| | CVE-2025-71135 |  Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
md/raid5: fix possible null-poin… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71134 | Red Hat | low | 3.3 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
mm/page_alloc: change all pagebl… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71131 | Red Hat | medium | 5.5 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
crypto: seqiv - Do not use req->… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71112 | Red Hat | medium | 4.4 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
net: hns3: add VLAN id validatio… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71110 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
mm/slub: reset KASAN tag in defe… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71127 | Red Hat | medium | 6.3 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: Discard Beacon f… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71117 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
block: Remove queue freezing fro… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71129 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
LoongArch: BPF: Sign extend kfun… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71136 | Red Hat | medium | — | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
media: adv7842: Avoid possible o… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71133 | Red Hat | low | 3.1 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: avoid invalid read i… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71105 | Red Hat | medium | — | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
f2fs: use global inline_xattr_sl… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71106 | Red Hat | low | 3.3 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
fs: PM: Fix reverse check in fil… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71123 | Red Hat | low | 3.3 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
ext4: fix string copying in pars… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71125 | Red Hat | low | 3.3 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
tracing: Do not register unsuppo… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71115 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
um: init cpu_tasks[] earlier
Thi… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71109 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
MIPS: ftrace: Fix memory corrupt… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71124 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
drm/msm/a6xx: move preempt_prepa… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71103 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
drm/msm: adreno: fix deferencing… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71116 | Red Hat | medium | 7.1 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
libceph: make decode_pool() more… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71132 | Red Hat | medium | 4.7 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
smc91x: fix broken irq-context i… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71119 | Red Hat | low | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
powerpc/kexec: Enable SMT before… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71130 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Zero-initialize th… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71118 | Red Hat | low | 5.5 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Avoid walking the Namesp… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71120 | Red Hat | medium | 6.5 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: svcauth_gss: avoid NULL … | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71121 | Red Hat | medium | — | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
parisc: Do not reprogram affinit… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71107 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
f2fs: ensure node page reads com… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71137 | Red Hat | medium | 4.4 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: fix "UBSAN: shift-… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71113 | Red Hat | low | 3.3 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - zero initialize… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71108 | Red Hat | low | 3.3 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Handle incorre… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71142 | Red Hat | low | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
cpuset: fix warning when disabli… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71126 | Red Hat | medium | 4.4 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
mptcp: avoid deadlock on fallbac… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71122 | Red Hat | low | 2.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
iommufd/selftest: Check for over… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71128 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
erspan: Initialize options_len b… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71102 | Red Hat | medium | — | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
scs: fix a wrong parameter in __… | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-71141 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
drm/tilcdc: Fix removal actions … | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-70968 | Red Hat | high | 9.8 | 0.1%
| | FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). | Jan 14, 2026 | Jan 14, 2026 |
| | CVE-2025-37186 |  HPE | high | 7.8 | 0.0%
| | A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual I… | Jan 13, 2026 | Mar 2, 2026 |
| | CVE-2026-0543 | Red Hat | medium | 6.5 | 0.1%
| | Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Exc… | Jan 13, 2026 | Jan 13, 2026 |
| | CVE-2026-0531 | Red Hat | medium | 6.5 | 0.1%
| | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive… | Jan 13, 2026 | Jan 13, 2026 |
| | CVE-2026-0530 | Red Hat | medium | 6.5 | 0.1%
| | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive… | Jan 13, 2026 | Jan 13, 2026 |
| | CVE-2026-21226 |  Microsoft | high | 7.5 | 1.5%
| | Deserialization of untrusted data in Azure Core shared client library for Python allows an authorize… | Jan 13, 2026 | Feb 5, 2026 |
| | CVE-2026-22791 | Red Hat | medium | 6.6 | 0.0%
| | openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap… | Jan 13, 2026 | Jan 13, 2026 |
| | CVE-2026-21265 | Microsoft | medium | 6.4 | 0.3%
| | Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificate… | Jan 13, 2026 | Jan 14, 2026 |
| | CVE-2026-21224 | Microsoft | high | 7.8 | 0.1%
| | Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevat… | Jan 13, 2026 | Jan 14, 2026 |
| | CVE-2026-21219 | Microsoft | high | 7.0 | 0.1%
| | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | Jan 13, 2026 | Feb 9, 2026 |
| | CVE-2026-20965 | Microsoft | high | 7.5 | 0.0%
| | Improper verification of cryptographic signature in Windows Admin Center allows an authorized attack… | Jan 13, 2026 | Jan 16, 2026 |
| | CVE-2026-20959 | Microsoft | medium | 4.6 | 0.1%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Jan 13, 2026 | Jan 14, 2026 |
| | CVE-2026-20958 | Microsoft | medium | 5.4 | 0.1%
| | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d… | Jan 13, 2026 | Jan 14, 2026 |
| | CVE-2026-20957 | Microsoft | high | 7.8 | 0.1%
| | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to … | Jan 13, 2026 | Jan 14, 2026 |
| | CVE-2026-20956 | Microsoft | high | 7.8 | 0.1%
| | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c… | Jan 13, 2026 | Jan 14, 2026 |