Vulnerabilities

Linux Kernel 7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

827CVEs

CVE-2026-43005

hwmon: (tps53679) Fix array access with zero-length block read

Published 2026-05-01 · Analyzed

7.1EPSS 0.002

CVE-2026-43006

io_uring/rsrc: reject zero-length fixed buffer import

Published 2026-05-01 · Analyzed

7.1EPSS 0.002

CVE-2026-31568

s390/mm: Add missing secure storage access fixups for donated memory

Published 2026-04-24 · Analyzed

7.1EPSS 0.002

CVE-2026-31395

bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler

Published 2026-04-03 · Analyzed

7.1EPSS 0.002

CVE-2026-31484

io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check

Published 2026-04-22 · Analyzed

7.1EPSS 0.002

CVE-2026-43042

mpls: add seqcount to protect the platform_label{,s} pair

Published 2026-05-01 · Analyzed

7.1EPSS 0.002

CVE-2026-31486

hwmon: (pmbus/core) Protect regulator operations with mutex

Published 2026-04-22 · Modified

7.1EPSS 0.001

CVE-2026-23434

mtd: rawnand: serialize lock/unlock against other NAND operations

Published 2026-04-03 · Modified

7.1EPSS 0.001

CVE-2026-23318

ALSA: usb-audio: Use correct version for UAC3 header validation

Published 2026-03-25 · Analyzed

7.1EPSS 0.001

CVE-2026-23269

apparmor: validate DFA start states are in bounds in unpack_pdb

Published 2026-03-18 · Analyzed

7.1EPSS 0.001

CVE-2026-23315

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

Published 2026-03-25 · Analyzed

7.1EPSS 0.001

CVE-2026-23363

wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()

Published 2026-03-25 · Analyzed

7.1EPSS 0.001

CVE-2026-23325

wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()

Published 2026-03-25 · Analyzed

7.1EPSS 0.001

CVE-2026-23327

cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

Published 2026-03-25 · Modified

7.1EPSS 0.001

CVE-2026-23397

nfnetlink_osf: validate individual option lengths in fingerprints

Published 2026-03-26 · Modified

7.1EPSS 0.001

CVE-2026-23244

nvme: fix memory allocation in nvme_pr_read_keys()

Published 2026-03-18 · Analyzed

7.1EPSS 0.001

CVE-2026-23388

Squashfs: check metadata block offset is within range

Published 2026-03-25 · Analyzed

7.1EPSS 0.001

CVE-2026-23424

accel/amdxdna: Validate command buffer payload count

Published 2026-04-03 · Modified

7.1EPSS 0.001

CVE-2026-31430

X.509: Fix out-of-bounds access when parsing extensions

Published 2026-04-20 · Analyzed

7.1EPSS 0.001

CVE-2026-43050

atm: lec: fix use-after-free in sock_def_readable()

Published 2026-05-01 · Analyzed

7.0EPSS 0.002

CVE-2026-31426

ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

Published 2026-04-13 · Analyzed

7.0EPSS 0.002

CVE-2026-23454

net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown

Published 2026-04-03 · Modified

7.0EPSS 0.001

CVE-2026-23294

bpf: Fix race in devmap on PREEMPT_RT

Published 2026-03-25 · Analyzed

7.0EPSS 0.001

CVE-2026-23416

mm/mseal: update VMA end correctly on merge

Published 2026-04-02 · Analyzed

5.5EPSS 0.002

CVE-2026-23405

apparmor: fix: limit the number of levels of policy namespaces

Published 2026-04-01 · Analyzed

5.5EPSS 0.002

CVE-2026-31428

netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD

Published 2026-04-13 · Modified

5.5EPSS 0.002

CVE-2026-23403

apparmor: fix memory leak in verify_header

Published 2026-04-01 · Analyzed

5.5EPSS 0.002

CVE-2026-23404

apparmor: replace recursive profile removal with iterative approach

Published 2026-04-01 · Analyzed

5.5EPSS 0.002

CVE-2026-23409

apparmor: fix differential encoding verification

Published 2026-04-01 · Analyzed

5.5EPSS 0.002

CVE-2026-31412

usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()

Published 2026-04-10 · Analyzed

5.5EPSS 0.002

CVE-2026-31733

sched_ext: Fix stale direct dispatch state in ddsp_dsq_id

Published 2026-05-01 · Analyzed

5.5EPSS 0.002

CVE-2026-43482

sched_ext: Disable preemption between scx_claim_exit() and kicking helper work

Published 2026-05-13 · Analyzed

5.5EPSS 0.002

CVE-2026-43392

sched_ext: Fix starvation of scx_enable() under fair-class saturation

Published 2026-05-08 · Analyzed

5.5EPSS 0.002

CVE-2026-43288

ext4: move ext4_percpu_param_init() before ext4_mb_init()

Published 2026-05-08 · Modified

5.5EPSS 0.002

CVE-2026-31658

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

Published 2026-04-24 · Modified

5.5EPSS 0.002

CVE-2026-31737

net: ftgmac100: fix ring allocation unwind on open failure

Published 2026-05-01 · Modified

5.5EPSS 0.002

CVE-2026-31671

xfrm_user: fix info leak in build_report()

Published 2026-04-24 · Modified

5.5EPSS 0.002

CVE-2026-31495

netfilter: ctnetlink: use netlink policy range checks

Published 2026-04-22 · Modified

5.5EPSS 0.002

CVE-2026-43024

netfilter: nf_tables: reject immediate NF_QUEUE verdict

Published 2026-05-01 · Modified

5.5EPSS 0.002

CVE-2026-31515

af_key: validate families in pfkey_send_migrate()

Published 2026-04-22 · Modified

5.5EPSS 0.002

Linux Kernel 7.0

Security check