[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-18683":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T02:53:27.892Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":36,"aliases":50,"duplicate_of":9,"upstream":51,"downstream":52,"duplicates":97,"related":98,"reserved_at":9,"published_at":112,"modified_at":113,"state":114,"summary":115,"references_raw":122,"kevs":190,"epss":191,"epss_history":194,"metrics":456,"affected":467},"CVE-2019-18683","An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.",null,[11,28],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],{"_key":29,"id":29,"name":30,"description":31,"type":15,"status":32,"abstraction":33,"likelihood_of_exploit":34,"capec":35},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","Stable","Variant","High",[],[37,46],{"_key":38,"name":39,"source":40,"url":41,"maturity":42,"reliability_score":43,"verified":44,"type":9,"platforms":45,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_62C28A10A919A29E","Exploit Reference (openwall.com)","reference","https://www.openwall.com/lists/oss-security/2019/11/02/1","unknown",0.2,false,[],{"_key":47,"name":39,"source":40,"url":48,"maturity":42,"reliability_score":43,"verified":44,"type":9,"platforms":49,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_E5A8ACECACDD29D4","http://www.openwall.com/lists/oss-security/2019/11/05/1",[],[],[],[53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95],{"_key":54},"SUSE-SU-2019:3200-1",{"_key":56},"SUSE-SU-2020:0613-1",{"_key":58},"SUSE-SU-2019:3289-1",{"_key":60},"SUSE-SU-2019:3316-1",{"_key":62},"SUSE-SU-2019:3317-1",{"_key":64},"SUSE-SU-2019:3371-1",{"_key":66},"SUSE-SU-2019:3372-1",{"_key":68},"SUSE-SU-2019:3379-1",{"_key":70},"SUSE-SU-2019:3381-1",{"_key":72},"SUSE-SU-2020:0093-1",{"_key":74},"SUSE-SU-2020:0599-1",{"_key":76},"SUSE-SU-2020:1255-1",{"_key":78},"OPENSUSE-SU-2019:2675-1",{"_key":80},"DLA-2114-1",{"_key":82},"DEBIAN-CVE-2019-18683",{"_key":84},"UBUNTU-CVE-2019-18683",{"_key":86},"USN-4254-1",{"_key":88},"USN-4254-2",{"_key":90},"USN-4258-1",{"_key":92},"USN-4284-1",{"_key":94},"USN-4287-1",{"_key":96},"USN-4287-2",[],[99,100,101,102,103,104,105,106,107,108,109,110,111],{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":64},{"_key":66},{"_key":68},{"_key":70},{"_key":72},{"_key":74},{"_key":76},{"_key":78},"2019-11-04T15:36:14.000Z","2024-08-05T02:02:38.287Z","Modified",{"cisa_kev":44,"cisa_ransomware":44,"cisa_vendor":9,"epss_severity":116,"epss_score":117,"severity":118,"severity_score":4,"severity_version":119,"severity_source":120,"severity_vector":121,"severity_status":114},"low",0.00893,"high","v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",[123,131,136,140,145,150,156,161,166,170,174,178,182,186],{"url":41,"sources":124,"tags":126},[125,120],"cve.org",[127,128,129,130],"X Refsource MISC","Exploit","Mailing List","Third Party Advisory",{"url":132,"sources":133,"tags":134},"https://lore.kernel.org/lkml/20191103221719.27118-1-alex.popov%40linux.com/",[125,120],[127,135],"Vendor Advisory",{"url":48,"sources":137,"tags":138},[125,120],[129,139,128,130],"X Refsource MLIST",{"url":141,"sources":142,"tags":143},"https://security.netapp.com/advisory/ntap-20191205-0001/",[125,120],[144,130],"X Refsource CONFIRM",{"url":146,"sources":147,"tags":148},"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html",[125,120],[135,149,129,130],"X Refsource SUSE",{"url":151,"sources":152,"tags":153},"https://seclists.org/bugtraq/2020/Jan/10",[125,120],[129,154,155,130],"X Refsource BUGTRAQ","Patch",{"url":157,"sources":158,"tags":159},"http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",[125,120],[127,130,160],"VDB Entry",{"url":162,"sources":163,"tags":164},"https://usn.ubuntu.com/4254-1/",[125,120],[135,165,130],"X Refsource