linux

CVE-2026-43033 HIGH

crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43032 MEDIUM

NFC: pn533: bound the UART receive buffer

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43031 HIGH

net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

May 01, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-43030 HIGH

bpf: Fix regsafe() for pointers to packet

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43029 HIGH

mptcp: fix soft lockup in mptcp_recvmsg()

May 01, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-43028 HIGH

netfilter: x_tables: ensure names are nul-terminated

May 01, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-43027 HIGH

netfilter: nf_conntrack_helper: pass helper to expect cleanup

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43026 MEDIUM

netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43025 HIGH

netfilter: ctnetlink: ignore explicit helper on new expectations

May 01, 2026

CVSS 7.3

EPSS 0.00

CVE-2026-43024 MEDIUM

netfilter: nf_tables: reject immediate NF_QUEUE verdict

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43023 HIGH

Bluetooth: SCO: fix race conditions in sco_sock_connect()

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43022 MEDIUM

Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43021 MEDIUM

Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43020 HIGH

Bluetooth: MGMT: validate LTK enc_size on load

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43019 HIGH

Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43018 HIGH

Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt

May 01, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-43017 MEDIUM

Bluetooth: MGMT: validate mesh send advertising payload length

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43016 HIGH

bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43015 HIGH

net: macb: fix clk handling on PCI glue driver removal

May 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-43014 MEDIUM

net: macb: properly unregister fixed rate clocks

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43013 MEDIUM

net/mlx5: lag: Check for LAG device before creating debugfs

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43012 MEDIUM

net/mlx5: Fix switchdev mode rollback in case of failure

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43011 CRITICAL

net/x25: Fix potential double free of skb

May 01, 2026

CVSS 9.8

EPSS 0.01

CVE-2026-43010 MEDIUM

bpf: Reject sleepable kprobe_multi programs at attach time

May 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-43009 HIGH

bpf: Fix incorrect pruning due to atomic fetch precision tracking

May 01, 2026

CVSS 7.8

EPSS 0.00