CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- linux, linux kernel +1 moremm/damon/stat: deallocate damon_call() failure leaking damon_ctx7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremmc: vub300: fix NULL-deref on disconnect5.5 Medium
- linux, linux kernel +1 moremmc: vub300: fix use-after-free on disconnect7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: stmmac: fix integer underflow in chain mode9.8 Critical
- linux, linux kernel +1 moremm: filemap: fix nr_pages calculation overflow in filemap_map_pages()7.8 High
- linux, linux kernel +1 moreidpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling5.5 Medium
- linux, linux kernel +1 morenet: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()5.5 Medium
- linux, linux kernel +1 morenet: lan966x: fix page pool leak in error paths5.5 Medium
- linux, linux kernel +1 morenet: lan966x: fix use-after-free and leak in lan966x_fdma_reload()7.8 High
- linux, linux kernel +1 morerxrpc: Fix key parsing memleak5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix call removal to use RCU safe deletion5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morerxrpc: Fix RxGK token loading to check bounds7.8 High
- linux, linux kernel +1 morerxrpc: Fix use of wrong skb when comparing queued RESP challenge serial7.5 High
- linux, linux kernel +1 morerxrpc: Fix key reference count leak from call->key5.5 Medium
- linux, linux kernel +1 morerxrpc: Only put the call ref if one was acquired7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: reject undecryptable rxkad response tickets9.8 Critical
- linux, linux kernel +1 morerxrpc: fix RESPONSE authenticator parser OOB read9.1 Critical
- linux, linux kernel +1 morerxrpc: fix oversized RESPONSE authenticator length check7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morerxrpc: fix reference count leak in rxrpc_server_keyring()5.5 Medium
- linux, linux kernel +1 morerxrpc: Fix integer overflow in rxgk_verify_response()9.8 Critical
- linux, linux kernel +1 morerxrpc: Fix leak of rxgk context in rxgk_verify_response()5.5 Medium
- linux, linux kernel +1 morerxrpc: Fix buffer overread in rxgk_do_verify_authenticator()8.2 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: proc: size address buffers for %pISpc output7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfc: llcp: add missing return after LLCP_CLOSED checks8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/CPU: Fix FPDSS on Zen15.5 Medium
- linux, linux kernel +1 morei2c: s3c24xx: check the size of the SMBUS message before using it7.8 High
- linux, linux kernel +1 morestaging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: alps: fix NULL pointer dereference in alps_raw_event()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: core: clamp report_size in s32ton() to avoid undefined shift5.5 Medium
- linux, linux kernel +1 morenet: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreNFC: digital: Bounds check NFC-A cascade depth in SDD response handler8.8 High
- linux, linux kernel +1 morebnge: return after auxiliary_device_uninit() in error path5.5 Medium
- linux, linux kernel +1 moreALSA: usx2y: us144mkii: fix NULL deref on missing interface 04.6 Medium
- linux, linux kernel +1 moreALSA: fireworks: bound device-supplied status before string array lookup5.5 Medium
- linux, linux kernel +1 morefbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreusb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()5.5 Medium
- linux, linux kernel +1 moreusb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()5.5 Medium
- linux, linux kernel +1 moreusb: gadget: renesas_usb3: validate endpoint index in standard request handlers5.5 Medium
- linux, linux kernel +1 moresmb: client: fix off-by-8 bounds check in check_wsl_eas()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOB reads parsing symlink error response8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: validate EaNameLength in smb2_get_ea()7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: require 3 sub-authorities before reading sub_auth[2]8.6 High
- linux, linux kernel +1 moreksmbd: fix mechToken leak when SPNEGO decode fails after token alloc5.5 Medium
- linux, linux kernel +1 moresmb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()9.8 Critical
- linux, linux kernel +1 moresmb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreusbip: validate number_of_packets in usbip_pack_ret_submit()9.8 Critical
- linux, linux kernel +1 moreusb: gadget: f_hid: don't call cdev_init while cdev in use5.5 Medium
- linux, linux kernel +1 morefbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO5.5 Medium
- linux, linux kernel +1 morewifi: rtw88: fix device leak on probe failure5.5 Medium
- linux, linux kernel +1 morestaging: sm750fb: fix division by zero in ps_to_hz()5.5 Medium
- Show moreLoading…