Skip to contentSiemens Simatic S7-1500 Tm Mfp - Gnu/linux Subsystem vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreposix-cpu-timers: Prevent UAF caused by non-leader exec() raceCVE-2026-64560Public exploitFix available7.8 High
- linux kernel, linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 more +3 moreipv6: account for fraggap on the paged allocation pathCVE-2026-53362In KEVPublic exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()CVE-2026-53358Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/i915/gem: Fix phys BO pread/pwrite with offsetCVE-2026-53356Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moresignal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()CVE-2026-53352Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreASoC: wm_adsp: Fix NULL dereference when removing firmware controlsCVE-2026-53350Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_conntrack: destroy stale expectfn expectations on unregisterCVE-2026-53349Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: bonding: fix NULL pointer dereference in bond_do_ioctl()CVE-2026-53337Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreagp/amd64: Fix broken error propagation in agp_amd64_probe()CVE-2026-53325Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: mcast: Fix use-after-free when processing MLD queriesCVE-2026-53275Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: synproxy: add mutex to guard hook reference countingCVE-2026-53269Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: conntrack_irc: fix possible out-of-bounds readCVE-2026-53268Fix available8.2 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm cache policy smq: check allocation under invalidate lockCVE-2026-53265Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: act_api: use RCU with deferred freeing for action lifecycleCVE-2026-53264Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more6lowpan: fix off-by-one in multicast context address compressionCVE-2026-53263Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()CVE-2026-53256Fix available8.0 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: MGMT: validate advertising TLV before type checksCVE-2026-53255Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: RFCOMM: validate skb length in MCC handlersCVE-2026-53254Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: bnep: reject short frames before parsingCVE-2026-53253Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv4: restrict IPOPT_SSRR and IPOPT_LSRR optionsCVE-2026-53249Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattrCVE-2026-53245Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streamsCVE-2026-53242Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()CVE-2026-53239Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moretcp: restrict SO_ATTACH_FILTER to priv usersCVE-2026-53236Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipv6: sit: reload inner IPv6 header after GSO offloadsCVE-2026-53228Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: openvswitch: fix possible kfree_skb of ERR_PTRCVE-2026-53227Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: fix uninit-value in __sctp_rcv_asconf_lookup()CVE-2026-53225Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()CVE-2026-53221Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: x_tables: avoid leaking percpu counter pointersCVE-2026-53219Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nft_exthdr: fix register tracking for F_PRESENT flagCVE-2026-53218Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nft_tunnel: fix use-after-free on object destroyCVE-2026-53212Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsigCVE-2026-53208Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCELCVE-2026-53198Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: timer: Fix UAF at snd_timer_user_params()CVE-2026-53192Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreudp: clear skb->dev before running a sockmap verdictCVE-2026-53184Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremptcp: allow subflow rcv wnd to shrinkCVE-2026-53183Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevsock/vmci: fix sk_ack_backlog leak on failed handshakeCVE-2026-53181Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebnxt_en: Fix NULL pointer dereferenceCVE-2026-53177Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: reject fuse_notify() pagecache ops on directoriesCVE-2026-53168Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: limit FUSE_NOTIFY_RETRIEVE to uptodate foliosCVE-2026-53167Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Reject zero-length property entries in validatorCVE-2026-53150Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Bound root directory content to block sizeCVE-2026-53149Fix available7.1 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 morethunderbolt: Clamp XDomain response data copy to allocation sizeCVE-2026-53148Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Validate XDomain request packet size before type castCVE-2026-53147Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morethunderbolt: Limit XDomain response copy to actual frame sizeCVE-2026-53146Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: require Ethernet MAC header before using eth_hdr()CVE-2026-53131Fix available9.4 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: cls_fw: fix NULL dereference of "old" filters before change()CVE-2026-53080Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morei2c: dev: prevent integer overflow in I2C_TIMEOUT ioctlCVE-2026-52948Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: qrtr: fix refcount saturation and potential UAF in qrtr_port_removeCVE-2026-52947Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morefs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signalingCVE-2026-52946Fix available7.5 High
- Show moreLoading…