2026 CVEs (page 307)
Page 307 of 463 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-43046 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zero drop_level [BUG] When recovering rel… |
CVE-2026-43045 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The current error handling has two issues: F… |
CVE-2026-43044 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is… |
CVE-2026-43043 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AF_ALG interface fails t… |
CVE-2026-43042 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platform_label{,s} pair The RCU-protected codepaths (mp… |
CVE-2026-43041 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak __radix_tree_cr… |
CVE-2026-43040 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prev… |
CVE-2026-43039 | Critical | 9.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch emac_dis… |
CVE-2026-43038 | Critical | 9.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review observed: … |
CVE-2026-43037 | Critical | 9.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem. … |
CVE-2026-43036 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: use skb_header_pointer() for TCPv4 GSO frag_off check Syzbot reported a KMSAN uninit… |
CVE-2026-43035 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an i… |
CVE-2026-43034 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type bnxt_hwrm_func_backing_store_qcaps_v2() s… |
CVE-2026-43033 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption When de… |
CVE-2026-43032 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: NFC: pn533: bound the UART receive buffer pn532_receive_buf() appends every incoming byte… |
CVE-2026-43031 | High | 7.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX packet spans m… |
CVE-2026-43030 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In case rold->reg->range == BEYOND_PKT_END && r… |
CVE-2026-43029 | High | 7.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lockup in mptcp_recvmsg() syzbot reported a soft lockup in mptcp_recvmsg(… |
CVE-2026-43028 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that lack a \0 characte… |
CVE-2026-43027 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_helper_unregis… |
CVE-2026-43026 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent ctnetlink_alloc_e… |
CVE-2026-43025 | High | 7.3 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existing master… |
CVE-2026-43024 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE verdict nft_queue is always used from use… |
CVE-2026-43023 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_connect() sco_sock_connect() checks sk_st… |
CVE-2026-43022 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists hci_cmd_sync_queu… |
CVE-2026-43021 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails When hci_cmd_sync_queue… |
CVE-2026-43020 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Load Long Term Keys stores the user-provid… |
CVE-2026-43019 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync hci_conn lookup and field a… |
CVE-2026-43018 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt hci_conn look… |
CVE-2026-43017 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_send() currently boun… |
CVE-2026-43016 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). syzbo… |
CVE-2026-43015 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may s… |
CVE-2026-43014 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with… |
CVE-2026-43013 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may… |
CVE-2026-43012 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason swit… |
CVE-2026-43011 | Critical | 9.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it c… |
CVE-2026-43010 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_multi programs at attach time kprobe.multi programs run in a… |
CVE-2026-43009 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrack_insn enc… |
CVE-2026-43008 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() devm_regmap_init_mmio()… |
CVE-2026-43007 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the de… |
CVE-2026-43006 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: reject zero-length fixed buffer import validate_fixed_range() admits buf_a… |
CVE-2026-43005 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_block_data(… |
CVE-2026-43004 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: spi: stm32-ospi: Fix resource leak in remove() callback The remove() callback returned ea… |
CVE-2026-42479 | Medium | 5.5 | 2026-05-01 | An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to caus… |
CVE-2026-42478 | High | 7.5 | 2026-05-01 | An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a den… |
CVE-2026-42477 | High | 7.1 | 2026-05-01 | A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows user-assisted at… |
CVE-2026-42476 | High | 7.1 | 2026-05-01 | Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii be… |
CVE-2026-31785 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_pagefault: Disallow writes to read-only VMAs The page fault handler should reje… |
CVE-2026-31784 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pxp: Clear restart flag in pxp_start after jumping back If we don't clear the flag… |
CVE-2026-31783 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback aml_… |
CVE-2026-31782 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in intel_pmu_hw_config Auto counter reload may h… |
CVE-2026-31781 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drm_compat_ioctl path The drm compat ioctl path takes… |
CVE-2026-31780 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation The variable valuesi… |
