Vulnerabilities

Linux Linux Kernel 7.0

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

829CVEs

CVE-2026-31476

ksmbd: do not expire session on binding failure

Published 2026-04-22 · Modified

8.2EPSS 0.005

CVE-2026-43233

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

Published 2026-05-06 · Modified

8.2EPSS 0.005

CVE-2026-43466

net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery

Published 2026-05-08 · Modified

8.2EPSS 0.004

CVE-2026-31631

rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

Published 2026-04-24 · Modified

8.2EPSS 0.004

CVE-2026-31788

xen/privcmd: restrict usage in unprivileged domU

Published 2026-03-25 · Modified

8.2EPSS 0.002

CVE-2026-31771

Bluetooth: hci_event: move wake reason storage into validated event handlers

Published 2026-05-01 · Modified

8.1EPSS 0.003

CVE-2026-31464

scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()

Published 2026-04-22 · Modified

8.1EPSS 0.003

CVE-2026-31779

wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()

Published 2026-05-01 · Modified

8.1EPSS 0.003

CVE-2026-31393

Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access

Published 2026-04-03 · Modified

8.1EPSS 0.003

CVE-2026-43362

smb: client: fix in-place encryption corruption in SMB2_write()

Published 2026-05-08 · Modified

8.1EPSS 0.003

CVE-2026-43051

HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

Published 2026-05-01 · Modified

8.1EPSS 0.003

CVE-2026-43377

ksmbd: Don't log keys in SMB3 signing and encryption key generation

Published 2026-05-08 · Analyzed

8.1EPSS 0.002

CVE-2026-23401

KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE

Published 2026-04-01 · Modified

8.1EPSS 0.002

CVE-2026-31392

smb: client: fix krb5 mount with username option

Published 2026-04-03 · Modified

8.1EPSS 0.001

CVE-2026-43134

Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ

Published 2026-05-06 · Modified

8.1EPSS 0.001

CVE-2026-31431

crypto: algif_aead - Revert to operating out-of-place

Published 2026-04-22 · Analyzed

7.8KEVEPSS 0.981

CVE-2026-43074

eventpoll: defer struct eventpoll free to RCU grace period

Published 2026-05-06 · Modified

7.8EPSS 0.005

CVE-2026-23278

netfilter: nf_tables: always walk all pending catchall elements

Published 2026-03-20 · Modified

7.8EPSS 0.002

CVE-2026-31663

xfrm: hold dev ref until after transport_finish NF_HOOK

Published 2026-04-24 · Modified

7.8EPSS 0.002

CVE-2026-31554

futex: Require sys_futex_requeue() to have identical flags

Published 2026-04-24 · Modified

7.8EPSS 0.002

CVE-2026-43456

bonding: fix type confusion in bond_setup_by_slave()

Published 2026-05-08 · Modified

7.8EPSS 0.002

CVE-2026-23407

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

Published 2026-04-01 · Analyzed

7.8EPSS 0.002

CVE-2026-23408

apparmor: Fix double free of ns_name in aa_replace_profiles()

Published 2026-04-01 · Analyzed

7.8EPSS 0.002

CVE-2026-23406

apparmor: fix side-effect bug in match_char() macro usage

Published 2026-04-01 · Analyzed

7.8EPSS 0.002

CVE-2026-23274

netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels

Published 2026-03-20 · Modified

7.8EPSS 0.002

CVE-2026-23272

netfilter: nf_tables: unconditionally bump set->nelems before insertion

Published 2026-03-20 · Modified

7.8EPSS 0.002

CVE-2026-43329

netfilter: flowtable: strictly check for maximum number of actions

Published 2026-05-08 · Modified

7.8EPSS 0.002

CVE-2026-31630

rxrpc: proc: size address buffers for %pISpc output

Published 2026-04-24 · Modified

7.8EPSS 0.002

CVE-2026-23383

bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing

Published 2026-03-25 · Modified

7.8EPSS 0.002

CVE-2026-23361

PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

Published 2026-03-25 · Modified

7.8EPSS 0.002

CVE-2026-23415

futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

Published 2026-04-02 · Modified

7.8EPSS 0.002

CVE-2026-43059

Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers

Published 2026-05-05 · Modified

7.8EPSS 0.002

CVE-2026-23392

netfilter: nf_tables: release flowtable after rcu grace period on error

Published 2026-03-25 · Modified

7.8EPSS 0.002

CVE-2026-31505

iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-31680

net: ipv6: flowlabel: defer exclusive option free until RCU teardown

Published 2026-04-25 · Modified

7.8EPSS 0.002

CVE-2026-43352

i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue

Published 2026-05-08 · Modified

7.8EPSS 0.002

CVE-2026-31675

net/sched: sch_netem: fix out-of-bounds access in packet corruption

Published 2026-04-25 · Modified

7.8EPSS 0.002

CVE-2026-43009

bpf: Fix incorrect pruning due to atomic fetch precision tracking

Published 2026-05-01 · Modified

7.8EPSS 0.002

CVE-2026-31493

RDMA/efa: Fix use of completion ctx after free

Published 2026-04-22 · Modified

7.8EPSS 0.002

CVE-2026-43368

drm/i915: Fix potential overflow of shmem scatterlist length

Published 2026-05-08 · Modified

7.8EPSS 0.002

Linux Linux Kernel 7.0

Security check