Skip to contentSiemens Simatic S7-1500 Tm Mfp - Gnu/linux Subsystem vulnerabilities
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morertmutex: Use waiter::task instead of current in remove_waiter()CVE-2026-43499Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peekedCVE-2026-43496Fix available5.5 Medium
- linux, linux kernel, red hat nvidia for rhel 10 +28 more +30 morenet: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503Public exploitFix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: pcrypt - Fix handling of MAY_BACKLOG requestsCVE-2026-43493Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morelib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()CVE-2026-43492Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: gadget: f_ncm: Fix net_device lifecycle with device_moveCVE-2026-43421Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: require a full NFS mode SID before reading mode bitsCVE-2026-43350Fix available7.6 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremm/page_alloc: clear page->private in free_pages_prepare()CVE-2026-43303Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()CVE-2026-43117Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: ctnetlink: ensure safe access to master conntrackCVE-2026-43116Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 morenetfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiryCVE-2026-43114Fix available9.4 Critical
- linux, linux kernel, red hat enterprise linux 10 +24 more +26 morefs/smb/client: fix out-of-bounds read in cifs_sanitize_prepathCVE-2026-43112Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: roccat: fix use-after-free in roccat_report_eventCVE-2026-43111Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: brcmfmac: validate bsscfg indices in IF eventsCVE-2026-43110Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipv4: icmp: fix null-ptr-deref in icmp_build_probe()CVE-2026-43099Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreixgbevf: add missing negotiate_features op to Hyper-V ops tableCVE-2026-43094Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morexsk: tighten UMEM headroom validation to account for tailroom and min frameCVE-2026-43093Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm_user: fix info leak in build_mapping()CVE-2026-43089Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminatorCVE-2026-43085Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morel2tp: Drop large packets with UDP encapCVE-2026-43080Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreeventpoll: defer struct eventpoll free to RCU grace periodCVE-2026-43074Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moredcache: Limit the minimal number of bucket to twoCVE-2026-43071Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mac80211: check tdls flag in ieee80211_tdls_operCVE-2026-43052Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: require minimum ACE size in smb_check_perm_dacl()CVE-2026-31712Fix available8.3 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: server: fix active_num_conn leak on transport allocation failureCVE-2026-31711Fix available7.5 High
- linux, linux kernel, red hat enterprise linux 10 +9 more +11 moresmb: client: validate the whole DACL before rewriting it in cifsaclCVE-2026-31709Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO pathCVE-2026-31708Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: fix out-of-bounds write in smb2_get_ea() EA alignmentCVE-2026-31705Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: use check_add_overflow() to prevent u16 DACL size overflowCVE-2026-31704Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()CVE-2026-31700Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy CSR to userspace if PSP command failedCVE-2026-31699Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failedCVE-2026-31698Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: ccp: Don't attempt to copy ID to userspace if PSP command failedCVE-2026-31697Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix missing validation of ticket length in non-XDR key preparsingCVE-2026-31696Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 more +3 morefuse: reject oversized dirents in page cacheCVE-2026-31694Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: ip6t_eui64: reject invalid MAC header for all packetsCVE-2026-31685Fix available9.4 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_multiport: validate range encoding in checkentryCVE-2026-31681Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: only handle RESPONSE during service challengeCVE-2026-31676Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreaf_unix: read UNIX_DIAG_VFS data under unix_state_lockCVE-2026-31673Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix call removal to use RCU safe deletionCVE-2026-31642Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: reject undecryptable rxkad response ticketsCVE-2026-31637Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: proc: size address buffers for %pISpc outputCVE-2026-31630Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfc: llcp: add missing return after LLCP_CLOSED checksCVE-2026-31629Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: alps: fix NULL pointer dereference in alps_raw_event()CVE-2026-31625Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: core: clamp report_size in s32ton() to avoid undefined shiftCVE-2026-31624Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreNFC: digital: Bounds check NFC-A cascade depth in SDD response handlerCVE-2026-31622Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreusb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()CVE-2026-31617Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: fix OOB reads parsing symlink error responseCVE-2026-31613Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: validate EaNameLength in smb2_get_ea()CVE-2026-31612Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: require 3 sub-authorities before reading sub_auth[2]CVE-2026-31611Fix available8.6 High
- Show moreLoading…