Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/sched: teql: Fix double-free in teql_master_xmitCVE-2026-23449Fix available7.8 High
- linux, linux kernel +1 morenet: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds checkCVE-2026-23448Fix available7.8 High
- linux, linux kernel +1 morenet: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds checkCVE-2026-23447Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: usb: aqc111: Do not perform PM inside suspend callbackCVE-2026-23446Fix available5.5 Medium
- linux, linux kernel +1 moreigc: fix page fault in XDP TX timestamps handlingCVE-2026-23445Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failureCVE-2026-23444Fix available7.8 High
- linux, linux kernel +1 moreACPI: processor: Fix previous acpi_processor_errata_piix4() fixCVE-2026-23443Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipv6: add NULL checks for idev in SRv6 pathsCVE-2026-23442Fix available5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Prevent concurrent access to IPSec ASO contextCVE-2026-23441Fix available4.7 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix race condition during IPSec ESN updateCVE-2026-23440Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreudp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=nCVE-2026-23439Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: mvpp2: guard flow control update with global_tx_fc in buffer switchingCVE-2026-23438Fix available5.5 Medium
- linux, linux kernel +1 morenet: shaper: protect late read accesses to the hierarchyCVE-2026-23437Fix available7.8 High
- linux, linux kernel +1 morenet: shaper: protect from late creation of hierarchyCVE-2026-23436Fix available5.5 Medium
- linux, linux kernel +1 moreperf/x86: Move event pointer setup earlier in x86_pmu_enable()CVE-2026-23435Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremtd: rawnand: serialize lock/unlock against other NAND operationsCVE-2026-23434Fix available7.1 High
- linux, linux kernel +1 morearm_mpam: Fix null pointer dereference when restoring bandwidth countersCVE-2026-23433Fix available5.5 Medium
- linux, linux kernel +1 moremshv: Fix use-after-free in mshv_map_user_memory error pathCVE-2026-23432Fix available7.8 High
- linux, linux kernel +1 morespi: amlogic-spisg: Fix memory leak in aml_spisg_probe()CVE-2026-23431Fix available5.5 Medium
- linux, linux kernel +1 moredrm/vmwgfx: Don't overwrite KMS surface dirty trackerCVE-2026-23430Fix available5.5 Medium
- linux, linux kernel +1 moreiommu/sva: Fix crash in iommu_sva_unbind_device()CVE-2026-23429Fix available7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free of share_conf in compound requestCVE-2026-23428Fix available9.8 Critical
- linux, linux kernel +1 moreksmbd: fix use-after-free in durable v2 replay of active file handlesCVE-2026-23427Fix available9.8 Critical
- linux, linux kernel +1 moredrm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()CVE-2026-23426Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: arm64: Fix ID register initialization for non-protected pKVM guestsCVE-2026-23425Fix available8.8 High
- linux, linux kernel +1 moreaccel/amdxdna: Validate command buffer payload countCVE-2026-23424Fix available7.1 High
- linux, linux kernel +1 morebtrfs: free pages on error in btrfs_uring_read_extent()CVE-2026-23423Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handlerCVE-2026-23422Fix available7.8 High
- linux, linux kernel +1 moredrm/xe/configfs: Free ctx_restore_mid_bb in releaseCVE-2026-23421Fix available5.5 Medium
- linux, linux kernel +1 morewifi: wlcore: Fix a locking bugCVE-2026-23420Fix available5.5 Medium
- linux, linux kernel +1 morenet/rds: Fix circular locking dependency in rds_tcp_tuneCVE-2026-23419Fix available7.5 High
- linux, linux kernel +1 moredrm/xe/reg_sr: Fix leak on xa_store failureCVE-2026-23418Fix available5.5 Medium
- linux, linux kernel +1 morebpf: Fix constant blinding for PROBE_MEM32 storesCVE-2026-23417Fix available5.5 Medium
- linux, linux kernel +1 moremm/mseal: update VMA end correctly on mergeCVE-2026-23416Public exploitFix available5.5 Medium
- linux, linux kernel +1 morefutex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()CVE-2026-23415Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretls: Purge async_hold in tls_decrypt_async_wait()CVE-2026-23414Fix available7.5 High
- linux, linux kernel +1 moreclsact: Fix use-after-free in init/destroy rollback asymmetryCVE-2026-23413Fix available7.8 High
- linux, linux kernel +1 morenetfilter: bpf: defer hook memory release until rcu readers are doneCVE-2026-23412Fix available7.8 High
- linux, linux kernel +1 moreapparmor: fix race on rawdata dereferenceCVE-2026-23410Fix available7.8 High
- linux, linux kernel +1 moreapparmor: fix differential encoding verificationCVE-2026-23409Fix available5.5 Medium
- linux, linux kernel +1 moreapparmor: Fix double free of ns_name in aa_replace_profiles()CVE-2026-23408Fix available7.8 High
- linux, linux kernel +1 moreapparmor: fix missing bounds check on DEFAULT table in verify_dfa()CVE-2026-23407Fix available7.8 High
- linux, linux kernel +1 moreapparmor: fix side-effect bug in match_char() macro usageCVE-2026-23406Fix available7.8 High
- linux, linux kernel +1 moreapparmor: fix: limit the number of levels of policy namespacesCVE-2026-23405Fix available5.5 Medium
- linux, linux kernel +1 moreapparmor: replace recursive profile removal with iterative approachCVE-2026-23404Fix available5.5 Medium
- linux, linux kernel +1 moreapparmor: fix memory leak in verify_headerCVE-2026-23403Fix available5.5 Medium
- linux, linux kernel +1 moreKVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTECVE-2026-23402Fix available5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moreKVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTECVE-2026-23401Fix available5.5 Medium
- linux, linux kernel +1 moreapparmor: fix race between freeing data and fs accessing itCVE-2026-23411Fix available7.8 High
- linux, linux kernel +1 morerust_binder: call set_notification_done() without proc lockCVE-2026-23400Fix available5.5 Medium
- Show moreLoading…