UBUNTU",{"url":167,"sources":168,"tags":169},"https://usn.ubuntu.com/4254-2/",[125,120],[135,165,130],{"url":171,"sources":172,"tags":173},"https://usn.ubuntu.com/4258-1/",[125,120],[135,165,130],{"url":175,"sources":176,"tags":177},"https://usn.ubuntu.com/4287-1/",[125,120],[135,165,130],{"url":179,"sources":180,"tags":181},"https://usn.ubuntu.com/4287-2/",[125,120],[135,165,130],{"url":183,"sources":184,"tags":185},"https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html",[125,120],[129,139,130],{"url":187,"sources":188,"tags":189},"https://usn.ubuntu.com/4284-1/",[125,120],[135,165,130],[],{"date":192,"score":117,"percentile":193},"2026-06-03",0.75947,[195,199,202,205,208,211,214,216,218,221,224,227,230,233,236,240,243,246,249,252,255,257,260,262,265,268,270,273,276,279,281,284,287,290,292,295,298,301,304,307,309,312,315,318,321,324,327,330,333,336,339,342,345,348,352,355,358,361,364,367,370,372,375,378,381,384,387,390,393,396,399,401,404,407,410,413,416,419,422,424,427,431,434,437,439,441,444,447,450,453],{"date":196,"score":197,"percentile":198},"2025-11-04",0.01055,0.76887,{"date":200,"score":197,"percentile":201},"2025-11-05",0.76886,{"date":203,"score":197,"percentile":204},"2025-11-06",0.76884,{"date":206,"score":197,"percentile":207},"2025-11-07",0.76897,{"date":209,"score":197,"percentile":210},"2025-11-08",0.76902,{"date":212,"score":197,"percentile":213},"2025-11-09",0.76898,{"date":215,"score":197,"percentile":204},"2025-11-10",{"date":217,"score":197,"percentile":201},"2025-11-11",{"date":219,"score":197,"percentile":220},"2025-11-12",0.76904,{"date":222,"score":197,"percentile":223},"2025-11-13",0.76913,{"date":225,"score":197,"percentile":226},"2025-11-14",0.76921,{"date":228,"score":197,"percentile":229},"2025-11-15",0.76916,{"date":231,"score":197,"percentile":232},"2025-11-16",0.76914,{"date":234,"score":197,"percentile":235},"2025-11-17",0.76906,{"date":237,"score":238,"percentile":239},"2025-11-18",0.00358,0.55194,{"date":241,"score":238,"percentile":242},"2025-11-19",0.5521,{"date":244,"score":238,"percentile":245},"2025-11-20",0.55199,{"date":247,"score":197,"percentile":248},"2025-11-21",0.76934,{"date":250,"score":197,"percentile":251},"2025-11-22",0.76933,{"date":253,"score":197,"percentile":254},"2025-11-23",0.7692,{"date":256,"score":197,"percentile":226},"2025-11-24",{"date":258,"score":197,"percentile":259},"2025-11-25",0.76927,{"date":261,"score":197,"percentile":248},"2025-11-26",{"date":263,"score":197,"percentile":264},"2025-11-27",0.76936,{"date":266,"score":197,"percentile":267},"2025-11-28",0.76925,{"date":269,"score":197,"percentile":251},"2025-11-29",{"date":271,"score":197,"percentile":272},"2025-11-30",0.76931,{"date":274,"score":197,"percentile":275},"2025-12-01",0.77046,{"date":277,"score":197,"percentile":278},"2025-12-02",0.77058,{"date":280,"score":197,"percentile":275},"2025-12-03",{"date":282,"score":197,"percentile":283},"2025-12-04",0.76929,{"date":285,"score":197,"percentile":286},"2025-12-05",0.76937,{"date":288,"score":197,"percentile":289},"2025-12-06",0.76941,{"date":291,"score":197,"percentile":264},"2025-12-07",{"date":293,"score":197,"percentile":294},"2025-12-08",0.76942,{"date":296,"score":197,"percentile":297},"2025-12-09",0.76967,{"date":299,"score":197,"percentile":300},"2025-12-10",0.76996,{"date":302,"score":197,"percentile":303},"2025-12-11",0.77012,{"date":305,"score":197,"percentile":306},"2025-12-12",0.77031,{"date":308,"score":197,"percentile":306},"2025-12-13",{"date":310,"score":197,"percentile":311},"2025-12-14",0.77029,{"date":313,"score":197,"percentile":314},"2025-12-15",0.77023,{"date":316,"score":197,"percentile":317},"2025-12-16",0.77034,{"date":319,"score":197,"percentile":320},"2025-12-17",0.77045,{"date":322,"score":197,"percentile":323},"2025-12-18",0.77062,{"date":325,"score":197,"percentile":326},"2025-12-19",0.77073,{"date":328,"score":197,"percentile":329},"2025-12-20",0.77067,{"date":331,"score":197,"percentile":332},"2025-12-21",0.77061,{"date":334,"score":197,"percentile":335},"2025-12-22",0.77056,{"date":337,"score":197,"percentile":338},"2025-12-23",0.77057,{"date":340,"score":197,"percentile":341},"2025-12-24",0.77068,{"date":343,"score":197,"percentile":344},"2025-12