Source: msrc

atm: lec: fix null-ptr-deref in lec_arp_clear_vccs

2026-04-06 CVE-2026-23286

bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded

2026-04-06 CVE-2026-23310

can: mcp251x: fix deadlock in error path of mcp251x_open

2026-04-06 CVE-2026-23357

can: usb: f81604: correctly anchor the urb in the read bulk callback

2026-04-06 CVE-2026-23347

can: usb: f81604: handle short interrupt urb messages properly

2026-04-06 CVE-2026-23334

drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()

2026-04-06 CVE-2026-23356

drbd: fix null-pointer dereference on local read error

2026-04-06 CVE-2026-23285

drm/vmwgfx: Return the correct value in vmw_translate_ptr functions

2026-04-06 CVE-2026-23317

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

2026-04-06 CVE-2026-1519

IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()

2026-04-06 CVE-2026-23289

ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()

2026-04-06 CVE-2026-23304

irqchip/sifive-plic: Fix frozen interrupt due to affinity setting

2026-04-06 CVE-2026-23287

ksmbd: Compare MACs in constant time

2026-04-06 CVE-2026-23364

Libssh: buffer underflow in ssh_get_hexa() on invalid input

2026-04-06 CVE-2026-0966

Libssh: improper sanitation of paths received from scp servers

2026-04-06 CVE-2026-0964

Libssh: libssh: denial of service due to malformed sftp message

2026-04-06 CVE-2026-0968

Libssh: libssh: denial of service via inefficient regular expression processing

2026-04-06 CVE-2026-0967

Mariner

2026-04-06 CVE-2025-69720

criticalMicrosoft MSRC 2026-W15

Mariner

2026-04-06 CVE-2026-21710

Mariner

2026-04-06 CVE-2026-21711

Mariner

2026-04-06 CVE-2026-21713

Mariner

2026-04-06 CVE-2026-21716

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-06 CVE-2026-0385

net: phy: register phy led_triggers during probe to avoid AB-BA deadlock

2026-04-06 CVE-2026-23368

net: usb: kaweth: validate USB endpoints

2026-04-06 CVE-2026-23312

net: usb: pegasus: validate USB endpoints

2026-04-06 CVE-2026-23290

net/sched: ets: fix divide by zero in the offload path

2026-04-06 CVE-2026-23379

nfc: pn533: properly drop the usb interface reference on disconnect

2026-04-06 CVE-2026-23291

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

2026-04-06 CVE-2025-66038

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

2026-04-06 CVE-2025-66215

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

2026-04-06 CVE-2025-49010

P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters

2026-04-06 CVE-2026-2100

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

2026-04-06 CVE-2026-23370

scsi: core: Fix refcount leak for tagset_refcnt

2026-04-06 CVE-2026-23296

scsi: target: Fix recursive locking in __configfs_open_file()

2026-04-06 CVE-2026-23292

smb: client: Don't log plaintext credentials in cifs_set_cifscreds

2026-04-06 CVE-2026-23303

wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()

2026-04-06 CVE-2026-23336

wifi: libertas: fix use-after-free in lbs_free_adapter()

2026-04-06 CVE-2026-23281

wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()

2026-04-06 CVE-2026-23279

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

2026-04-06 CVE-2026-23315

wifi: radiotap: reject radiotap with unknown bits

2026-04-06 CVE-2026-23367

Addressable has a Regular Expression Denial of Service in Addressable templates

2026-04-02 CVE-2026-35611

apparmor: fix differential encoding verification

2026-04-02 CVE-2026-23409

apparmor: Fix double free of ns_name in aa_replace_profiles()

2026-04-02 CVE-2026-23408

apparmor: fix memory leak in verify_header

2026-04-02 CVE-2026-23403

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

2026-04-02 CVE-2026-23407

apparmor: fix race between freeing data and fs accessing it

2026-04-02 CVE-2026-23411

apparmor: fix race on rawdata dereference

2026-04-02 CVE-2026-23410

apparmor: fix side-effect bug in match_char() macro usage

2026-04-02 CVE-2026-23406

apparmor: fix: limit the number of levels of policy namespaces

2026-04-02 CVE-2026-23405

apparmor: replace recursive profile removal with iterative approach

2026-04-02 CVE-2026-23404

Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon

2026-04-02 CVE-2026-34933

Azure AI Foundry Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-32213

criticalMicrosoft MSRC 2026-W14

Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-26135

criticalMicrosoft MSRC 2026-W14

Azure Databricks Elevation of Privilege Vulnerability

2026-04-02 CVE-2026-33107

criticalMicrosoft MSRC 2026-W14

Azure MCP Server Information Disclosure Vulnerability

2026-04-02 CVE-2026-32211

criticalMicrosoft MSRC 2026-W14

Azure SRE Agent Information Disclosure Vulnerability

2026-04-02 CVE-2026-32173

Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

2026-04-02 CVE-2026-31408

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

2026-04-02 CVE-2026-33810