2026 CVEs (page 510)
Page 510 of 673 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-43216 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skb_may_tx_timestamp() skb_may_tx_timestamp() may acquire sock::sk_… |
CVE-2026-43215 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used to use the cifs_tcp_ses_lock to protect a… |
CVE-2026-43214 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() Add SRCU read-side pro… |
CVE-2026-43213 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports a… |
CVE-2026-43212 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE The arch definition of cpum… |
CVE-2026-43211 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Commit a4e772898f8b ("PCI: Add missing bridge… |
CVE-2026-43210 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length before using Check the event length befor… |
CVE-2026-43209 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: minix: Add required sanity checking to minix_check_superblock() The fs/minix implementati… |
CVE-2026-43208 | Critical | 9.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu() Blamed commit made the assumption that the RPS… |
CVE-2026-43207 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtk_mdp_unregister_m2m_device()… |
CVE-2026-43206 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() The kfd_event_page_set() func… |
CVE-2026-43205 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate num_ifs to prevent out-of-bounds write The driver obtains sw_attr… |
CVE-2026-43204 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams 'Commit a354f030dbce ("ASoC… |
CVE-2026-43203 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PCA-200E or… |
CVE-2026-43202 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: fbdev: vt8500lcdfb: fix missing dma_free_coherent() fbi->fb.screen_buffer is allocated wi… |
CVE-2026-43201 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ARM processor Error: don't go past allocated memory If the BIOS generates a ve… |
CVE-2026-43200 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() function… |
CVE-2026-43199 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query Fix a "scheduling whi… |
CVE-2026-43198 | Critical | 9.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after th… |
CVE-2026-43197 | Critical | 9.1 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: netconsole: avoid OOB reads, msg is not nul-terminated msg passed to netconsole from the… |
CVE-2026-43196 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in pruss_clk_mux_setup() In the pruss_clk_mux_setup(), th… |
CVE-2026-43195 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue size… |
CVE-2026-43194 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgro_frglist.sh and udpgro_bench.sh are the flak… |
CVE-2026-43193 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg() Claude pointed out that there i… |
CVE-2026-43192 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: dm mpath: Add missing dm_put_device when failing to get scsi dh name When commit fd81bc5c… |
CVE-2026-43191 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 [Why] A b… |
CVE-2026-43190 | High | 8.2 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length before reading optlen Quoting reporter: In… |
CVE-2026-43189 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: Fix error handling on steps after finding a match Once an async connec… |
CVE-2026-43188 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ceph: do not propagate page array emplacement errors as batch errors When fscrypt is enab… |
CVE-2026-43187 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty Back in commit 2a2b5932db6758 ("xfs: fix… |
CVE-2026-43186 | Critical | 9.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() On the receive path, __… |
CVE-2026-43185 | Critical | 9.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in smb_direct_prepare_negotiation() smb_direct_prepare_negoti… |
CVE-2026-43184 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back t… |
CVE-2026-43183 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix a resource leak in cx25821_dev_setup() Add release_mem_region() if io… |
CVE-2026-43182 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: ccs: Avoid possible division by zero Calculating maximum M for scaler configuratio… |
CVE-2026-43181 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: gpio: sysfs: fix chip removal with GPIOs exported over sysfs Currently if we export a GPI… |
CVE-2026-43180 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode kaweth_set_rx_mode()… |
CVE-2026-43179 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images… |
CVE-2026-43178 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procmap_query() When user provides incorrectly… |
CVE-2026-43177 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Fix RPM reference leak in probe error paths Several error paths in ipu6_pci_… |
CVE-2026-43176 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 9… |
CVE-2026-43175 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 The 9FGV0841 has 8 outputs and r… |
CVE-2026-43174 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all as… |
CVE-2026-43173 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: xscale: Check for PTP support properly In ixp4xx_get_ts_info() ixp46x_ptp_… |
CVE-2026-43172 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix 22000 series SMEM parsing If the firmware were to report three LMACs (… |
CVE-2026-43171 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cper_print_fw_err() do… |
CVE-2026-43170 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Move vbus draw to workqueue context Currently dwc3_gadget_vbus_draw()… |
CVE-2026-43169 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Prevent BUG_ON by validating rounded allocation When DRM_BUDDY_CONTIGUOUS_ALLO… |
CVE-2026-43168 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix reflink preserve cleanup issue commit c06c303832ec ("ocfs2: fix xattr array en… |