-25",0.77086,{"date":346,"score":197,"percentile":347},"2025-12-26",0.77084,{"date":349,"score":350,"percentile":351},"2025-12-27",0.01243,0.78861,{"date":353,"score":197,"percentile":354},"2025-12-28",0.77069,{"date":356,"score":197,"percentile":357},"2025-12-29",0.77065,{"date":359,"score":197,"percentile":360},"2025-12-30",0.77074,{"date":362,"score":197,"percentile":363},"2025-12-31",0.77095,{"date":365,"score":197,"percentile":366},"2026-01-01",0.77221,{"date":368,"score":197,"percentile":369},"2026-01-02",0.77222,{"date":371,"score":197,"percentile":369},"2026-01-03",{"date":373,"score":197,"percentile":374},"2026-01-04",0.77101,{"date":376,"score":197,"percentile":377},"2026-01-05",0.77093,{"date":379,"score":197,"percentile":380},"2026-01-06",0.77102,{"date":382,"score":197,"percentile":383},"2026-01-07",0.77109,{"date":385,"score":197,"percentile":386},"2026-01-08",0.77119,{"date":388,"score":197,"percentile":389},"2026-01-09",0.77125,{"date":391,"score":197,"percentile":392},"2026-01-10",0.77124,{"date":394,"score":197,"percentile":395},"2026-01-11",0.77118,{"date":397,"score":197,"percentile":398},"2026-01-12",0.77104,{"date":400,"score":197,"percentile":374},"2026-01-13",{"date":402,"score":197,"percentile":403},"2026-01-14",0.77126,{"date":405,"score":197,"percentile":406},"2026-01-15",0.77129,{"date":408,"score":197,"percentile":409},"2026-01-16",0.77138,{"date":411,"score":197,"percentile":412},"2026-01-17",0.7714,{"date":414,"score":197,"percentile":415},"2026-01-18",0.77132,{"date":417,"score":197,"percentile":418},"2026-01-19",0.77128,{"date":420,"score":197,"percentile":421},"2026-01-20",0.77122,{"date":423,"score":197,"percentile":406},"2026-01-21",{"date":425,"score":197,"percentile":426},"2026-01-22",0.77134,{"date":428,"score":429,"percentile":430},"2026-01-23",0.00998,0.76525,{"date":432,"score":429,"percentile":433},"2026-01-24",0.76536,{"date":435,"score":429,"percentile":436},"2026-01-25",0.76524,{"date":438,"score":429,"percentile":436},"2026-01-26",{"date":440,"score":429,"percentile":430},"2026-01-27",{"date":442,"score":429,"percentile":443},"2026-01-28",0.76534,{"date":445,"score":429,"percentile":446},"2026-01-29",0.76528,{"date":448,"score":429,"percentile":449},"2026-01-30",0.76532,{"date":451,"score":429,"percentile":452},"2026-01-31",0.76529,{"date":454,"score":429,"percentile":455},"2026-02-01",0.76648,[457],{"source":120,"cvss_v2_0":458,"cvss_v3_0":9,"cvss_v3_1":463,"cvss_v4_0":9},{"baseScore":459,"baseSeverity":9,"vectorString":460,"impactScore":461,"exploitabilityScore":462},6.9,"AV:L/AC:M/Au:N/C:C/I:C/A:C",10,3.4,{"baseScore":4,"baseSeverity":464,"vectorString":121,"impactScore":465,"exploitabilityScore":466},"HIGH",9.8,2.6,[468,477,490,497,529,535,540,545,550,556,561,566,574,579,584,589,593,598],{"ecosystem":9,"name":469,"vendor":470,"product":471,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":473},"fabric operating system","broadcom","fabric_operating_system","o",[474],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"na","cpe",{"ecosystem":9,"name":478,"vendor":479,"product":480,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":481},"ubuntu linux","canonical","ubuntu_linux",[482,484,486,488],{"version":483,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"14.04",{"version":485,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"16.04",{"version":487,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"18.04",{"version":489,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"19.10",{"ecosystem":9,"name":491,"vendor":492,"product":493,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":494},"debian linux","debian","debian_linux",[495],{"version":496,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0",{"ecosystem":9,"name":498,"vendor":499,"product":500,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":501},"linux