CVE-2026-31779 | High | 8.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() T… |
CVE-2026-31778 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in init_card The loop creates a whitespace-stri… |
CVE-2026-31777 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index mapping The ctxfi driver blindly assumed a proper… |
CVE-2026-31776 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled i… |
CVE-2026-31775 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi… |
CVE-2026-31774 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() sqe->len is __u32 but gets… |
CVE-2026-31773 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy res… |
CVE-2026-31772 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync hci_le_big_creat… |
CVE-2026-31771 | High | 8.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason storage into validated event handlers hci_store_wa… |
CVE-2026-31770 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (occ) Fix division by zero in occ_show_power_1() In occ_show_power_1() case 1, the… |
CVE-2026-31769 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpib: fix use-after-free in IO ioctl handlers The IBRD, IBWRT, IBCMD, and IBWAIT ioctl ha… |
CVE-2026-31768 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use… |
CVE-2026-31767 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode Stop adjusting t… |
CVE-2026-31766 | High | 7.1 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate doorbell_offset in user queue creation amdgpu_userq_get_doorbell_ind… |
CVE-2026-31765 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB Currently, AMDGPU_VA_RESERVED_TRA… |
CVE-2026-31764 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only The st_lsm6dsx… |
CVE-2026-31763 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix incorrect free_irq() variable The handler for the IRQ part of thi… |
CVE-2026-31762 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few l… |
CVE-2026-31761 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() to correct location iio_device_register()… |
CVE-2026-31760 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: gpib: lpvo_usb: fix memory leak on disconnect The driver iterates over the registered USB… |
CVE-2026-31759 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register()… |
CVE-2026-31758 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmc_release When calling usbtmc_release, pending a… |
CVE-2026-31757 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: Fix URB memory leak on submit failure When usb_submit_urb() fails in us… |
CVE-2026-31756 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() dwc2_gadget_exi… |
CVE-2026-31755 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix NULL pointer dereference in ep_queue When the gadget endpoint is… |
CVE-2026-31754 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix state inconsistency on gadget init failure When cdns3_gadget_star… |
CVE-2026-31753 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix NULL dereference in linedisp_release linedisp_release() cur… |
CVE-2026-31752 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths br_nd_send() walks ND options according to… |
CVE-2026-31751 | Medium | 4.7 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: dt2815: add hardware detection to prevent crash The dt2815 driver crashes when at… |
CVE-2026-31750 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: runflags cannot determine whether to reclaim chanlist syzbot reported a memory le… |
CVE-2026-31749 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: ni_atmio16d: Fix invalid clean-up after failed attach If the driver's COMEDI "att… |
CVE-2026-31748 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmware buffer `me2600_xilinx_download()` loads… |
CVE-2026-31747 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmware buffer `me4000_xilinx_download()` loads… |
CVE-2026-31746 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix memory leak with CCA cards used as accelerator Tests showed that there i… |
CVE-2026-31745 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: reset: gpio: fix double free in reset_add_gpio_aux_device() error path When __auxiliary_d… |
CVE-2026-31744 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix NULL pointer dereference when perf domain ID is not found dev_energymodel_nl_… |
CVE-2026-31743 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation… |
CVE-2026-31742 | High | 7.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen exit after resize When enter_alt_screen()… |
CVE-2026-31741 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Runtime PM counte… |
CVE-2026-31740 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member The counter driver c… |
CVE-2026-31739 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC The tegra crypto driver failed to set the CR… |
CVE-2026-31738 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlan_na_create vxlan_na_create() walks ND options a… |
CVE-2026-31737 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix ring allocation unwind on open failure ftgmac100_alloc_rings() alloca… |
CVE-2026-31736 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled If the gmac0 is disabled… |
CVE-2026-31735 | High | 8.8 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: iommupt: Fix short gather if the unmap goes into a large mapping unmap has the odd behavi… |
CVE-2026-31734 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU Since commit… |
CVE-2026-31733 | Medium | 5.5 | 2026-05-01 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stale direct dispatch state in ddsp_dsq_id @p->scx.ddsp_dsq_id can be left… |