linux

CVE-2026-31712 HIGH

ksmbd: require minimum ACE size in smb_check_perm_dacl()

May 01, 2026

CVSS 8.3

EPSS 0.00

CVE-2026-31711 HIGH

smb: server: fix active_num_conn leak on transport allocation failure

May 01, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-31710 MEDIUM

smb: client: fix dir separator in SMB1 UNIX mounts

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31709 HIGH

smb: client: validate the whole DACL before rewriting it in cifsacl

May 01, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-31708 HIGH

smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path

May 01, 2026

CVSS 8.1

EPSS 0.00

CVE-2026-31707 HIGH

ksmbd: validate response sizes in ipc_validate_msg()

May 01, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-31706 HIGH

ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

May 01, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-31705 CRITICAL

ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment

May 01, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-31704 MEDIUM

ksmbd: use check_add_overflow() to prevent u16 DACL size overflow

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31703 HIGH

writeback: Fix use after free in inode_switch_wbs_work_fn()

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31702 HIGH

f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31701 MEDIUM

ALSA: caiaq: take a reference on the USB device in create_card()

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31700 HIGH

net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31699 HIGH

crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed

May 01, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-31698 HIGH

crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed

May 01, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-31697 HIGH

crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed

May 01, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-31696 HIGH

rxrpc: Fix missing validation of ticket length in non-XDR key preparsing

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31695 HIGH

wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31694 HIGH

fuse: reject oversized dirents in page cache

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31693 HIGH

cifs: some missing initializations on replay

Apr 30, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31787 HIGH

xen/privcmd: fix double free via VMA splitting

Apr 30, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31786 HIGH

Buffer overflow in drivers/xen/sys-hypervisor.c

Apr 30, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31692 MEDIUM

rtnetlink: add missing netlink_ns_capable() check for peer netns

Apr 30, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31691 MEDIUM

igb: remove napi_synchronize() in igb_down()

Apr 27, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31690 HIGH

firmware: thead: Fix buffer overflow and use standard endian macros

Apr 27, 2026

CVSS 7.8

EPSS 0.00