Vulnerabilities

Linux Kernel 7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

827CVEs

CVE-2026-31402

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

Published 2026-04-03 · Modified

9.8EPSS 0.009

CVE-2026-43185

ksmbd: fix signededness bug in smb_direct_prepare_negotiation()

Published 2026-05-06 · Analyzed

9.8EPSS 0.006

CVE-2026-43011

net/x25: Fix potential double free of skb

Published 2026-05-01 · Modified

9.8EPSS 0.006

CVE-2026-43037

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Published 2026-05-01 · Modified

9.8EPSS 0.006

CVE-2026-23450

net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

Published 2026-04-03 · Modified

9.8EPSS 0.006

CVE-2026-31405

media: dvb-net: fix OOB access in ULE extension header tables

Published 2026-04-06 · Analyzed

9.8EPSS 0.006

CVE-2026-31637

rxrpc: reject undecryptable rxkad response tickets

Published 2026-04-24 · Modified

9.8EPSS 0.005

CVE-2026-31478

ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()

Published 2026-04-22 · Analyzed

9.8EPSS 0.005

CVE-2026-23240

tls: Fix race condition in tls_sw_cancel_work_tx()

Published 2026-03-10 · Analyzed

9.8EPSS 0.005

CVE-2026-43208

net: do not pass flow_id to set_rps_cpu()

Published 2026-05-06 · Analyzed

9.8EPSS 0.005

CVE-2026-31633

rxrpc: Fix integer overflow in rxgk_verify_response()

Published 2026-04-24 · Analyzed

9.8EPSS 0.005

CVE-2026-31649

net: stmmac: fix integer underflow in chain mode

Published 2026-04-24 · Modified

9.8EPSS 0.005

CVE-2026-31669

mptcp: fix slab-use-after-free in __inet_lookup_established

Published 2026-04-24 · Modified

9.8EPSS 0.005

CVE-2026-43384

net/tcp-ao: Fix MAC comparison to be constant-time

Published 2026-05-08 · Analyzed

9.8EPSS 0.005

CVE-2026-31436

dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()

Published 2026-04-22 · Analyzed

9.8EPSS 0.005

CVE-2026-43402

kthread: consolidate kthread exit paths to prevent use-after-free

Published 2026-05-08 · Analyzed

9.8EPSS 0.005

CVE-2026-31444

ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()

Published 2026-04-22 · Analyzed

9.8EPSS 0.005

CVE-2026-43376

ksmbd: fix use-after-free by using call_rcu() for oplock_info

Published 2026-05-08 · Analyzed

9.8EPSS 0.004

CVE-2026-43379

ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()

Published 2026-05-08 · Analyzed

9.8EPSS 0.004

CVE-2026-31668

seg6: separate dst_cache for input and output paths in seg6 lwtunnel

Published 2026-04-24 · Analyzed

9.8EPSS 0.004

CVE-2026-43465

net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ

Published 2026-05-08 · Analyzed

9.8EPSS 0.004

CVE-2026-43341

net/ipv6: ioam6: prevent schema length wraparound in trace fill

Published 2026-05-08 · Modified

9.8EPSS 0.004

CVE-2026-31414

netfilter: nf_conntrack_expect: use expect->helper

Published 2026-04-13 · Modified

9.8EPSS 0.004

CVE-2026-31657

batman-adv: hold claim backbone gateways by reference

Published 2026-04-24 · Modified

9.8EPSS 0.004

CVE-2026-31659

batman-adv: reject oversized global TT response buffers

Published 2026-04-24 · Analyzed

9.8EPSS 0.004

CVE-2026-31533

net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

Published 2026-04-23 · Modified

9.8EPSS 0.004

CVE-2026-43414

scsi: qla2xxx: Completely fix fcport double free

Published 2026-05-08 · Analyzed

9.8EPSS 0.004

CVE-2026-31501

net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path

Published 2026-04-22 · Analyzed

9.8EPSS 0.004

CVE-2026-31463

iomap: fix invalid folio access when i_blkbits differs from I/O granularity

Published 2026-04-22 · Analyzed

9.8EPSS 0.004

CVE-2026-23428

ksmbd: fix use-after-free of share_conf in compound request

Published 2026-04-03 · Modified

9.8EPSS 0.003

CVE-2026-43378

smb: server: fix use-after-free in smb2_open()

Published 2026-05-08 · Modified

9.8EPSS 0.003

CVE-2026-43039

net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch

Published 2026-05-01 · Analyzed

9.8EPSS 0.003

CVE-2026-43198

tcp: fix potential race in tcp_v6_syn_recv_sock()

Published 2026-05-06 · Modified

9.8EPSS 0.003

CVE-2026-23427

ksmbd: fix use-after-free in durable v2 replay of active file handles

Published 2026-04-03 · Modified

9.8EPSS 0.003

CVE-2026-43038

ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

Published 2026-05-01 · Modified

9.8EPSS 0.003

CVE-2026-43383

net/tcp-md5: Fix MAC comparison to be constant-time

Published 2026-05-08 · Modified

9.4EPSS 0.004

CVE-2026-31448

ext4: avoid infinite loops caused by residual data

Published 2026-04-22 · Modified

9.4EPSS 0.004

CVE-2026-43114

netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

Published 2026-05-06 · Modified

9.4EPSS 0.004

CVE-2026-31685

netfilter: ip6t_eui64: reject invalid MAC header for all packets

Published 2026-04-25 · Modified

9.4EPSS 0.003

CVE-2026-23455

netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()

Published 2026-04-03 · Modified

9.1EPSS 0.013

Linux Kernel 7.0

Security check