linux

CVE-2026-43384 CRITICAL

net/tcp-ao: Fix MAC comparison to be constant-time

May 08, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-43383 CRITICAL

net/tcp-md5: Fix MAC comparison to be constant-time

May 08, 2026

CVSS 9.4

EPSS 0.00

CVE-2026-43382 MEDIUM

batman-adv: Avoid double-rtnl_lock ELP metric worker

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43381 MEDIUM

nouveau/dpcd: return EBUSY for aux xfer if the device is asleep

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43380 HIGH

hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43379 CRITICAL

ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()

May 08, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-43378 CRITICAL

Linux - Use-After-Free in SMB2 Open Function

May 08, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-43377 HIGH

ksmbd: Don't log keys in SMB3 signing and encryption key generation

May 08, 2026

CVSS 8.1

EPSS 0.00

CVE-2026-43376 CRITICAL

ksmbd: fix use-after-free by using call_rcu() for oplock_info

May 08, 2026

CVSS 9.8

EPSS 0.00

CVE-2026-43375 MEDIUM

net: mctp: fix device leak on probe failure

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43374 HIGH

net: nexthop: fix percpu use-after-free in remove_nh_grp_entry

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43373 HIGH

net: ncsi: fix skb leak in error paths

May 08, 2026

CVSS 7.5

EPSS 0.01

CVE-2026-43372 MEDIUM

net: dsa: microchip: Fix error path in PTP IRQ setup

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43371 MEDIUM

net: macb: Shuffle the tx ring before enabling tx

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43370 HIGH

Linux - Use-After-Free in drm/amdgpu VM Acquire

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43369 MEDIUM

Linux 6.18.16-6.18.19 and 6.19.6-6.19.9 - NULL Pointer Dereference in amdgpu_device_fini_hw

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43368 HIGH

drm/i915: Fix potential overflow of shmem scatterlist length

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43367 MEDIUM

drm/amd: Fix a few more NULL pointer dereference in device cleanup

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43366 HIGH

io_uring/kbuf: check if target buffer list is still legacy on recycle

May 08, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43365 HIGH

xfs: fix undersized l_iclog_roundoff values

May 08, 2026

CVSS 8.2

EPSS 0.00

CVE-2026-43364 MEDIUM

ublk: fix NULL pointer dereference in ublk_ctrl_set_size()

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43363 MEDIUM

x86/apic: Disable x2apic on resume if the kernel expects so

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43362 HIGH

smb: client: fix in-place encryption corruption in SMB2_write()

May 08, 2026

CVSS 8.1

EPSS 0.00

CVE-2026-43361 MEDIUM

btrfs: fix transaction abort when snapshotting received subvolumes

May 08, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43360 MEDIUM

btrfs: fix transaction abort on file creation due to name hash collision

May 08, 2026

CVSS 5.5

EPSS 0.00