linux

CVE-2026-31438 MEDIUM

netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators

Apr 22, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31437 MEDIUM

netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry

Apr 22, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31436 CRITICAL

dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()

Apr 22, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-31435 HIGH

netfs: Fix read abandonment during retry

Apr 22, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-31434 MEDIUM

btrfs: fix leak of kobject name for sub-group space_info

Apr 22, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31433 HIGH

ksmbd: fix potencial OOB in get_file_all_info() for compound requests

Apr 22, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-31432 HIGH

ksmbd: fix OOB write in QUERY_INFO for compound requests

Apr 22, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-31431 HIGH KEV

crypto: algif_aead - Revert to operating out-of-place

Apr 22, 2026

CVSS 7.8

EPSS 0.03

CVE-2026-31430 HIGH

X.509: Fix out-of-bounds access when parsing extensions

Apr 20, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-31429 MEDIUM

net: skb: fix cross-cache free of KFENCE-allocated skb head

Apr 20, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31428 MEDIUM

netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31427 MEDIUM

netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31426 HIGH

ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

Apr 13, 2026

CVSS 7.0

EPSS 0.00

CVE-2026-31425 MEDIUM

rds: ib: reject FRMR registration before IB connection is established

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31424 MEDIUM

netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31423 MEDIUM

net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31422 MEDIUM

net/sched: cls_flow: fix NULL pointer dereference on shared blocks

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31421 MEDIUM

net/sched: cls_fw: fix NULL pointer dereference on shared blocks

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31420 MEDIUM

bridge: mrp: reject zero test interval to avoid OOM panic

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31419 HIGH

net: bonding: fix use-after-free in bond_xmit_broadcast()

Apr 13, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31418 MEDIUM

netfilter: ipset: drop logically empty buckets in mtype_del

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31417 HIGH

net/x25: Fix overflow when accumulating packets

Apr 13, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-31416 MEDIUM

netfilter: nfnetlink_log: account for netlink header size

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31415 MEDIUM

ipv6: avoid overflows in ip6_datagram_send_ctl()

Apr 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31414 CRITICAL

netfilter: nf_conntrack_expect: use expect->helper

Apr 13, 2026

CVSS 9.8

EPSS 0.00