linux

CVE-2026-31413 HIGH

bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR

Apr 12, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31412 MEDIUM

usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()

Apr 10, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31411 MEDIUM

net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

Apr 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31410 MEDIUM

ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

Apr 06, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31409 HIGH

ksmbd: unset conn->binding on failed binding request

Apr 06, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-31408 HIGH

Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

Apr 06, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-31407 HIGH

netfilter: conntrack: add missing netlink policy validations

Apr 06, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-31406 HIGH

xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini()

Apr 06, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31405 CRITICAL

media: dvb-net: fix OOB access in ULE extension header tables

Apr 06, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-31404 HIGH

NFSD: Defer sub-object cleanup in export put callbacks

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31403 HIGH

NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31402 CRITICAL

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

Apr 03, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-31401 HIGH

Linux - Out-of-bounds Write in HID-BPF Buffer Handling

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31400 MEDIUM

sunrpc: fix cache_request leak in cache_release

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31399 HIGH

nvdimm/bus: Fix potential use after free in asynchronous initialization

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31398 HIGH

mm/rmap: fix incorrect pte restoration for lazyfree folios

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31397 HIGH

mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31396 HIGH

Linux - Use-After-Free in PTP Clock via get_ts_info ethtool Call

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-31395 HIGH

bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler

Apr 03, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-31394 MEDIUM

mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-31393 HIGH

Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access

Apr 03, 2026

CVSS 8.1

EPSS 0.00

CVE-2026-31392 HIGH

smb: client: fix krb5 mount with username option

Apr 03, 2026

CVSS 8.1

EPSS 0.00

CVE-2026-31391 ANALYSIS PENDING

crypto: atmel-sha204a - Fix OOM ->tfm_count leak

Apr 03, 2026

EPSS 0.00

CVE-2026-31390 ANALYSIS PENDING

Linux Kernel drm/xe - xe_vm_madvise_ioctl Memory Leak

Apr 03, 2026

EPSS 0.00

CVE-2026-31389 HIGH

spi: fix use-after-free on controller registration failure

Apr 03, 2026

CVSS 7.8

EPSS 0.00