Vendor: microsoft

net/9p: fix double req put in p9_fd_cancelled

2026-03-31 CVE-2025-40027

net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY

2026-03-31 CVE-2022-50002

net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled

2026-03-31 CVE-2025-38039

net/mlx5e: Fix cleanup null-ptr deref on encap lock

2026-03-31 CVE-2023-53105

net/mlx5e: Harden uplink netdev access against device unbind

2026-03-31 CVE-2025-39947

net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads

2026-03-31 CVE-2025-37833

net/sched: fix use-after-free in taprio_dev_notifier

2026-03-31 CVE-2025-38087

net/sched: sch_qfq: Fix null-deref in agg_dequeue

2026-03-31 CVE-2025-40083

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

2026-03-31 CVE-2025-38052

netdevsim: Fix memory leak of nsim_dev->fa_cookie

2026-03-31 CVE-2022-49803

netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

2026-03-31 CVE-2025-39894

netfilter: ipset: fix region locking in hash types

2026-03-31 CVE-2025-37997

netfs: Fix missing xas_retry() calls in xarray iteration

2026-03-31 CVE-2022-49810

netlink: Bounds-check struct nlmsgerr creation

2026-03-31 CVE-2022-49766

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59201

nexthop: Forbid FDB status change while nexthop is in a group

2026-03-31 CVE-2025-39980

NFSD: Define a proc_layoutcommit for the FlexFiles layout type

2026-03-31 CVE-2025-40087

No QUIC certificate pinning with wolfSSL

2026-03-31 CVE-2025-5025

Nodes can bypass dynamic resource allocation authorization checks

2026-03-31 CVE-2025-4563

NTFS Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-32707

NTLM Hash Disclosure Spoofing Vulnerability

2026-03-31 CVE-2025-59185

NTLM Hash Disclosure Spoofing Vulnerability

2026-03-31 CVE-2025-59244

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-55696

Nuance Digital Engagement Platform Spoofing Vulnerability

2026-03-31 CVE-2025-47977

nvmet-tcp: don't restore null sk_state_change

2026-03-31 CVE-2025-38035

ocfs2: fix double free in user_cluster_connect()

2026-03-31 CVE-2025-40055

octeon_ep: Fix host hang issue during device reboot

2026-03-31 CVE-2025-37933

octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

2026-03-31 CVE-2025-39978

criticalMicrosoft MSRC 2026-W14

octeontx2-pf: Fix SQE threshold checking

2026-03-31 CVE-2022-49858

octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()

2026-03-31 CVE-2025-39944

openvswitch: Fix unsafe attribute parsing in output_userspace()

2026-03-31 CVE-2025-37998

orangefs: Do not truncate file size

2026-03-31 CVE-2025-38065

page_pool: avoid infinite loop to schedule delayed worker

2026-03-31 CVE-2025-37859

Panic when validating certificates with DSA public keys in crypto/x509

2026-03-31 CVE-2025-58188

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

2026-03-31 CVE-2023-53154

Parsing DER payload can cause memory exhaustion in encoding/asn1

2026-03-31 CVE-2025-58185

PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release

2026-03-31 CVE-2025-40032

PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops

2026-03-31 CVE-2025-38069

PCI: Fix reference leak in pci_register_host_bridge()

2026-03-31 CVE-2025-37836

PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

2026-03-31 CVE-2025-23161

pcmcia: Add error handling for add_interval() in do_validate_mem()

2026-03-31 CVE-2025-39920

pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result

2026-03-31 CVE-2025-37887

pds_core: make wait_context part of q_info

2026-03-31 CVE-2025-37886

pds_core: Prevent possible adminq overflow/stuck condition

2026-03-31 CVE-2025-37987

pds_core: remove write-after-free of client_id

2026-03-31 CVE-2025-37916

perf: arm_spe: Prevent overflow in PERF_IDX2OFF()

2026-03-31 CVE-2025-40081

perf: Fix hang while freeing sigtrap event

2026-03-31 CVE-2025-37747

perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init

2026-03-31 CVE-2025-37878

perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.

2026-03-31 CVE-2025-37936

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

2026-03-31 CVE-2025-40914

criticalMicrosoft MSRC 2026-W14

Perl threads have a working directory race condition where file operations may target unintended paths

2026-03-31 CVE-2025-40909

pinctrl: check the return value of pinmux_ops::get_function_name()

2026-03-31 CVE-2025-40030

ping in iputils before 20250602 allows a denial of service

2026-03-31 CVE-2025-47268

platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()

2026-03-31 CVE-2025-38077

Playwright Spoofing Vulnerability

2026-03-31 CVE-2025-59288

pm: cpupower: bench: Prevent NULL dereference on malloc failure

2026-03-31 CVE-2025-37841

PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()

2026-03-31 CVE-2025-37745

Podman: podman missing tls verification

2026-03-31 CVE-2025-6032

Possible denial of service when passing malformed data in a URL to qDecodeDataUrl

2026-03-31 CVE-2025-5455