2026 CVEs (page 360)
Page 360 of 448 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-4815 | High | 8.8 | 2026-03-25 | A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via… |
CVE-2026-3591 | Medium | 5.4 | 2026-03-25 | A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially-crafted DNS request, an attacker… |
CVE-2026-3119 | Medium | 6.5 | 2026-03-25 | Under certain conditions, `named` may crash when processing a correctly signed query containing a TKEY record. The affected code can only be reached if an inco… |
CVE-2026-3104 | High | 7.5 | 2026-03-25 | A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 thro… |
CVE-2026-28529 | High | 7.8 | 2026-03-25 | cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local us… |
CVE-2026-1519 | High | 7.5 | 2026-03-25 | If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only server… |
CVE-2026-4761 | High | 7.5 | 2026-03-25 | When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key… |
CVE-2026-4760 | | 2026-03-25 | From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servi… | |
CVE-2026-31788 | High | 8.2 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU The Xen privcmd driver allows to issue a… |
CVE-2026-23395 | High | 8.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Currently the code attempts… |
CVE-2026-23394 | Medium | 4.7 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened. Igor Ushakov reported that GC purged the rece… |
CVE-2026-23393 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: Fix race condition in peer_mep deletion When a peer MEP is being deleted, ca… |
CVE-2026-23392 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_… |
CVE-2026-23391 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_CT: drop pending enqueued packets on template removal Templates refer to ob… |
CVE-2026-23390 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow The dma_map_sg t… |
CVE-2026-23389 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in ice_set_ringparam() In ice_set_ringparam, tx_rings and xdp_rings… |
CVE-2026-23388 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protec… |
CVE-2026-23387 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() devm_add_action_or_reset(… |
CVE-2026-23386 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL In DQ-QPL mode… |
CVE-2026-23385 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clone set on flush only Syzbot with fault injection triggered a fai… |
CVE-2026-23384 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() struct ionic_cq_resp resp { __… |
CVE-2026-23383 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpf_pl… |
CVE-2026-23382 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b… |
CVE-2026-23381 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv… |
CVE-2026-23380 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARN_ON in tracing_buffers_mmap_close When a process forks, the child proces… |
CVE-2026-23379 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: fix divide by zero in the offload path Offloading ETS requires computing… |
CVE-2026-23378 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Fix metalist update behavior Whenever an ife action replace changes t… |
CVE-2026-23377 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz The only user of frag… |
CVE-2026-23376 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nvmet-fcloop: Check remoteport port_state before calling done callback In nvme_fc_handle_… |
CVE-2026-23375 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes file_thp_enabled() incorrectly allows THP… |
CVE-2026-23374 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: blktrace: fix __this_cpu_read/write in preemptible context tracing_record_cmdline() inter… |
CVE-2026-23373 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config This triggers a WARN_ON in… |
CVE-2026-23372 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel tx_work before socket teardown In rawsock_release(), cancel any pend… |
CVE-2026-23371 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting Running stress-ng --s… |
CVE-2026-23370 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data set_new_password()… |
CVE-2026-23369 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" This reverts commit f7… |
CVE-2026-23368 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock There is an AB-B… |
CVE-2026-23367 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only u… |
CVE-2026-23366 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kca… |
CVE-2026-23365 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the devic… |
CVE-2026-23364 | High | 7.4 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to b… |
CVE-2026-23363 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() Check frame… |
CVE-2026-23362 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix locking for bcm_op runtime updates Commit c2aba69d0c36 ("can: bcm: add lock… |
CVE-2026-23361 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dw_pc… |
CVE-2026-23360 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called… |
CVE-2026-23359 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack-out-of-bounds write in devmap get_upper_ifindexes() iterates over all uppe… |
CVE-2026-23358 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot r… |
CVE-2026-23357 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock in error path of mcp251x_open The mcp251x_open() function call… |
CVE-2026-23356 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Even though we check that we "should… |
CVE-2026-23355 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing deferred_qc Syzbot reported a WARN_ON() i… |
CVE-2026-23354 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: x86/fred: Correct speculative safety in fred_extint() array_index_nospec() is no use if t… |
CVE-2026-23353 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offline loopback test Since the conversion of ice to page pool… |
CVE-2026-23352 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efi_free_boot_services() frees memory occu… |
CVE-2026-23351 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Yiming Qian reports Use… |
CVE-2026-23350 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/queue: Call fini on exec queue creation fail Every call to queue init should have… |
CVE-2026-23349 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix condition effect bit clearing As reported by MPDarkGuy on discord, NULL p… |
CVE-2026-23348 | Medium | 4.7 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimm_bus object when creating nvdimm objects Found issue during runnin… |
CVE-2026-23347 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an u… |
CVE-2026-23346 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: arm64: io: Extract user memory type in ioremap_prot() The only caller of ioremap_prot() o… |
CVE-2026-23345 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled When FEAT_LPA2… |
CVE-2026-23344 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In the error path of sev_tsm_init_locked()… |
CVE-2026-23343 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: xdp: produce a warning when calculated tailroom is negative Many ethernet drivers report… |
CVE-2026-23342 | Medium | 4.7 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_bulk_queue (… |
CVE-2026-23341 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues… |
CVE-2026-23340 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs When shrink… |
CVE-2026-23339 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership o… |
CVE-2026-23338 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace ca… |
CVE-2026-23337 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf… |
CVE-2026-23336 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free… |
CVE-2026-23335 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() struct irdma_create_ah_resp {… |
CVE-2026-23334 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: handle short interrupt urb messages properly If an interrupt urb is rec… |
CVE-2026-23332 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix crash during turbo disable When the system is booted with kern… |
CVE-2026-23331 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected. Let's say… |
CVE-2026-23330 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete… |
CVE-2026-23329 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: libie: don't unroll if fwlog isn't supported The libie_fwlog_deinit() function can be cal… |
CVE-2026-23328 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL i… |
CVE-2026-23327 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed… |
CVE-2026-23326 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix fragment node deletion to prevent buffer leak After commit b692bf9a7543 ("xsk: G… |
CVE-2026-23325 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Check frame… |
CVE-2026-23324 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback When submitting… |
CVE-2026-23323 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver The recently added macs… |
CVE-2026-23322 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on sender error The analysis from Breno: Wh… |
CVE-2026-23321 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always mark signal+subflow endp as used Syzkaller managed to find a… |
CVE-2026-23319 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim The root cause of this bug is tha… |
CVE-2026-23318 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry of the validato… |
CVE-2026-23317 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Before the referenced… |
CVE-2026-23316 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix ARM64 alignment fault in multipath hash seed `struct sysctl_fib_multipath_… |
CVE-2026-23315 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Check frame le… |
CVE-2026-23314 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio() In bq25… |
CVE-2026-23313 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint as… |
CVE-2026-23312 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the devic… |
CVE-2026-23311 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix invalid wait context in ctx_sched_in() Lockdep found a bug in the event sc… |
CVE-2026-23310 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded bond_option_mo… |
CVE-2026-23309 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to trigger_data_free() If trigger_data_alloc() fails and… |
CVE-2026-23308 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbr_irq_mask()'… |
CVE-2026-23307 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message When loo… |
CVE-2026-23306 | High | 7.8 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001_queue_command() Commit e29c47fe8946 ("scsi: pm… |
CVE-2026-23305 | High | 7.1 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocket_probe When rocket_core_init() fails (… |
CVE-2026-23304 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() l3mdev_master_dev_rcu() can return N… |
CVE-2026-23303 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is… |