CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv4: icmp: validate reply type before using icmp_pointers8.2 High
- linux, linux kernel +1 morevfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex7.8 High
- linux, linux kernel +1 moremm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP5.5 Medium
- linux, linux kernel +1 morevfio/cdx: Fix NULL pointer dereference in interrupt trigger path5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morecrypto: authencesn - reject short ahash digests during instance creation7.1 High
- linux, linux kernel +1 moreKVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT5.5 Medium
- linux, linux kernel +1 morenet: ks8851: Reinstate disabling of BHs around IRQ handler7.5 High
- linux, linux kernel +1 moreEDAC/versalnet: Fix device_node leak in mc_probe()5.5 Medium
- linux, linux kernel +1 moremm/slab: return NULL early from kmalloc_nolock() in NMI on UP7.0 High
- linux, linux kernel +1 morenet/smc: avoid early lgr access in smc_clc_wait_msg7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: qrtr: ns: Limit the maximum number of lookups5.5 Medium
- linux, linux kernel +1 moremm/damon/core: fix damon_call() vs kdamond_fn() exit race4.7 Medium
- linux, linux kernel +1 morelibceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm mirror: fix integer overflow in create_dirty_log()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremisc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morethermal: core: Fix thermal zone governor cleanup issues5.5 Medium
- linux, linux kernel +1 moremm/damon/core: validate damos_quota_goal->nid for node_mem_{used,free}_bp7.1 High
- linux, linux kernel +1 morecrypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES5.5 Medium
- linux, linux kernel +1 moremm: fix deferred split queue races during migration4.7 Medium
- linux, linux kernel +1 moreremoteproc: xlnx: Only access buffer information if IPI is buffered5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moretcp: call sk_data_ready() after listener migration7.8 High
- linux, linux kernel +1 moreKVM: SVM: Add missing save/restore handling of LBR MSRs5.5 Medium
- linux, linux kernel +1 moremm/memfd_luo: fix physical address conversion in put_folios cleanup5.5 Medium
- linux, linux kernel +1 morerxrpc: Fix memory leaks in rxkad_verify_response()5.5 Medium
- linux, linux kernel +1 moremedia: mtk-jpeg: fix use-after-free in release path due to uncancelled work7.8 High
- linux, linux kernel +1 morerxrpc: Fix error handling in rxgk_extract_token()8.1 High
- linux, linux kernel +1 morePCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown5.5 Medium
- linux, linux kernel +1 moremm/damon/core: fix damos_walk() vs kdamond_fn() exit race4.7 Medium
- linux, linux kernel +1 morehwmon: (powerz) Avoid cacheline sharing for DMA buffer5.5 Medium
- linux, linux kernel +1 moredrm/nouveau: fix u32 overflow in pushbuf reloc bounds check7.8 High
- linux, linux kernel +1 morexfs: fix a resource leak in xfs_alloc_buftarg()5.5 Medium
- linux, linux kernel +1 moreALSA: caiaq: Handle probe errors properly7.8 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: privilege escalation due to oversized subject_token jwt6.8 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: qrtr: ns: Limit the total number of nodes5.5 Medium
- linux, linux kernel +1 moreext2: reject inodes with zero i_nlink and valid mode in ext2_iget()5.5 Medium
- linux, linux kernel +1 morehwmon: (pt5161l) Fix bugs in pt5161l_read_block_data()7.8 High
- linux, linux kernel +1 moreerofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: sd: fix missing put_disk() when device_add(&disk_dev) fails5.5 Medium
- linux, linux kernel +1 morespi: imx: fix use-after-free on unbind7.8 High
- linux, linux kernel +1 moreio_uring/zcrx: fix user_struct uaf7.8 High
- linux, linux kernel +1 moreibmasm: fix OOB reads in command_file_write due to missing size checks7.1 High
- linux, linux kernel +1 moreLoongArch: Add spectre boundry for syscall dispatch table5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreudf: fix partition descriptor append bookkeeping7.8 High
- linux, linux kernel +1 moreslub: fix data loss and overflow in krealloc()5.5 Medium
- linux, linux kernel +1 moreof: unittest: fix use-after-free in testdrv_probe()7.8 High
- linux, linux kernel +1 morerxrpc: Fix re-decryption of RESPONSE packets9.8 Critical
- linux, linux kernel +1 moreKVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L25.5 Medium
- linux, linux kernel +1 morecrypto: ccree - fix a memory leak in cc_mac_digest()5.5 Medium
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service4.8 Medium
- Show moreLoading…