CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremd/raid10: fix divide-by-zero in setup_geo() with zero far_copies5.5 Medium
- linux, linux kernel +1 morebtrfs: fix missing last_unlink_trans update when removing a directory5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak4.7 Medium
- linux, linux kernel +1 moremptcp: pm: ADD_ADDR rtx: always decrease sk refcount5.5 Medium
- linux, linux kernel +1 moreALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger7.8 High
- linux, linux kernel +1 moreLoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()5.5 Medium
- linux, linux kernel +1 moresmb/client: fix out-of-bounds read in smb2_compound_op()9.1 Critical
- linux, linux kernel +1 moresched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters7.0 High
- linux, linux kernel +1 more8021q: delete cleared egress QoS mappings5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morewifi: mac80211: drop stray 'static' from fast-RX rx_result8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: usblp: fix heap leak in IEEE 1284 device ID via short response5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefanotify: fix false positive on permission events7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()7.1 High
- linux, linux kernel +1 morespi: microchip-core-qspi: control built-in cs manually5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 moreRDMA/mana: Validate rx_hash_key_len7.8 High
- linux, linux kernel +1 moreRDMA/mana: Fix error unwind in mana_ib_create_qp_rss()5.5 Medium
- linux, linux kernel +1 moreASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens5.5 Medium
- linux, linux kernel +1 morenet: libwx: fix VF illegal register access5.5 Medium
- linux, linux kernel +1 morepowerpc/xive: fix kmemleak caused by incorrect chip_data lookup5.5 Medium
- linux, linux kernel +1 moreBluetooth: btmtk: validate WMT event SKB length before struct access7.1 High
- linux, linux kernel +1 moresmb: client: use kzalloc to zero-initialize security descriptor buffer5.5 Medium
- linux, linux kernel +1 moreBluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremptcp: pm: ADD_ADDR rtx: fix potential data-race9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mt76: mt7921: fix a potential clc buffer length underflow7.8 High
- linux, linux kernel +1 morenvmet-tcp: fix race between ICReq handling and queue teardown9.8 Critical
- linux, linux kernel +1 moreplatform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration5.5 Medium
- linux, linux kernel +1 moreRDMA/rxe: Reject unknown opcodes before ICRC processing7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo5.5 Medium
- linux, linux kernel +1 moreKVM: x86: check for nEPT/nNPT in slow flush hypercalls5.5 Medium
- linux, linux kernel +1 moredm-verity-fec: fix reading parity bytes split across blocks (take 3)7.1 High
- linux, linux kernel +1 morebtrfs: fix double free in create_space_info() error path7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipmi: Check event message buffer response for bad data5.5 Medium
- linux, linux kernel +1 moreRDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()5.5 Medium
- linux, linux kernel +1 moreRDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morewifi: mac80211: remove station if connection prep fails8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreisofs: validate block number from NFS file handle in isofs_export_iget7.5 High
- linux, linux kernel +1 moreBluetooth: virtio_bt: clamp rx length before skb_put7.7 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: b43: enforce bounds check on firmware key index in b43_rx()7.8 High
- linux, linux kernel +1 moremm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreip6_gre: Use cached t->net in ip6erspan_changelink().7.8 High
- linux, linux kernel +1 morelibceph: Fix slab-out-of-bounds access in auth message processing9.1 Critical
- linux, linux kernel +1 morepseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle()5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()7.8 High
- linux, linux kernel, red hat enterprise linux 10 +20 more +22 morexfrm: defensively unhash xfrm_state lists in __xfrm_state_delete7.8 High
- linux, linux kernel +1 moreblock: add pgmap check to biovec_phys_mergeable9.8 Critical
- linux, linux kernel +1 moreRDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreKVM: x86: Fix shadow paging use-after-free due to unexpected GFN8.8 High
- linux, linux kernel +1 moreRDMA/hns: Fix unlocked call to hns_roce_qp_remove()7.8 High
- Show moreLoading…