Vulnerabilities

Linux Kernel 7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

827CVEs

CVE-2026-43407

libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()

Published 2026-05-08 · Analyzed

9.1EPSS 0.005

CVE-2026-43406

libceph: prevent potential out-of-bounds reads in process_message_header()

Published 2026-05-08 · Analyzed

9.1EPSS 0.005

CVE-2026-31682

bridge: br_nd_send: linearize skb before parsing ND options

Published 2026-04-25 · Modified

9.1EPSS 0.005

CVE-2026-43197

netconsole: avoid OOB reads, msg is not nul-terminated

Published 2026-05-06 · Modified

9.1EPSS 0.005

CVE-2026-43083

net: ioam6: fix OOB and missing lock

Published 2026-05-06 · Analyzed

9.1EPSS 0.004

CVE-2026-31636

rxrpc: fix RESPONSE authenticator parser OOB read

Published 2026-04-24 · Analyzed

9.1EPSS 0.004

CVE-2026-43117

btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()

Published 2026-05-06 · Modified

9.1EPSS 0.004

CVE-2026-31433

ksmbd: fix potencial OOB in get_file_all_info() for compound requests

Published 2026-04-22 · Analyzed

8.8EPSS 0.006

CVE-2026-31450

ext4: publish jinode after initialization

Published 2026-04-22 · Modified

8.8EPSS 0.005

CVE-2026-31432

ksmbd: fix OOB write in QUERY_INFO for compound requests

Published 2026-04-22 · Modified

8.8EPSS 0.005

CVE-2026-31409

ksmbd: unset conn->binding on failed binding request

Published 2026-04-06 · Modified

8.8EPSS 0.005

CVE-2026-31739

crypto: tegra - Add missing CRYPTO_ALG_ASYNC

Published 2026-05-01 · Analyzed

8.8EPSS 0.004

CVE-2026-43232

net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets

Published 2026-05-06 · Analyzed

8.8EPSS 0.004

CVE-2026-43112

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Published 2026-05-06 · Modified

8.8EPSS 0.004

CVE-2026-31435

netfs: Fix read abandonment during retry

Published 2026-04-22 · Analyzed

8.8EPSS 0.003

CVE-2026-31408

Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

Published 2026-04-06 · Modified

8.8EPSS 0.003

CVE-2026-23246

wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration

Published 2026-03-18 · Analyzed

8.8EPSS 0.003

CVE-2026-31773

Bluetooth: SMP: derive legacy responder STK authentication from MITM state

Published 2026-05-01 · Analyzed

8.8EPSS 0.003

CVE-2026-31570

can: gw: fix OOB heap access in cgw_csum_crc8_rel()

Published 2026-04-24 · Analyzed

8.8EPSS 0.003

CVE-2026-23462

Bluetooth: HIDP: Fix possible UAF

Published 2026-04-03 · Analyzed

8.8EPSS 0.003

CVE-2026-43018

Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt

Published 2026-05-01 · Analyzed

8.8EPSS 0.003

CVE-2026-43334

Bluetooth: SMP: force responder MITM requirements before building the pairing response

Published 2026-05-08 · Analyzed

8.8EPSS 0.003

CVE-2026-23395

Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ

Published 2026-03-25 · Analyzed

8.8EPSS 0.002

CVE-2026-23461

Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user

Published 2026-04-03 · Analyzed

8.8EPSS 0.002

CVE-2026-43110

wifi: brcmfmac: validate bsscfg indices in IF events

Published 2026-05-06 · Modified

8.8EPSS 0.002

CVE-2026-43113

wifi: wl1251: validate packet IDs before indexing tx_frames

Published 2026-05-06 · Modified

8.8EPSS 0.002

CVE-2026-43048

HID: core: Mitigate potential OOB by removing bogus memset()

Published 2026-05-01 · Analyzed

8.8EPSS 0.002

CVE-2026-43322

Bluetooth: hci_sync: Fix UAF in le_read_features_complete

Published 2026-05-08 · Analyzed

8.8EPSS 0.002

CVE-2026-31558

LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust

Published 2026-04-24 · Analyzed

8.8EPSS 0.001

CVE-2026-43403

nsfs: tighten permission checks for ns iteration ioctls

Published 2026-05-08 · Analyzed

8.8EPSS 0.001

CVE-2026-43391

nsfs: tighten permission checks for handle opening

Published 2026-05-08 · Modified

8.8EPSS 0.001

CVE-2026-31553

KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc()

Published 2026-04-24 · Analyzed

8.8EPSS 0.001

CVE-2026-31735

iommupt: Fix short gather if the unmap goes into a large mapping

Published 2026-05-01 · Analyzed

8.8EPSS 0.001

CVE-2026-23425

KVM: arm64: Fix ID register initialization for non-protected pKVM guests

Published 2026-04-03 · Modified

8.8EPSS 0.001

CVE-2026-23457

netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()

Published 2026-04-03 · Modified

8.6EPSS 0.004

CVE-2026-43139

xfrm6: fix uninitialized saddr in xfrm6_get_saddr()

Published 2026-05-06 · Analyzed

8.6EPSS 0.004

CVE-2026-23456

netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case

Published 2026-04-03 · Modified

8.2EPSS 0.005

CVE-2026-31476

ksmbd: do not expire session on binding failure

Published 2026-04-22 · Modified

8.2EPSS 0.005

CVE-2026-43233

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

Published 2026-05-06 · Analyzed

8.2EPSS 0.005

CVE-2026-43452

netfilter: x_tables: guard option walkers against 1-byte tail reads

Published 2026-05-08 · Analyzed

8.2EPSS 0.004

Linux Kernel 7.0

Security check