex": false, "published": "2021-05-06T14:18:35.000Z", "modified": "2024-08-04T17:02:08.133Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00408, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-35519", "title": "CVE-2020-35519", "description": "An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1908251", "https://security.netapp.com/advisory/ntap-20210618-0009/", "https://nvd.nist.gov/vuln/detail/CVE-2020-35519"], "fixes": ["4.4.0-1150.160"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "USN-4916-2", "noindex": true, "published": "2021-04-22T03:59:34Z", "modified": "2026-04-22T10:14:08.006304Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/usn-4916-2", "title": "linux, linux-aws, linux-gke-5.3, linux-hwe, linux-kvm, linux-lts-xenial, linux-oem-5.6, linux-raspi2, linux-raspi2-5.3, linux-snapdragon regression", "description": "USN-4916-1 fixed vulnerabilities in the Linux kernel. Unfortunately,\nthe fix for CVE-2021-3493 introduced a memory leak in some situations.\nThis update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that the overlayfs implementation in the Linux kernel did\n not properly validate the application of file system capabilities with\n respect to user namespaces. A local attacker could use this to gain\n elevated privileges. (CVE-2021-3493)\n\n Piotr Krysiuk discovered that the BPF JIT compiler for x86 in the Linux\n kernel did not properly validate computation of branch displacements in\n some situ", "references": ["https://ubuntu.com/security/notices/USN-4916-2", "https://launchpad.net/bugs/1924611", "https://osv.dev/vulnerability/USN-4916-2"], "fixes": ["4.4.0-1156.166"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-3493", "noindex": false, "published": "2021-04-17T04:20:16.706Z", "modified": "2025-10-21T23:25:48.908Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.49166, "kev": true, "exploits": ["metasploit"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-3493", "title": "CVE-2021-3493", "description": "The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.", "references": ["https://ubuntu.com/security/notices/USN-4917-1", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52", "https://www.openwall.com/lists/oss-security/2021/04/16/1"], "fixes": ["4.4.0-1155.165"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-29154", "noindex": false, "published": "2021-04-08T00:00:00.000Z", "modified": "2024-08-03T22:02:50.602Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00931, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-29154", "title": "CVE-2021-29154", "description": "BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.", "references": ["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5YFGIIF24475A2LNW3UWHW2SNCS3G7M/", "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html", "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html"], "fixes": ["4.4.0-1155.165"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2020-35508", "noindex": false, "published": "2021-03-26T16:45:18.000Z", "modified": "2024-08-04T17:02:08.050Z", "cvss": 4.5, "cvss_vector": "", "severity": "medium", "epss": 0.00225, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2020-35508", "title": "CVE-2020-35508", "description": "A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1902724", "https://github.com/torvalds/linux/commit/b4e00444cab4c3f3fec876dc0cccc8cbb0d1a948", "https://security.netapp.com/advisory/ntap-20210513-0006/"], "fixes": ["4.4.0-1147.157"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-20261", "noindex": false, "published": "2021-03-11T20:10:40.000Z", "modified": "2024-08-03T17:37:23.306Z", "cvss": 6.4, "cvss_vector": "", "severity": "medium", "epss": 0.00227, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-20261", "title": "CVE-2021-20261", "description": "A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricted to root. If the permissions on the device have changed the impact changes greatly. In the default configuration root (or equivalent) permissions are required to attack this flaw.", "references": ["https://bugzilla.redhat.com/show_bug.cgi?id=1932150", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a0c80efe5956ccce9fe7ae5c78542578c07bc20a", "https://nvd.nist.gov/vuln/detail/CVE-2021-20261"], "fixes": ["4.4.0-1154.164"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-27365", "noindex": false, "published": "2021-03-07T04:22:58.000Z", "modified": "2024-08-03T20:48:16.561Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.02097, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-27365", "title": "CVE-2021-27365", "description": "An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.", "references": ["https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html", "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html", "https://www.oracle.com/security-alerts/cpuoct2021.html"], "fixes": ["4.4.0-1152.162"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-27364", "noindex": false, "published": "2021-03-07T04:03:38.000Z", "modified": "2024-08-03T20:48:16.468Z", "cvss": 7.1, "cvss_vector": "", "severity": "high", "epss": 0.00965, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-27364", "title": "CVE-2021-27364", "description": "An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.", "references": ["https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html", "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html", "https://www.oracle.com/security-alerts/cpuoct2021.html"], "fixes": ["4.4.0-1152.162"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-27363", "noindex": false, "published": "2021-03-07T03:55:58.000Z", "modified": "2024-08-03T20:48:16.475Z", "cvss": 4.4, "cvss_vector": "", "severity": "medium", "epss": 0.00711, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-27363", "title": "CVE-2021-27363", "description": "An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.", "references": ["http://www.openwall.com/lists/oss-security/2021/03/06/1", "https://bugzilla.suse.com/show_bug.cgi?id=1182716", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa"], "fixes": ["4.4.0-1152.162"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-28038", "noindex": false, "published": "2021-03-05T00:00:00.000Z", "modified": "2024-08-03T21:33:17.329Z", "cvss": 6.5, "cvss_vector": "", "severity": "medium", "epss": 0.00708, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-28038", "title": "CVE-2021-28038", "description": "An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.", "references": ["http://xenbits.xen.org/xsa/advisory-367.html", "http://www.openwall.com/lists/oss-security/2021/03/05/1", "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html"], "fixes": ["4.4.0-1154.164"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-0448", "noindex": false, "published": "2021-03-03T00:00:00Z", "modified": "2026-10-13T15:12:51.797412512Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-0448", "title": "UBUNTU-CVE-2021-0448", "description": "[Unknown description]", "references": ["https://ubuntu.com/security/CVE-2021-0448", "https://source.android.com/security/bulletin/pixel/2021-03-01", "https://www.cve.org/CVERecord?id=CVE-2021-0448"], "fixes": ["4.4.0-1146.156"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-26931", "noindex": false, "published": "2021-02-17T00:00:00.000Z", "modified": "2024-08-03T20:33:41.548Z", "cvss": 5.5, "cvss_vector": "", "severity": "medium", "epss": 0.00556, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-26931", "title": "CVE-2021-26931", "description": "An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory conditions), it isn't correct to assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c.", "references": ["http://xenbits.xen.org/xsa/advisory-362.html", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/"], "fixes": ["4.4.0-1154.164"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-26930", "noindex": false, "published": "2021-02-17T00:00:00.000Z", "modified": "2024-08-03T20:33:41.395Z", "cvss": 7.8, "cvss_vector": "", "severity": "high", "epss": 0.00348, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-26930", "title": "CVE-2021-26930", "description": "An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error. This affects drivers/block/xen-blkback/blkback.c.", "references": ["http://xenbits.xen.org/xsa/advisory-365.html", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/"], "fixes": ["4.4.0-1154.164"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2021-3178", "noindex": false, "published": "2021-01-19T06:44:51.000Z", "modified": "2024-08-03T16:45:51.326Z", "cvss": 6.5, "cvss_vector": "", "severity": "medium", "epss": 0.02447, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2021-3178", "title": "CVE-2021-3178", "description": "fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior", "references": ["https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652%40fieldses.org/", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51b2ee7d006a736a9126e8111d1f24e4fd0afaa6", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5SGB7TNDVQEOJ7NVTGX56UWHDNQM5TRC/"], "fixes": ["4.4.0-1151.161"], "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}]}], "total": 674, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 34, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "linux-snapdragon", "path": "vulns/ubuntu-16.04-lts/linux-snapdragon", "ecosystem": "Ubuntu:16.04:LTS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-10-13T15:12:51.797412512Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}