linux

CVE-2026-23426 MEDIUM

drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23425 HIGH

KVM: arm64: Fix ID register initialization for non-protected pKVM guests

Apr 03, 2026

CVSS 8.8

EPSS 0.00

CVE-2026-23424 HIGH

accel/amdxdna: Validate command buffer payload count

Apr 03, 2026

CVSS 7.1

EPSS 0.00

CVE-2026-23423 MEDIUM

btrfs: free pages on error in btrfs_uring_read_extent()

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23422 HIGH

dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

Apr 03, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23421 MEDIUM

drm/xe/configfs: Free ctx_restore_mid_bb in release

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23420 MEDIUM

wifi: wlcore: Fix a locking bug

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23419 HIGH

net/rds: Fix circular locking dependency in rds_tcp_tune

Apr 03, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-23418 MEDIUM

Linux Kernel drm/xe reg_sr - xa_store Failure Memory Leak

Apr 03, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23417 MEDIUM

bpf: Fix constant blinding for PROBE_MEM32 stores

Apr 02, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23416 MEDIUM

mm/mseal: update VMA end correctly on merge

Apr 02, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23415 HIGH

futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

Apr 02, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23414 HIGH

tls: Purge async_hold in tls_decrypt_async_wait()

Apr 02, 2026

CVSS 7.5

EPSS 0.00

CVE-2026-23413 HIGH

clsact: Fix use-after-free in init/destroy rollback asymmetry

Apr 02, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23412 HIGH

netfilter: bpf: defer hook memory release until rcu readers are done

Apr 02, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23411 HIGH

apparmor: fix race between freeing data and fs accessing it

Apr 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23410 HIGH

apparmor: fix race on rawdata dereference

Apr 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23409 MEDIUM

apparmor: fix differential encoding verification

Apr 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23408 HIGH

apparmor: Fix double free of ns_name in aa_replace_profiles()

Apr 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23407 HIGH

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

Apr 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23406 HIGH

apparmor: fix side-effect bug in match_char() macro usage

Apr 01, 2026

CVSS 7.8

EPSS 0.00

CVE-2026-23405 MEDIUM

apparmor: fix: limit the number of levels of policy namespaces

Apr 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23404 MEDIUM

apparmor: replace recursive profile removal with iterative approach

Apr 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23403 MEDIUM

apparmor: fix memory leak in verify_header

Apr 01, 2026

CVSS 5.5

EPSS 0.00

CVE-2026-23402 MEDIUM

KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE

Apr 01, 2026

CVSS 5.5

EPSS 0.00