linux

CVE-2026-45839 HIGH

bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()

May 27, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-45838 MEDIUM

bpf: fix end-of-list detection in cgroup_storage_get_next_key()

May 27, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-45837 HIGH

bpf: Fix use-after-free in arena_vm_close on fork

May 27, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-45836 MEDIUM

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

May 26, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-45835 MEDIUM

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()

May 26, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-45834 MEDIUM

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

May 26, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-46300 HIGH

net: skbuff: propagate shared-frag marker through frag-transfer helpers

May 23, 2026

CVSS 7.8

EPSS 0.04

CVE-2026-43503 HIGH

net: skbuff: preserve shared-frag marker during coalescing

May 23, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-43502 HIGH

net/rds: handle zerocopy send cleanup before the message is queued

May 21, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43501 CRITICAL

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

May 21, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-43499 HIGH

rtmutex: Use waiter::task instead of current in remove_waiter()

May 21, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43498 HIGH

accel/ivpu: Disallow re-exporting imported GEM objects

May 21, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43497 HIGH

fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free

May 21, 2026

CVSS 7.3

EPSS 0.00

CVE-2026-43496 MEDIUM

net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked

May 21, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43495 HIGH

net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler

May 21, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-43494 HIGH

net/rds: reset op_nents when zerocopy page pin fails

May 21, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43493 CRITICAL

crypto: pcrypt - Fix handling of MAY_BACKLOG requests

May 19, 2026

CVSS 9.8

EPSS 0.01

CVE-2026-43492 MEDIUM

lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()

May 19, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43491 MEDIUM

net: qrtr: ns: Limit the maximum server registration per node

May 19, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-46333 HIGH

ptrace: slightly saner 'get_dumpable()' logic

May 15, 2026

CVSS 7.1

EPSS 0.01

CVE-2026-43490 HIGH

ksmbd: validate inherited ACE SID length

May 15, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-43489 MEDIUM

liveupdate: luo_file: remember retrieve() status

May 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43488 MEDIUM

usb: xhci: Prevent interrupt storm on host controller error (HCE)

May 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43487 MEDIUM

ata: libata-core: Disable LPM on ST1000DM010-2EP102

May 13, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43486 MEDIUM

arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults

May 13, 2026

CVSS 5.5

EPSS 0.00