Browse CVEs

CRITICAL 9.8 CVE-2026-43208 In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu() Blamed commit made the assumption tha… Linux Kernel 6.18.16 / 6.19.6+ Fix from $2,3002026-05-06 CRITICAL 9.8 CVE-2026-43198 In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock(… Linux Kernel 6.18.16 / 6.19.6+ Fix from $2,3002026-05-06 CRITICAL 9.1 CVE-2026-43197 In the Linux kernel, the following vulnerability has been resolved: netconsole: avoid OOB reads, msg is not nul-terminated msg passed to netconsole… Linux Kernel 6.18.16 / 6.19.6+ Fix from $2,3002026-05-06 CRITICAL 9.8 CVE-2026-43185 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in smb_direct_prepare_negotiation() smb_direct_prep… Linux Kernel 6.18.16 / 6.19.6+ Fix from $2,3002026-05-06 CRITICAL 9.8 CVE-2026-43186 In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() On the receiv… Linux Kernel 5.15.202 / 6.1.165+ Fix from $2,3002026-05-06 CRITICAL 9.8 CVE-2026-43125 In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_n… Linux Kernel 6.12.75 / 6.18.16+ Fix from $2,3002026-05-06 CRITICAL 9.4 CVE-2026-43114 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New t… Linux Kernel 6.6.136 / 6.12.83+ Fix from $2,3002026-05-06 CRITICAL 9.1 CVE-2026-43117 In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file(… Linux Kernel 6.6.136 / 6.12.83+ Fix from $2,3002026-05-06 CRITICAL 9.1 CVE-2026-43083 In the Linux kernel, the following vulnerability has been resolved: net: ioam6: fix OOB and missing lock When trace->type.bit6 is set: if (tra… Linux Kernel 6.18.24 / 6.19.14+ Fix from $2,3002026-05-06 CRITICAL 9.1 CVE-2026-43071 In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to two There is an OOB read problem … Linux Kernel 3.11 / 3.13+ Fix from $2,3002026-05-05 CRITICAL 9.8 CVE-2026-43067 In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for blocks for indirect mapped blocks Co… Linux Kernel 5.16 / 6.6.134+ Fix from $2,3002026-05-05 CRITICAL 9.8 CVE-2026-43039 In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch… Linux Kernel 6.19.12+ Fix from $2,3002026-05-01 CRITICAL 9.8 CVE-2026-43037 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following … Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-05-01 CRITICAL 9.8 CVE-2026-43038 In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review … Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-05-01 CRITICAL 9.8 CVE-2026-43011 In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_… Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-05-01 CRITICAL 9.8 CVE-2026-31718 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger When a du… Linux Kernel 6.7 / 6.12.84+ Fix from $2,3002026-05-01 CRITICAL 9.8 CVE-2026-31705 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() appl… Linux Kernel 5.16 / 6.2+ Fix from $2,3002026-05-01 CRITICAL 9.4 CVE-2026-31685 In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_eui64: reject invalid MAC header for all packets `eui64_mt6()` … Linux Kernel 6.6.136 / 6.12.83+ Fix from $2,3002026-04-25 CRITICAL 9.1 CVE-2026-31682 In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: linearize skb before parsing ND options br_nd_send() parses… Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-04-25 CRITICAL 9.8 CVE-2026-31668 In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths in seg6 lwtunnel The seg6 l… Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31669 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table loo… Linux Kernel 5.15.203 / 6.1.169+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31657 In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() ca… Linux Kernel 6.1.169 / 6.6.135+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31659 In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buffers batadv_tt_prepare_tvlv_… Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31649 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix integer underflow in chain mode The jumbo_frm() chain-mode imp… Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31637 In the Linux kernel, the following vulnerability has been resolved: rxrpc: reject undecryptable rxkad response tickets rxkad_decrypt_ticket() decry… Linux Kernel 6.6.135 / 6.12.82+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31633 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix integer overflow in rxgk_verify_response() In rxgk_verify_response()… Linux Kernel 6.18.23 / 6.19.13+ Fix from $2,3002026-04-24 CRITICAL 9.1 CVE-2026-31636 In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgk_verify_authenticator() c… Linux Kernel 6.18.23 / 6.19.13+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31608 In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush… Linux Kernel 6.18.24 / 6.19.14+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31609 In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flus… Linux Kernel 6.18.24 / 6.19.14+ Fix from $2,3002026-04-24 CRITICAL 9.8 CVE-2026-31607 In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP clie… Linux Kernel 6.6.136 / 6.12.83+ Fix from $2,3002026-04-24