Skip to contentSiemens Simatic S7-1500 Cpu 1518f-4 Pn/dp Mfp vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_tables: reject immediate NF_QUEUE verdictCVE-2026-43024Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/x25: Fix potential double free of skbCVE-2026-43011Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreiio: adc: ti-adc161s626: use DMA-safe memory for spi_read()CVE-2026-31768Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreiio: gyro: mpu3050: Move iio_device_register() to correct locationCVE-2026-31761Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebridge: br_nd_send: validate ND option lengthsCVE-2026-31752Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ftgmac100: fix ring allocation unwind on open failureCVE-2026-31737Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()CVE-2026-31700Fix available7.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreBuffer overread in ns_printrrf with corrupted RDATA fieldCVE-2026-6238Fix available6.5 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePotential buffer overflow in ns_sprintrrf TSIG handling pathCVE-2026-5435Fix available7.3 High
- mit kerberos 5, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreIn MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application...CVE-2026-40355Fix available5.9 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebridge: br_nd_send: linearize skb before parsing ND optionsCVE-2026-31682Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_multiport: validate range encoding in checkentryCVE-2026-31681Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ipv6: flowlabel: defer exclusive option free until RCU teardownCVE-2026-31680Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()CVE-2026-31674Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morexfrm_user: fix info leak in build_report()CVE-2026-31671Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rfkill: prevent unlimited numbers of rfkill events from being createdCVE-2026-31670Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremptcp: fix slab-use-after-free in __inet_lookup_establishedCVE-2026-31669Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nft_ct: fix use-after-free in timeout object destroyCVE-2026-31665Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morexfrm: clear trailing padding in build_polexpire()CVE-2026-31664Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()CVE-2026-31658Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremmc: vub300: fix NULL-deref on disconnectCVE-2026-31651Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: stmmac: fix integer underflow in chain modeCVE-2026-31649Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morerxrpc: fix reference count leak in rxrpc_server_keyring()CVE-2026-31634Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/CPU: Fix FPDSS on Zen1CVE-2026-31628Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/irdma: Fix deadlock during netdev reset with active connectionsCVE-2026-31565Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: macb: Use dev_consume_skb_any() to free TX SKBsCVE-2026-31563Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefutex: Clear stale exiting pointer in futex_lock_pi() retry pathCVE-2026-31555Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: bonding: fix NULL deref in bond_debug_rlb_hash_showCVE-2026-31546Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/tls: fix use-after-free in -EBUSY error path of tls_do_encryptionCVE-2026-31533Fix available9.8 Critical
- gnupg libgcrypt, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreLibgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via...CVE-2026-41989Fix available6.7 Medium
- python, python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreBaseCookie.js_output() does not neutralize embedded charactersCVE-2026-6019Fix available2.1 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremodule: Fix kernel panic when a symbol st_shndx is out of boundsCVE-2026-31521Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreesp: fix skb leak with espintcp and async cryptoCVE-2026-31518Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreaf_key: validate families in pfkey_send_migrate()CVE-2026-31515Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: openvswitch: Avoid releasing netdev before teardown completesCVE-2026-31508Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe bufferCVE-2026-31507Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: fix fanout UAF in packet_release() via NETDEV_UP raceCVE-2026-31504Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreudp: Fix wildcard bind conflict check when using hash2CVE-2026-31503Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_expect: skip expectations in other netns via procCVE-2026-31496Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: use netlink policy range checksCVE-2026-31495Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: macb: use the current queue number for statsCVE-2026-31494Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morespi: spi-fsl-lpspi: fix teardown order issue (UAF)CVE-2026-31485Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevirtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is falseCVE-2026-31469Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremm/huge_memory: fix folio isn't locked in softleaf_to_folio()CVE-2026-31466Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: convert inline data to extents when truncate exceeds inline sizeCVE-2026-31452Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: publish jinode after initializationCVE-2026-31450Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreext4: validate p_idx bounds in ext4_ext_correct_indexesCVE-2026-31449Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: avoid infinite loops caused by residual dataCVE-2026-31448Fix available9.4 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: reject mount if bigalloc with s_first_data_block != 0CVE-2026-31447Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: fix use-after-free in update_super_work when racing with umountCVE-2026-31446Fix available7.8 High
- Show moreLoading…