kernel","linux","linux_kernel",[502,509,513,517,521,525],{"version":503,"is_range":504,"range_type":476,"version_start":505,"version_start_type":506,"version_end":507,"version_end_type":508,"fixed_in":9},"gte3.18_lt4.4.204",true,"3.18","including","4.4.204","excluding",{"version":510,"is_range":504,"range_type":476,"version_start":511,"version_start_type":506,"version_end":512,"version_end_type":508,"fixed_in":9},"gte4.5_lt4.9.204","4.5","4.9.204",{"version":514,"is_range":504,"range_type":476,"version_start":515,"version_start_type":506,"version_end":516,"version_end_type":508,"fixed_in":9},"gte4.10_lt4.14.157","4.10","4.14.157",{"version":518,"is_range":504,"range_type":476,"version_start":519,"version_start_type":506,"version_end":520,"version_end_type":508,"fixed_in":9},"gte4.15_lt4.19.87","4.15","4.19.87",{"version":522,"is_range":504,"range_type":476,"version_start":523,"version_start_type":506,"version_end":524,"version_end_type":508,"fixed_in":9},"gte4.20_lt5.3.14","4.20","5.3.14",{"version":526,"is_range":504,"range_type":476,"version_start":527,"version_start_type":506,"version_end":528,"version_end_type":508,"fixed_in":9},"gte5.4_lt5.4.1","5.4","5.4.1",{"ecosystem":9,"name":530,"vendor":531,"product":532,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":533},"8300 firmware","netapp","8300_firmware",[534],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":536,"vendor":531,"product":537,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":538},"8700 firmware","8700_firmware",[539],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":541,"vendor":531,"product":542,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":543},"a400 firmware","a400_firmware",[544],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":546,"vendor":531,"product":547,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":548},"a700s firmware","a700s_firmware",[549],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":551,"vendor":531,"product":552,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":554},"active iq unified manager","active_iq_unified_manager","a",[555],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":557,"vendor":531,"product":558,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":559},"cloud backup","cloud_backup",[560],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":562,"vendor":531,"product":563,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":564},"data availability services","data_availability_services",[565],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":567,"vendor":531,"product":568,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":569},"e-series santricity os controller","e-series_santricity_os_controller",[570],{"version":571,"is_range":504,"range_type":476,"version_start":572,"version_start_type":506,"version_end":573,"version_end_type":506,"fixed_in":9},"gte11.0.0_lte11.70.1","11.0.0","11.70.1",{"ecosystem":9,"name":575,"vendor":531,"product":576,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":577},"element software","element_software",[578],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":580,"vendor":531,"product":581,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":582},"h610s firmware","h610s_firmware",[583],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":585,"vendor":531,"product":586,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":587},"hci management node","hci_management_node",[588],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":590,"vendor":531,"product":590,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":591},"solidfire",[592],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":594,"vendor":531,"product":595,"cpe_part":553,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":596},"steelstore cloud integrated storage","steelstore_cloud_integrated_storage",[597],{"version":475,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":599,"vendor":600,"product":599,"cpe_part":472,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":601},"leap","opensuse",[602],{"version":603,"is_range":44,"range_type":476,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15.1"]