Anolis

OpenAnolis

CVEs, 365 days023 all time, 3 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationOpenAnolis
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeOpenAnolis issues only.
Advisorieshttps://anas.openanolis.cn/errata
  • CVE-2025-1390 2025-02-18 · CVSS 6.1
    The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorr
  • CVE-2024-24856 2024-04-17 · CVSS 5.3
    The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that r
  • CVE-2024-24864 2024-02-05 · CVSS 5.3
    A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leadin
  • CVE-2024-24857 2024-02-05 · CVSS 4.6
    A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow is
  • CVE-2024-24858 2024-02-05 · CVSS 4.6
    A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast
  • CVE-2024-24859 2024-02-05 · CVSS 4.6
    A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception iss
  • CVE-2024-24860 2024-02-05 · CVSS 4.6
    A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference iss
  • CVE-2024-24861 2024-02-05 · CVSS 3.3
    A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow
  • CVE-2024-24855 2024-02-05 · CVSS 5.0
    A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issu
  • CVE-2024-23196 2024-02-05 · CVSS 5.3
    A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference issu
  • CVE-2024-22386 2024-02-05 · CVSS 5.3
    A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer derefe
  • CVE-2024-21803 2024-01-30 · CVSS 3.5
    Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associate
  • CVE-2024-22099 2024-01-25 · CVSS 6.3
    NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is a
  • CVE-2024-23307 2024-01-25 · CVSS 4.4
    Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.
  • CVE-2022-36402 2022-09-16 · CVSS 6.3
    An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/
  • CVE-2022-40133 2022-09-09 · CVSS 6.3
    A use-after-free(UAF) vulnerability was found in function 'vmw_execbuf_tie_context' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with
  • CVE-2022-38457 2022-09-09 · CVSS 6.3
    A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device
  • CVE-2022-38096 2022-09-09 · CVSS 6.3
    A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/d
  • CVE-2022-36280 2022-09-09 · CVSS 6.3
    An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device
  • CVE-2022-1678 2022-05-25 · CVSS 5.9
    An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be us

All CVE Program partners