Skip to contentLinux Kernel vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: authencesn - Do not place hiseq at end of dst for out-of-place decryptionCVE-2026-43033Fix available7.8 High
- linux, linux kernel +1 moreNFC: pn533: bound the UART receive bufferCVE-2026-43032Fix available5.5 Medium
- linux, linux kernel +1 morenet: xilinx: axienet: Fix BQL accounting for multi-BD TX packetsCVE-2026-43031Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebpf: Fix regsafe() for pointers to packetCVE-2026-43030Fix available7.8 High
- linux, linux kernel +1 moremptcp: fix soft lockup in mptcp_recvmsg()CVE-2026-43029Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: x_tables: ensure names are nul-terminatedCVE-2026-43028Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_helper: pass helper to expect cleanupCVE-2026-43027Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absentCVE-2026-43026Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: ignore explicit helper on new expectationsCVE-2026-43025Fix available7.3 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_tables: reject immediate NF_QUEUE verdictCVE-2026-43024Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: SCO: fix race conditions in sco_sock_connect()CVE-2026-43023Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if existsCVE-2026-43022Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once failsCVE-2026-43021Fix available5.5 Medium
- linux, linux kernel +1 moreBluetooth: MGMT: validate LTK enc_size on loadCVE-2026-43020Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: hci_conn: fix potential UAF in set_cig_params_syncCVE-2026-43019Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtCVE-2026-43018Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: MGMT: validate mesh send advertising payload lengthCVE-2026-43017Fix available5.5 Medium
- linux, linux kernel +1 morebpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().CVE-2026-43016Fix available7.8 High
- linux, linux kernel +1 morenet: macb: fix clk handling on PCI glue driver removalCVE-2026-43015Fix available7.8 High
- linux, linux kernel +1 morenet: macb: properly unregister fixed rate clocksCVE-2026-43014Fix available5.5 Medium
- linux, linux kernel +1 morenet/mlx5: lag: Check for LAG device before creating debugfsCVE-2026-43013Fix available5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix switchdev mode rollback in case of failureCVE-2026-43012Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/x25: Fix potential double free of skbCVE-2026-43011Fix available9.8 Critical
- linux, linux kernel +1 morebpf: Reject sleepable kprobe_multi programs at attach timeCVE-2026-43010Fix available5.5 Medium
- linux, linux kernel +1 morebpf: Fix incorrect pruning due to atomic fetch precision trackingCVE-2026-43009Fix available7.8 High
- linux, linux kernel +1 moregpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio()CVE-2026-43008Fix available5.5 Medium
- linux, linux kernel +1 moreaccel/qaic: Handle DBC deactivation if the owner went awayCVE-2026-43007Fix available7.8 High
- linux, linux kernel +1 moreio_uring/rsrc: reject zero-length fixed buffer importCVE-2026-43006Fix available7.1 High
- linux, linux kernel +1 morehwmon: (tps53679) Fix array access with zero-length block readCVE-2026-43005Fix available7.1 High
- linux, linux kernel +1 morespi: stm32-ospi: Fix resource leak in remove() callbackCVE-2026-43004Fix available5.5 Medium
- linux, linux kernel +1 moredrm/xe/xe_pagefault: Disallow writes to read-only VMAsCVE-2026-31785Fix available5.5 Medium
- linux, linux kernel +1 moredrm/xe/pxp: Clear restart flag in pxp_start after jumping backCVE-2026-31784Fix available5.5 Medium
- linux, linux kernel +1 morespi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callbackCVE-2026-31783Fix available5.5 Medium
- linux, linux kernel +1 moreperf/x86: Fix potential bad container_of in intel_pmu_hw_configCVE-2026-31782Fix available7.8 High
- linux, linux kernel +1 moredrm/ioc32: stop speculation on the drm_compat_ioctl pathCVE-2026-31781Fix available5.5 Medium
- linux, linux kernel +1 morewifi: wilc1000: fix u8 overflow in SSID scan buffer size calculationCVE-2026-31780Fix available7.8 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()CVE-2026-31779Fix available8.1 High
- linux, linux kernel +1 moreALSA: caiaq: fix stack out-of-bounds read in init_cardCVE-2026-31778Fix available7.1 High
- linux, linux kernel +1 moreALSA: ctxfi: Check the error for index mappingCVE-2026-31777Fix available5.5 Medium
- linux, linux kernel +1 moreALSA: ctxfi: Fix missing SPDIFI1 index handlingCVE-2026-31776Fix available7.8 High
- linux, linux kernel +1 moreALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initializationCVE-2026-31775Fix available5.5 Medium
- linux, linux kernel +1 moreio_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()CVE-2026-31774Fix available7.1 High
- linux, linux kernel +1 moreBluetooth: SMP: derive legacy responder STK authentication from MITM stateCVE-2026-31773Fix available8.8 High
- linux, linux kernel +1 moreBluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_syncCVE-2026-31772Fix available7.8 High
- linux, linux kernel +1 moreBluetooth: hci_event: move wake reason storage into validated event handlersCVE-2026-31771Fix available8.1 High
- linux, linux kernel +1 morehwmon: (occ) Fix division by zero in occ_show_power_1()CVE-2026-31770Fix available5.5 Medium
- linux, linux kernel +1 moregpib: fix use-after-free in IO ioctl handlersCVE-2026-31769Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreiio: adc: ti-adc161s626: use DMA-safe memory for spi_read()CVE-2026-31768Fix available7.8 High
- linux, linux kernel +1 moredrm/i915/dsi: Don't do DSC horizontal timing adjustments in command modeCVE-2026-31767Fix available5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: validate doorbell_offset in user queue creationCVE-2026-31766Fix available7.1 High
- Show moreLoading…