linux

CVE-2026-23448 HIGH

net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23447 HIGH

net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23446 MEDIUM

net: usb: aqc111: Do not perform PM inside suspend callback

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23445 HIGH

igc: fix page fault in XDP TX timestamps handling

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23444 HIGH

wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23443 MEDIUM

ACPI: processor: Fix previous acpi_processor_errata_piix4() fix

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23442 MEDIUM

ipv6: add NULL checks for idev in SRv6 paths

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23441 MEDIUM

net/mlx5e: Prevent concurrent access to IPSec ASO context

Apr 03, 2026

CVSS 4.7

EPSS 0.00

CVE-2026-23440 HIGH

net/mlx5e: Fix race condition during IPSec ESN update

Apr 03, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-23439 MEDIUM

udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23438 MEDIUM

net: mvpp2: guard flow control update with global_tx_fc in buffer switching

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23437 HIGH

net: shaper: protect late read accesses to the hierarchy

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23436 MEDIUM

net: shaper: protect from late creation of hierarchy

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23435 MEDIUM

perf/x86: Move event pointer setup earlier in x86_pmu_enable()

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23434 HIGH

mtd: rawnand: serialize lock/unlock against other NAND operations

Apr 03, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-23433 MEDIUM

arm_mpam: Fix null pointer dereference when restoring bandwidth counters

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23432 HIGH

mshv: Fix use-after-free in mshv_map_user_memory error path

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23431 MEDIUM

spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23430 MEDIUM

drm/vmwgfx: Don't overwrite KMS surface dirty tracker

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23429 HIGH

iommu/sva: Fix crash in iommu_sva_unbind_device()

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23428 CRITICAL

ksmbd: fix use-after-free of share_conf in compound request

Apr 03, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-23427 CRITICAL

ksmbd: fix use-after-free in durable v2 replay of active file handles

Apr 03, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-23426 MEDIUM

drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23425 HIGH

KVM: arm64: Fix ID register initialization for non-protected pKVM guests

Apr 03, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-23424 HIGH

accel/amdxdna: Validate command buffer payload count

Apr 03, 2026

CVSS 7.1

EPSS 0.00