Vulnerabilities

Linux Kernel 7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

827CVEs

CVE-2026-31638

rxrpc: Only put the call ref if one was acquired

Published 2026-04-24 · Analyzed

7.5EPSS 0.006

CVE-2026-43254

ovpn: tcp - fix packet extraction from stream

Published 2026-05-06 · Analyzed

7.5EPSS 0.006

CVE-2026-43347

arm64: dts: qcom: monaco: Reserve full Gunyah metadata region

Published 2026-05-08 · Analyzed

7.5EPSS 0.006

CVE-2026-43462

net: spacemit: Fix error handling in emac_tx_mem_map()

Published 2026-05-08 · Analyzed

7.5EPSS 0.006

CVE-2026-43164

udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb().

Published 2026-05-06 · Analyzed

7.5EPSS 0.006

CVE-2026-31640

rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial

Published 2026-04-24 · Analyzed

7.5EPSS 0.006

CVE-2026-43101

ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

Published 2026-05-06 · Analyzed

7.5EPSS 0.006

CVE-2026-43055

scsi: target: file: Use kzalloc_flex for aio_cmd

Published 2026-05-01 · Analyzed

7.5EPSS 0.006

CVE-2026-43031

net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

Published 2026-05-01 · Analyzed

7.5EPSS 0.006

CVE-2026-43336

lib/crypto: chacha: Zeroize permuted_state before it leaves scope

Published 2026-05-08 · Analyzed

7.5EPSS 0.006

CVE-2026-31467

erofs: add GFP_NOIO in the bio completion if needed

Published 2026-04-22 · Analyzed

7.5EPSS 0.005

CVE-2026-43385

net: Fix rcu_tasks stall in threaded busypoll

Published 2026-05-08 · Analyzed

7.5EPSS 0.005

CVE-2026-43029

mptcp: fix soft lockup in mptcp_recvmsg()

Published 2026-05-01 · Analyzed

7.5EPSS 0.005

CVE-2026-23451

bonding: prevent potential infinite loop in bond_header_parse()

Published 2026-04-03 · Modified

7.5EPSS 0.004

CVE-2026-23453

net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode

Published 2026-04-03 · Analyzed

7.5EPSS 0.003

CVE-2026-23414

tls: Purge async_hold in tls_decrypt_async_wait()

Published 2026-04-02 · Modified

7.5EPSS 0.002

CVE-2026-23440

net/mlx5e: Fix race condition during IPSec ESN update

Published 2026-04-03 · Modified

7.5EPSS 0.002

CVE-2026-23419

net/rds: Fix circular locking dependency in rds_tcp_tune

Published 2026-04-03 · Modified

7.5EPSS 0.002

CVE-2026-23364

ksmbd: Compare MACs in constant time

Published 2026-03-25 · Modified

7.4EPSS 0.004

CVE-2026-43025

netfilter: ctnetlink: ignore explicit helper on new expectations

Published 2026-05-01 · Modified

7.3EPSS 0.002

CVE-2026-43459

ASoC: soc-core: flush delayed work before removing DAIs and widgets

Published 2026-05-08 · Analyzed

7.3EPSS 0.002

CVE-2026-31569

LoongArch: KVM: Handle the case that EIOINTC's coremap is empty

Published 2026-04-24 · Analyzed

7.3EPSS 0.002

CVE-2026-43062

Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()

Published 2026-05-05 · Analyzed

7.1EPSS 0.003

CVE-2026-43166

erofs: fix interlaced plain identification for encoded extents

Published 2026-05-06 · Analyzed

7.1EPSS 0.002

CVE-2026-43450

netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

Published 2026-05-08 · Analyzed

7.1EPSS 0.002

CVE-2026-43427

usb: class: cdc-wdm: fix reordering issue in read code path

Published 2026-05-08 · Analyzed

7.1EPSS 0.002

CVE-2026-43040

net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak

Published 2026-05-01 · Modified

7.1EPSS 0.002

CVE-2026-31674

netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()

Published 2026-04-25 · Modified

7.1EPSS 0.002

CVE-2026-43028

netfilter: x_tables: ensure names are nul-terminated

Published 2026-05-01 · Modified

7.1EPSS 0.002

CVE-2026-43442

io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops

Published 2026-05-08 · Analyzed

7.1EPSS 0.002

CVE-2026-43052

wifi: mac80211: check tdls flag in ieee80211_tdls_oper

Published 2026-05-01 · Modified

7.1EPSS 0.002

CVE-2026-31766

drm/amdgpu: validate doorbell_offset in user queue creation

Published 2026-05-01 · Analyzed

7.1EPSS 0.002

CVE-2026-31679

openvswitch: validate MPLS set/set_masked payload length

Published 2026-04-25 · Analyzed

7.1EPSS 0.002

CVE-2026-43453

netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()

Published 2026-05-08 · Analyzed

7.1EPSS 0.002

CVE-2026-43449

nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set

Published 2026-05-08 · Analyzed

7.1EPSS 0.002

CVE-2026-43386

staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie

Published 2026-05-08 · Analyzed

7.1EPSS 0.002

CVE-2026-31407

netfilter: conntrack: add missing netlink policy validations

Published 2026-04-06 · Modified

7.1EPSS 0.002

CVE-2026-31778

ALSA: caiaq: fix stack out-of-bounds read in init_card

Published 2026-05-01 · Analyzed

7.1EPSS 0.002

CVE-2026-31470

virt: tdx-guest: Fix handling of host controlled 'quote' buffer length

Published 2026-04-22 · Analyzed

7.1EPSS 0.002

CVE-2026-31774

io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()

Published 2026-05-01 · Analyzed

7.1EPSS 0.002

Linux Kernel 7.0

Security check