Browse CVEs

CRITICAL 9.8 CVE-2026-43038 In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Sashiko AI-review … Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-05-01 MEDIUM 5.5 CVE-2026-43034 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type bnxt_hwrm_func_backing_store_qc… Linux Kernel 6.18.22 / 6.19.12+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43035 In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to pr… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43036 In the Linux kernel, the following vulnerability has been resolved: net: use skb_header_pointer() for TCPv4 GSO frag_off check Syzbot reported a KM… Linux Kernel 6.12.81 / 6.18.22+ Fix from $1,6002026-05-01 HIGH 7.8 CVE-2026-43027 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_help… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-43030 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In case rold->reg->range == BEYOND_PK… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-43033 In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryptio… Linux Kernel 5.10.254 / 5.15.204+ Fix from $1,9502026-05-01 HIGH 7.5 CVE-2026-43029 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lockup in mptcp_recvmsg() syzbot reported a soft lockup in mptc… Linux Kernel 6.18.22 / 6.19.12+ Fix from $1,9502026-05-01 HIGH 7.5 CVE-2026-43031 In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets When a TX pack… Linux Kernel 6.18.22 / 6.19.12+ Fix from $1,9502026-05-01 HIGH 7.1 CVE-2026-43028 In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that lack a \… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-05-01 MEDIUM 5.5 CVE-2026-43026 In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent ctnetli… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43032 In the Linux kernel, the following vulnerability has been resolved: NFC: pn533: bound the UART receive buffer pn532_receive_buf() appends every inc… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,6002026-05-01 HIGH 7.8 CVE-2026-43019 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync hci_conn lookup a… Linux Kernel 6.12.81 / 6.18.22+ Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-43020 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Load Long Term Keys stores the u… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-43023 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_connect() sco_sock_connect() ch… Linux Kernel 6.1.168 / 6.6.134+ Fix from $1,9502026-05-01 HIGH 7.3 CVE-2026-43025 In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existi… Linux Kernel 6.1.168 / 6.6.134+ Fix from $1,9502026-05-01 MEDIUM 5.5 CVE-2026-43021 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails When hci_cmd_… Linux Kernel 6.19.12+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43022 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists hci_cmd… Linux Kernel 6.19.12+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43024 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE verdict nft_queue is always use… Linux Kernel 4.20 / 5.5+ Fix from $1,6002026-05-01 HIGH 8.8 CVE-2026-43018 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt hci… Linux Kernel 6.1.168 / 6.6.134+ Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-43015 In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregist… Linux Kernel 4.15 / 4.20+ Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-43016 In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready… Linux Kernel 6.6.134 / 6.12.81+ Fix from $1,9502026-05-01 MEDIUM 5.5 CVE-2026-43012 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal r… Linux Kernel 6.12.81 / 6.18.22+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43013 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_… Linux Kernel 6.1.168 / 6.6.134+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43014 In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources alloc… Linux Kernel 5.10.253 / 5.15.203+ Fix from $1,6002026-05-01 MEDIUM 5.5 CVE-2026-43017 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_send() curr… Linux Kernel 6.1.168 / 6.6.134+ Fix from $1,6002026-05-01 CRITICAL 9.8 CVE-2026-43011 In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_… Linux Kernel 5.10.253 / 5.15.203+ Fix from $2,3002026-05-01 HIGH 7.8 CVE-2026-43007 In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is releas… Linux Kernel 6.6.134 / 6.12.81+ Fix from $1,9502026-05-01 HIGH 7.8 CVE-2026-43009 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrac… Linux Kernel 6.19.12+ Fix from $1,9502026-05-01 HIGH 7.1 CVE-2026-43005 In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_b… Linux Kernel 6.18.22 / 6.19.12+ Fix from $1,9502026-05-01