CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- linux, linux kernel +1 moreHID: appletb-kbd: fix UAF in inactivity-timer cleanup path7.8 High
- linux, linux kernel +1 morebatman-adv: bla: prevent use-after-free when deleting claims8.8 High
- linux, linux kernel +1 moredrm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()5.5 Medium
- linux, linux kernel +1 moremedia: iris: fix use-after-free of fmt_src during MBPF check7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()7.8 High
- linux, linux kernel +1 morebatman-adv: stop tp_meter sessions during mesh teardown7.8 High
- linux, linux kernel +1 morevsock/virtio: fix empty payload in tap skb for non-linear buffers5.5 Medium
- linux, linux kernel +1 morebatman-adv: reject new tp_meter sessions during teardown7.8 High
- linux, linux kernel +1 morestaging: media: atomisp: Disallow all private IOCTLs7.8 High
- linux, linux kernel +1 moredrm/amdgpu/vcn4: Prevent OOB reads when parsing IB7.1 High
- linux, linux kernel +1 morespi: cadence-quadspi: fix unclocked access on unbind7.1 High
- linux, linux kernel +1 moreHID: appletb-kbd: run inactivity autodim from workqueues5.5 Medium
- linux, linux kernel +1 moredrm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()7.8 High
- linux, linux kernel +1 morespi: mpc52xx: fix controller deregistration5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg7.1 High
- linux, linux kernel +1 morebatman-adv: fix integer overflow on buff_pos8.8 High
- linux, linux kernel +1 moredrm/amdkfd: validate SVM ioctl nattr against buffer size7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moretracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm: ah: account for ESN high bits in async callbacks5.5 Medium
- linux, linux kernel +1 morespi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefbcon: Avoid OOB font access if console rotation fails7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()7.1 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path7.8 High
- linux, linux kernel +1 moreocteon_ep_vf: add NULL check for napi_build_skb()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: rsi: fix kthread lifetime race between self-exit and external-stop4.7 Medium
- linux, linux kernel +1 moreBluetooth: virtio_bt: validate rx pkt_type header length5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb/client: fix out-of-bounds read in symlink_data()9.1 Critical
- linux, linux kernel +1 moresound: ua101: fix division by zero at probe5.5 Medium
- linux, linux kernel +1 moremm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock7.8 High
- linux, linux kernel +1 morepseries/papr-hvpipe: Prevent kernel stack memory leak to userspace5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task7.8 High
- linux, linux kernel +1 moreASoC: SOF: Don't allow pointer operations on unconfigured streams5.5 Medium
- linux, linux kernel +1 moreRDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipmi: Add limits to event and receive message requests7.5 High
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 moreRDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()7.8 High
- linux, linux kernel +1 moref2fs: fix fsck inconsistency caused by FGGC of node block7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreexit: prevent preemption of oopsing TASK_DEAD task7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: xfrm6: release dst on error in xfrm6_rcv_encap()5.5 Medium
- linux, linux kernel +1 moreriscv: kvm: fix vector context allocation leak5.5 Medium
- linux, linux kernel +1 moremptcp: pm: ADD_ADDR rtx: free sk if last5.5 Medium
- linux, linux kernel +1 morehfsplus: fix uninit-value by validating catalog record size5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremptcp: fix scheduling with atomic in timestamp sockopt5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +6 more +8 morewifi: mac80211: use safe list iteration in radar detect work8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreopenvswitch: vport: fix self-deadlock on release of tunnel ports5.5 Medium
- linux, linux kernel +1 morebtrfs: fix double free in create_space_info_sub_group() error path7.0 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: b43legacy: enforce bounds check on firmware key index in RX path7.8 High
- linux, linux kernel +1 moreice: fix double free in ice_sf_eth_activate() error path7.8 High
- Show moreLoading…