CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- linux, linux kernel +1 moreteam: fix header_ops type confusion with non-Ethernet ports7.8 High
- linux, linux kernel +1 morenet: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock7.8 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix deadlock in l2cap_conn_del()5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop5.5 Medium
- linux, linux kernel +1 moreBluetooth: btusb: clamp SCO altsetting table indices5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_expect: skip expectations in other netns via proc5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: use netlink policy range checks5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: macb: use the current queue number for stats7.8 High
- linux, linux kernel +1 moreRDMA/efa: Fix use of completion ctx after free7.8 High
- linux, linux kernel +1 moreRDMA/irdma: Initialize free_qp completion before using it5.5 Medium
- linux, linux kernel +1 moreRDMA/irdma: Harden depth calculation functions5.5 Medium
- linux, linux kernel +1 moredrm/xe/pf: Fix use-after-free in migration restore7.8 High
- linux, linux kernel +1 morespi: meson-spicc: Fix double-put in remove path7.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 moredrm/amd/display: Do not skip unrelated mode changes in DSC validation7.8 High
- linux, linux kernel +1 morespi: use generic driver_override infrastructure5.5 Medium
- linux, linux kernel +1 morehwmon: (pmbus/core) Protect regulator operations with mutex7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morespi: spi-fsl-lpspi: fix teardown order issue (UAF)7.8 High
- linux, linux kernel +1 moreio_uring/fdinfo: fix OOB read in SQE_MIXED wrap check7.1 High
- linux, linux kernel +1 mores390/syscalls: Add spectre boundary for syscall dispatch table5.5 Medium
- linux, linux kernel +1 mores390/entry: Scrub r12 register on kernel entry5.5 Medium
- linux, linux kernel +1 moretracing: Drain deferred trigger frees if kthread creation fails5.5 Medium
- linux, linux kernel +1 moretracing: Fix potential deadlock in cpu hotplug with osnoise5.5 Medium
- linux, linux kernel +1 moredrm/xe: always keep track of remap prev/next7.8 High
- linux, linux kernel +1 moreksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()9.8 Critical
- linux, linux kernel +1 moreksmbd: fix memory leaks and NULL deref in smb2_lock()7.5 High
- linux, linux kernel +1 moreksmbd: do not expire session on binding failure8.2 High
- linux, linux kernel +1 moreASoC: sma1307: fix double free of devm_kzalloc() memory7.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morecan: isotp: fix tx.buf use-after-free in isotp_sendmsg()7.8 High
- linux, linux kernel +1 moremedia: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex7.8 High
- linux, linux kernel +1 morexfrm: iptfs: validate inner IPv4 header length in IPTFS payload5.5 Medium
- linux, linux kernel +1 morexfrm: iptfs: only publish mode_data after clone setup7.8 High
- linux, linux kernel +1 morevirt: tdx-guest: Fix handling of host controlled 'quote' buffer length7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevirtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false7.8 High
- linux, linux kernel +1 morevfio/pci: Fix double free in dma-buf feature7.8 High
- linux, linux kernel +1 moreerofs: add GFP_NOIO in the bio completion if needed7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremm/huge_memory: fix folio isn't locked in softleaf_to_folio()4.7 Medium
- linux, linux kernel +1 morewriteback: don't block sync for filesystems with no data integrity guarantees5.5 Medium
- linux, linux kernel +1 morescsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()8.1 High
- linux, linux kernel +1 moreiomap: fix invalid folio access when i_blkbits differs from I/O granularity9.8 Critical
- linux, linux kernel +1 moredrm/amdgpu: prevent immediate PASID reuse case5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix drm_edid leak in amdgpu_dm5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: check if ext_caps is valid in BL setup5.5 Medium
- linux, linux kernel +1 moremm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure5.5 Medium
- linux, linux kernel +1 moremm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]5.5 Medium
- linux, linux kernel +1 moremm/damon/sysfs: check contexts->nr in repeat_call_fn5.5 Medium
- linux, linux kernel +1 moremm/pagewalk: fix race between concurrent split and refault4.7 Medium
- linux, linux kernel +1 morexfs: stop reclaim before pushing AIL during unmount7.8 High
- linux, linux kernel +1 morexfs: save ailp before dropping the AIL lock in push callbacks7.8 High
- linux, linux kernel +1 morexfs: avoid dereferencing log items after push callbacks7.8 High
- Show moreLoading…