CVE-2026-43167 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEV_UNREGISTER event syzbot is reporting that… |
CVE-2026-43166 | High | 7.1 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced plain identification for encoded extents Only plain data whose star… |
CVE-2026-43165 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin When calling of_parse_p… |
CVE-2026-43164 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb(). syzbot reported null-ptr-der… |
CVE-2026-43163 | Medium | 4.7 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resize race A General Protection Fault occurs… |
CVE-2026-43162 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: tegra-video: Fix memory leak in __tegra_channel_try_format() The state object allo… |
CVE-2026-43161 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe… |
CVE-2026-43160 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: mfd: macsmc: Initialize mutex Initialize struct apple_smc's mutex in apple_smc_probe(). U… |
CVE-2026-43159 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix null dereference in find_network The variable pwlan has the possi… |
CVE-2026-43158 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both t… |
CVE-2026-43157 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and t… |
CVE-2026-43156 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: enable basic endpoint checking pegasus_probe() fills URBs with hardcod… |
CVE-2026-43155 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: mux: mmio: fix regmap leak on probe failure The mmio regmap that may be allocated during… |
CVE-2026-43154 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits in volume label handling Crafted EROFS images containing… |
CVE-2026-43153 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: xfs: remove xfs_attr_leaf_hasname The calling convention of xfs_attr_leaf_hasname() is pr… |
CVE-2026-43152 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-pl: handle probe errors Errors in init must be reported back or we'll follow a N… |
CVE-2026-43151 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: Revert "media: iris: Add sanity check for stop streaming" This reverts commit ad699fa78b5… |
CVE-2026-43150 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: perf/arm-cmn: Reject unsupported hardware configurations So far we've been fairly lax abo… |
CVE-2026-43149 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() The priv->rx_buffer an… |
CVE-2026-43148 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() As kcalloc() may fa… |
CVE-2026-43147 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" This rever… |
CVE-2026-43146 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: iris: Add buffer to list only after successful allocation Move `list_add_tail()` t… |
CVE-2026-43145 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix invalid loaded resource table detection imx_rproc_elf_find_loa… |
CVE-2026-43144 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential kernel oops when probe fails When probe of the sdio brcmfma… |
CVE-2026-43143 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: mfd: core: Add locking around 'mfd_of_node_list' Manipulating a list in the kernel isn't… |
CVE-2026-43142 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases… |
CVE-2026-43141 | High | 7.1 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut Number of MW LUTs depends on… |
CVE-2026-43140 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own r… |
CVE-2026-43139 | High | 8.6 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() xfrm6_get_saddr() does not check the… |
CVE-2026-43138 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: reset: gpio: suppress bind attributes in sysfs This is a special device that's created dy… |
CVE-2026-43137 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix NULL pointer dereference If there's a mismatch between the DAI… |
CVE-2026-43136 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() Do not crash when a repo… |
CVE-2026-43135 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Add missing unmap in snd_cx23885_hw_params() In error path, add cx23885_a… |
CVE-2026-43134 | High | 8.1 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for… |
CVE-2026-43133 | High | 7.9 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM… |
CVE-2026-43132 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm… |
CVE-2026-43131 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initializat… |
CVE-2026-43130 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4… |
CVE-2026-43129 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ima: verify the previous kernel's IMA buffer lies in addressable RAM Patch series "Addres… |
CVE-2026-43128 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure path In ib_umem_dmabuf_get_pinned_with_dma… |
CVE-2026-43127 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix circular locking dependency in run_unpack_ex Syzbot reported a circular lockin… |
CVE-2026-43126 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints ALSA OSS mixer layer calls the kcontrol… |
CVE-2026-43125 | Critical | 9.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is n… |
CVE-2026-43124 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap()… |
CVE-2026-43123 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newinfo() If fbcon_open() fails when called f… |
CVE-2026-43121 | Medium | 4.7 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_ref race between scrub and refill paths The io_zcrx_put_niov_uref… |
CVE-2026-6420 | Medium | 6.3 | 2026-05-06 | A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Ke… |
CVE-2026-6860 | Medium | 5.3 | 2026-05-06 | A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g. if the serve… |
CVE-2026-43975 | Medium | 6.5 | 2026-05-06 | FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allo… |
CVE-2026-43646 | High | 7.5 | 2026-05-06 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9… |
CVE-2026-43120 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to rereg_user_mr If IB_MR_REREG_TRANS is set during r… |