Vulnerabilities

Linux Kernel 7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

827CVEs

CVE-2026-43370

drm/amdgpu: Fix use-after-free race in VM acquire

Published 2026-05-08 · Analyzed

7.8EPSS 0.001

CVE-2026-23281

wifi: libertas: fix use-after-free in lbs_free_adapter()

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23306

scsi: pm8001: Fix use-after-free in pm8001_queue_command()

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23319

bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim

Published 2026-03-25 · Modified

7.8EPSS 0.001

CVE-2026-23351

netfilter: nft_set_pipapo: split gc into unlink and reclaim phase

Published 2026-03-25 · Modified

7.8EPSS 0.001

CVE-2026-23270

net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks

Published 2026-03-18 · Modified

7.8EPSS 0.001

CVE-2026-23322

ipmi: Fix use-after-free and list corruption on sender error

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23422

dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

Published 2026-04-03 · Modified

7.8EPSS 0.001

CVE-2026-23272

netfilter: nf_tables: unconditionally bump set->nelems before insertion

Published 2026-03-20 · Modified

7.8EPSS 0.001

CVE-2026-23387

pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23275

io_uring: ensure ctx->rings is stable for task work flags manipulation

Published 2026-03-20 · Analyzed

7.8EPSS 0.001

CVE-2026-23344

crypto: ccp - Fix use-after-free on error path

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23288

accel/amdxdna: Fix out-of-bounds memset in command slot handling

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23248

perf/core: Fix refcount bug and potential UAF in perf_mmap

Published 2026-03-18 · Analyzed

7.8EPSS 0.001

CVE-2026-23432

mshv: Fix use-after-free in mshv_map_user_memory error path

Published 2026-04-03 · Modified

7.8EPSS 0.001

CVE-2026-23413

clsact: Fix use-after-free in init/destroy rollback asymmetry

Published 2026-04-02 · Modified

7.8EPSS 0.001

CVE-2026-23392

netfilter: nf_tables: release flowtable after rcu grace period on error

Published 2026-03-25 · Modified

7.8EPSS 0.001

CVE-2026-23412

netfilter: bpf: defer hook memory release until rcu readers are done

Published 2026-04-02 · Modified

7.8EPSS 0.001

CVE-2026-23239

espintcp: Fix race condition in espintcp_close()

Published 2026-03-10 · Analyzed

7.8EPSS 0.001

CVE-2026-23393

bridge: cfm: Fix race condition in peer_mep deletion

Published 2026-03-25 · Analyzed

7.8EPSS 0.001

CVE-2026-23271

perf: Fix __perf_event_overflow() vs perf_remove_from_context() race

Published 2026-03-20 · Modified

7.8EPSS 0.001

CVE-2026-31417

net/x25: Fix overflow when accumulating packets

Published 2026-04-13 · Modified

7.5EPSS 0.008

CVE-2026-43194

net: consume xmit errors of GSO frames

Published 2026-05-06 · Analyzed

7.5EPSS 0.008

CVE-2026-43464

net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ

Published 2026-05-08 · Analyzed

7.5EPSS 0.007

CVE-2026-31662

tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG

Published 2026-04-24 · Analyzed

7.5EPSS 0.007

CVE-2026-43057

net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

Published 2026-05-01 · Modified

7.5EPSS 0.007

CVE-2026-43373

net: ncsi: fix skb leak in error paths

Published 2026-05-08 · Analyzed

7.5EPSS 0.007

CVE-2026-31563

net: macb: Use dev_consume_skb_any() to free TX SKBs

Published 2026-04-24 · Modified

7.5EPSS 0.007

CVE-2026-31676

rxrpc: only handle RESPONSE during service challenge

Published 2026-04-25 · Modified

7.5EPSS 0.007

CVE-2026-31552

wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom

Published 2026-04-24 · Analyzed

7.5EPSS 0.007

CVE-2026-43469

xprtrdma: Decrement re_receiving on the early exit paths

Published 2026-05-08 · Analyzed

7.5EPSS 0.007

CVE-2026-43405

libceph: Use u32 for non-negative values in ceph_monmap_decode()

Published 2026-05-08 · Analyzed

7.5EPSS 0.007

CVE-2026-43099

ipv4: icmp: fix null-ptr-deref in icmp_build_probe()

Published 2026-05-06 · Modified

7.5EPSS 0.007

CVE-2026-31477

ksmbd: fix memory leaks and NULL deref in smb2_lock()

Published 2026-04-22 · Analyzed

7.5EPSS 0.007

CVE-2026-43441

net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled

Published 2026-05-08 · Analyzed

7.5EPSS 0.007

CVE-2026-46085

rxrpc: Fix rxkad crypto unalignment handling

Published 2026-05-27 · Undergoing Analysis

7.5EPSS 0.006

CVE-2026-31638

rxrpc: Only put the call ref if one was acquired

Published 2026-04-24 · Analyzed

7.5EPSS 0.006

CVE-2026-43345

net: ipa: fix event ring index not programmed for IPA v5.0+

Published 2026-05-08 · Analyzed

7.5EPSS 0.006

CVE-2026-31557

nvmet: move async event work off nvmet-wq

Published 2026-04-24 · Analyzed

7.5EPSS 0.006

CVE-2026-43199

net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query

Published 2026-05-06 · Analyzed

7.5EPSS 0.006

Linux Kernel 7.0

Security check