linux

CVE-2026-43455 MEDIUM

mctp: route: hold key->lock in mctp_flow_prepare_output()

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43454 HIGH

netfilter: nf_tables: Fix for duplicate device in netdev hooks

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43453 HIGH

netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()

May 08, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-43452 HIGH

netfilter: x_tables: guard option walkers against 1-byte tail reads

May 08, 2026

CVSS 8.2

EPSS 0.00

CVE-2026-43451 MEDIUM

netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43450 HIGH

netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

May 08, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-43449 HIGH

nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set

May 08, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-43448 MEDIUM

nvme-pci: Fix race bug in nvme_poll_irqdisable()

May 08, 2026

CVSS 4.7

EPSS 0.00

CVE-2026-43447 HIGH

iavf: fix PTP use-after-free during reset

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43446 MEDIUM

accel/amdxdna: Fix runtime suspend deadlock when there is pending job

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43445 MEDIUM

e1000/e1000e: Fix leak in DMA error cleanup

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43444 MEDIUM

drm/amdkfd: Unreserve bo if queue update failed

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43443 MEDIUM

ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43442 HIGH

io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops

May 08, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-43441 HIGH

net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled

May 08, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-43440 HIGH

net/mana: Null service_wq on setup error to prevent double destroy

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43439 MEDIUM

cgroup: fix race between task migration and iteration

May 08, 2026

CVSS 4.7

EPSS 0.00

CVE-2026-43438 HIGH

sched_ext: Remove redundant css_put() in scx_cgroup_init()

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43437 HIGH

ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43436 MEDIUM

ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43435 ANALYSIS PENDING

rust_binder: fix oneway spam detection

May 08, 2026

EPSS 0.00

CVE-2026-43434 HIGH

rust_binder: check ownership before using vma

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43433 HIGH

rust_binder: avoid reading the written value in offsets array

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43432 MEDIUM

usb: xhci: Fix memory leak in xhci_disable_slot()

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43431 MEDIUM

xhci: Fix NULL pointer dereference when reading portli debugfs files

May 08, 2026

CVSS 5.5

EPSS 0.00