Vulnerabilities

Linux Kernel 7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

827CVEs

CVE-2026-43365

xfs: fix undersized l_iclog_roundoff values

Published 2026-05-08 · Analyzed

8.2EPSS 0.006

CVE-2026-31631

rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

Published 2026-04-24 · Analyzed

8.2EPSS 0.006

CVE-2026-23456

netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case

Published 2026-04-03 · Modified

8.2EPSS 0.005

CVE-2026-23459

ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS

Published 2026-04-03 · Modified

8.2EPSS 0.004

CVE-2026-31788

xen/privcmd: restrict usage in unprivileged domU

Published 2026-03-25 · Analyzed

8.2EPSS 0.002

CVE-2026-31464

scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()

Published 2026-04-22 · Analyzed

8.1EPSS 0.004

CVE-2026-31393

Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access

Published 2026-04-03 · Analyzed

8.1EPSS 0.004

CVE-2026-43051

HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

Published 2026-05-01 · Analyzed

8.1EPSS 0.004

CVE-2026-31779

wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()

Published 2026-05-01 · Analyzed

8.1EPSS 0.004

CVE-2026-43377

ksmbd: Don't log keys in SMB3 signing and encryption key generation

Published 2026-05-08 · Analyzed

8.1EPSS 0.003

CVE-2026-43362

smb: client: fix in-place encryption corruption in SMB2_write()

Published 2026-05-08 · Analyzed

8.1EPSS 0.003

CVE-2026-31771

Bluetooth: hci_event: move wake reason storage into validated event handlers

Published 2026-05-01 · Analyzed

8.1EPSS 0.003

CVE-2026-43134

Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ

Published 2026-05-06 · Analyzed

8.1EPSS 0.002

CVE-2026-23401

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

Published 2026-04-01 · Modified

8.1EPSS 0.002

CVE-2026-31392

smb: client: fix krb5 mount with username option

Published 2026-04-03 · Analyzed

8.1EPSS 0.002

CVE-2026-31431

crypto: algif_aead - Revert to operating out-of-place

Published 2026-04-22 · Analyzed

7.8KEVEPSS 0.034

CVE-2026-31449

ext4: validate p_idx bounds in ext4_ext_correct_indexes

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31447

ext4: reject mount if bigalloc with s_first_data_block != 0

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-43329

netfilter: flowtable: strictly check for maximum number of actions

Published 2026-05-08 · Modified

7.8EPSS 0.002

CVE-2026-31780

wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation

Published 2026-05-01 · Analyzed

7.8EPSS 0.002

CVE-2026-31488

drm/amd/display: Do not skip unrelated mode changes in DSC validation

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31641

rxrpc: Fix RxGK token loading to check bounds

Published 2026-04-24 · Modified

7.8EPSS 0.002

CVE-2026-43380

hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read

Published 2026-05-08 · Modified

7.8EPSS 0.002

CVE-2026-31401

HID: bpf: prevent buffer overflow in hid_hw_request

Published 2026-04-03 · Analyzed

7.8EPSS 0.002

CVE-2026-31772

Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync

Published 2026-05-01 · Analyzed

7.8EPSS 0.002

CVE-2026-31690

firmware: thead: Fix buffer overflow and use standard endian macros

Published 2026-04-27 · Analyzed

7.8EPSS 0.002

CVE-2026-43063

xfs: don't irele after failing to iget in xfs_attri_recover_work

Published 2026-05-05 · Analyzed

7.8EPSS 0.002

CVE-2026-31446

ext4: fix use-after-free in update_super_work when racing with umount

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31452

ext4: convert inline data to extents when truncate exceeds inline size

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31469

virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31680

net: ipv6: flowlabel: defer exclusive option free until RCU teardown

Published 2026-04-25 · Modified

7.8EPSS 0.002

CVE-2026-31675

net/sched: sch_netem: fix out-of-bounds access in packet corruption

Published 2026-04-25 · Analyzed

7.8EPSS 0.002

CVE-2026-43033

crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

Published 2026-05-01 · Modified

7.8EPSS 0.002

CVE-2026-31494

net: macb: use the current queue number for stats

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-43030

bpf: Fix regsafe() for pointers to packet

Published 2026-05-01 · Modified

7.8EPSS 0.002

CVE-2026-31508

net: openvswitch: Avoid releasing netdev before teardown completes

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31504

net: fix fanout UAF in packet_release() via NETDEV_UP race

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31419

net: bonding: fix use-after-free in bond_xmit_broadcast()

Published 2026-04-13 · Modified

7.8EPSS 0.002

CVE-2026-23407

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

Published 2026-04-01 · Analyzed

7.8EPSS 0.002

CVE-2026-43076

ocfs2: validate inline data i_size during inode read

Published 2026-05-06 · Modified

7.8EPSS 0.002

Linux Kernel 7.0

Security check