What is the Anolis CNA?

Anolis is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 20 CVE records since 2022.

How many CVEs has Anolis published?

Anolis has published 20 CVE records, including 2 in the last two years.

What is Anolis's CVE data quality grade?

RadicalNotion.AI grades Anolis's CVE data quality as A, with an overall completeness score of 98.8%. This reflects how consistently its CVE records include vendor (95%), product (100%), CVSS (100%), and CWE (100%) information.

What products does Anolis publish CVEs for?

Anolis most frequently publishes CVEs for Linux kernel, azl3 kernel 6.6.35.1-4 on Azure Linux 3.0, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, kernel, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0.

Which vendors does Anolis cover?

Anolis publishes CVEs across 2 distinct vendors, most often Linux, Microsoft, Siemens, debian, OpenAnolis.

Is Anolis actively publishing CVEs?

Anolis is currently active, based on 2 CVEs in the last two years.

What is the average severity of Anolis's CVEs?

The average CVSS base score across Anolis's scored CVEs is 5.3.

What are the most common weakness types in Anolis's CVEs?

Anolis's CVEs most often map to these CWE weakness types: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-416 (Use After Free), CWE-476 (NULL Pointer Dereference), CWE-284 (Improper Access Control).

How does Anolis rank among CNAs?

By total CVE volume, Anolis ranks #242 of 370 CNAs, and it reports more complete CVE records than 52% of all CNAs.

RadicalNotion.AI

Log in Start free

Grade A

Active

Anolis

Name: Anolis CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published February 18, 2025

20

CVEs published

Total assigned

2.7

Years active

2022–2025

5.3

Avg CVSS

Across scored CVEs

2

Recent CVEs

Last 2 years

Overview

Anolis is a CVE Numbering Authority that has published 20 CVE records since 2022. It is currently classified as active, with 2 CVEs published in the last two years. Its CVE data quality is graded A (98.8% overall completeness).

Among the 370 CNAs tracked here, Anolis ranks #242 by CVE volume and reports more complete records than 52% of all CNAs.

Data quality report card

How complete and consistent Anolis's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often Anolis also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

A

98.8%

Overall score

Overall completeness98.8%

Vendor completeness95%

Product completeness100%

CVSS completeness100%

CWE completeness100%

100%

Update rate

Records revised after publishing

2

Vendor diversity

Distinct vendors covered

269 chars

Avg description length

Per CVE record

2022-05-25

First CVE date

Earliest assignment

2025-02-18

Latest CVE date

Most recent assignment

5.3

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of Anolis's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical0

High3

Medium17

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Anolis's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories Anolis most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs Anolis has published each year.

2022

6

2024

13

2025

1

Top vendors

The vendors Anolis publishes the most CVEs for.

Linux18 CVEs
Microsoft10 CVEs
Siemens7 CVEs
debian3 CVEs
OpenAnolis2 CVEs
netapp1 CVEs
torvalds1 CVEs

Top products

The products Anolis publishes the most CVEs for.

Linux kernel18 CVEs
azl3 kernel 6.6.35.1-4 on Azure Linux 3.07 CVEs
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem6 CVEs
kernel5 CVEs
azl3 kernel 6.6.92.2-1 on Azure Linux 3.04 CVEs
debian linux3 CVEs
azl3 kernel 6.6.119.3-3 on Azure Linux 3.02 CVEs
azl3 kernel 6.6.119.3-1 on Azure Linux 3.02 CVEs

Latest CVEs

The most recent CVEs assigned by Anolis.

CVE-2025-1390CWE-284
pam_cap: Fix potential configuration parsing error
Medium · CVSS 6.1
EPSS 0.2%2025-02-18
CVE-2024-24856CWE-476
NULL pointer deference in acpi_db_convert_to_package of Linux acpi module
Medium · CVSS 5.3
EPSS 0.2%2024-04-17
CVE-2024-24864CWE-362
Medium · CVSS 5.3
EPSS 0.2%2024-02-05
CVE-2024-24857CWE-362
Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()
Medium · CVSS 6.8
EPSS 0.3%2024-02-05
CVE-2024-24858CWE-362
Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()
Medium · CVSS 5.3
EPSS 0.3%2024-02-05
CVE-2024-24859CWE-362
Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()
Medium · CVSS 4.8
EPSS 0.7%2024-02-05
CVE-2024-24860CWE-362
Medium · CVSS 5.3
EPSS 0.8%2024-02-05
CVE-2024-24861CWE-362
Medium · CVSS 6.3
EPSS 0.2%2024-02-05
CVE-2024-24855CWE-362
Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()
Medium · CVSS 5.0
EPSS 0.2%2024-02-05
CVE-2024-23196CWE-362
Medium · CVSS 5.3
EPSS 0.2%2024-02-05
CVE-2024-22386CWE-362
Medium · CVSS 5.3
EPSS 0.2%2024-02-05
CVE-2024-21803CWE-416
High · CVSS 7.8
EPSS 0.5%2024-01-30

Track new Anolis CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor Anolis CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the Anolis CNA.

What is the Anolis CNA?: Anolis is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 20 CVE records since 2022.
How many CVEs has Anolis published?: Anolis has published 20 CVE records, including 2 in the last two years.
What is Anolis's CVE data quality grade?: RadicalNotion.AI grades Anolis's CVE data quality as A, with an overall completeness score of 98.8%. This reflects how consistently its CVE records include vendor (95%), product (100%), CVSS (100%), and CWE (100%) information.
What products does Anolis publish CVEs for?: Anolis most frequently publishes CVEs for Linux kernel, azl3 kernel 6.6.35.1-4 on Azure Linux 3.0, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, kernel, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0.
Which vendors does Anolis cover?: Anolis publishes CVEs across 2 distinct vendors, most often Linux, Microsoft, Siemens, debian, OpenAnolis.
Is Anolis actively publishing CVEs?: Anolis is currently active, based on 2 CVEs in the last two years.
What is the average severity of Anolis's CVEs?: The average CVSS base score across Anolis's scored CVEs is 5.3.
Are any of Anolis's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of Anolis's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in Anolis's CVEs?: Anolis's CVEs most often map to these CWE weakness types: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-416 (Use After Free), CWE-476 (NULL Pointer Dereference), CWE-284 (Improper Access Control).
How does Anolis rank among CNAs?: By total CVE volume, Anolis ranks #242 of 370 CNAs, and it reports more complete CVE records than 52% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track Anolis CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing