Security Warnings — Week: 2026-W14

BIND's database will be slow if a very large number of RRs exist at the same name

2026-04-01 CVE-2024-1737

highMicrosoft MSRC 2026-W14

BitLocker Security Feature Bypass Vulnerability

2026-04-01 CVE-2024-38058

mediumMicrosoft MSRC 2026-W14

block: fix overflow in blk_ioctl_discard()

2026-04-01 CVE-2024-36917

mediumMicrosoft MSRC 2026-W14

block: Fix page refcounts for unaligned buffers in __bio_release_pages()

2026-04-01 CVE-2024-35826

mediumMicrosoft MSRC 2026-W14

block/ioctl: prefer different overflow check

2026-04-01 CVE-2024-41000

highMicrosoft MSRC 2026-W14

Bluetooth: Fix memory leak in hci_req_sync_complete()

2026-04-01 CVE-2024-35978

mediumMicrosoft MSRC 2026-W14

Bluetooth: L2CAP: Fix not validating setsockopt user input

2026-04-01 CVE-2024-35965

mediumMicrosoft MSRC 2026-W14

Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()

2026-04-01 CVE-2024-36013

mediumMicrosoft MSRC 2026-W14

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

2026-04-01 CVE-2024-36012

highMicrosoft MSRC 2026-W14

bluetooth/l2cap: sync sock recv cb and release

2026-04-01 CVE-2024-41062

mediumMicrosoft MSRC 2026-W14

bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()

2026-04-01 CVE-2024-39487

highMicrosoft MSRC 2026-W14

bootconfig: use memblock_free_late to free xbc memory to buddy

2026-04-01 CVE-2024-26983

highMicrosoft MSRC 2026-W14

bpf skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue

2026-04-01 CVE-2024-36938

mediumMicrosoft MSRC 2026-W14

bpf: Avoid splat in pskb_pull_reason

2026-04-01 CVE-2024-40996

highMicrosoft MSRC 2026-W14

bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

2026-04-01 CVE-2024-42161

mediumMicrosoft MSRC 2026-W14

bpf: Defer work in bpf_timer_cancel_and_free

2026-04-01 CVE-2024-41045

mediumMicrosoft MSRC 2026-W14

bpf: Fix overrunning reservations in ringbuf

2026-04-01 CVE-2024-41009

mediumMicrosoft MSRC 2026-W14

bpf: Fix remap of arena.

2026-04-01 CVE-2024-42075

mediumMicrosoft MSRC 2026-W14

bpf: Fix too early release of tcx_entry

2026-04-01 CVE-2024-41010

mediumMicrosoft MSRC 2026-W14

bpf: Guard stack limits against 32bit overflow

2026-04-01 CVE-2023-52676

mediumMicrosoft MSRC 2026-W14

bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable

2026-04-01 CVE-2024-42151

mediumMicrosoft MSRC 2026-W14

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

2026-04-01 CVE-2024-42068

mediumMicrosoft MSRC 2026-W14

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2026-04-01 CVE-2024-42067

mediumMicrosoft MSRC 2026-W14

BranchCache Remote Code Execution Vulnerability

2026-04-01 CVE-2025-21296

highMicrosoft MSRC 2026-W14

btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()

2026-04-01 CVE-2024-46841

mediumMicrosoft MSRC 2026-W14

btrfs: fix deadlock with fiemap and extent locking

2026-04-01 CVE-2024-35784

mediumMicrosoft MSRC 2026-W14

btrfs: fix information leak in btrfs_ioctl_logical_to_ino()

2026-04-01 CVE-2024-35849

highMicrosoft MSRC 2026-W14

btrfs: handle errors from btrfs_dec_ref() properly

2026-04-01 CVE-2024-46753

mediumMicrosoft MSRC 2026-W14

btrfs: lock the inode in shared mode before starting fiemap

2026-04-01 CVE-2023-52737

mediumMicrosoft MSRC 2026-W14

btrfs: make sure that WRITTEN is set on all metadata blocks

2026-04-01 CVE-2024-35949

highMicrosoft MSRC 2026-W14

btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations

2026-04-01 CVE-2024-35956

mediumMicrosoft MSRC 2026-W14

btrfs: scrub: handle RST lookup error correctly

2026-04-01 CVE-2024-41067

mediumMicrosoft MSRC 2026-W14

btrfs: skip reserved bytes warning on unmount after log cleanup failure

2026-04-01 CVE-2022-48833

mediumMicrosoft MSRC 2026-W14

btrfs: zoned: fix use-after-free due to race with dev replace

2026-04-01 CVE-2024-39496

highMicrosoft MSRC 2026-W14

cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()

2026-04-01 CVE-2024-41057

highMicrosoft MSRC 2026-W14

cachefiles: fix slab-use-after-free in fscache_withdraw_volume()

2026-04-01 CVE-2024-41058

highMicrosoft MSRC 2026-W14

can: mcp251xfd: fix infinite loop when xmit fails

2026-04-01 CVE-2024-41088

mediumMicrosoft MSRC 2026-W14

ceph: blocklist the kclient when receiving corrupted snap trace

2026-04-01 CVE-2023-52732

mediumMicrosoft MSRC 2026-W14

Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass

2026-04-01 CVE-2024-7344

mediumMicrosoft MSRC 2026-W14

CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability

2026-04-01 CVE-2024-3596

highMicrosoft MSRC 2026-W14

clk: Fix clk_core_get NULL dereference

2026-04-01 CVE-2024-27038

mediumMicrosoft MSRC 2026-W14

clk: mediatek: Do a runtime PM get on controllers during probe

2026-04-01 CVE-2024-27002

mediumMicrosoft MSRC 2026-W14

clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays

2026-04-01 CVE-2024-26969

mediumMicrosoft MSRC 2026-W14

clk: zynq: Prevent null pointer dereference caused by kmalloc failure

2026-04-01 CVE-2024-27037

mediumMicrosoft MSRC 2026-W14

Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will

2026-04-01 CVE-2024-32020

lowMicrosoft MSRC 2026-W14

Containers/image: digest type does not guarantee valid type

2026-04-01 CVE-2024-3727

highMicrosoft MSRC 2026-W14

cPanel cPanel/WHM: Schwachstelle ermöglicht Denial of Service

2026-04-01 WID-SEC-2025-2081

mediumBSI 2026-W14

cPanel cPanel/WHM: Schwachstelle ermöglicht Manipulation von Dateien

2026-04-01 WID-SEC-2025-2012

mediumBSI 2026-W14

cPanel cPanel/WHM: Schwachstelle ermöglicht Privilegieneskalation

2026-04-01 WID-SEC-2025-2710

highBSI 2026-W14

cpu/hotplug: Don't offline the last non-isolated CPU

2026-04-01 CVE-2023-52831

mediumMicrosoft MSRC 2026-W14

cpufreq: amd-pstate: fix memory leak on CPU EPP exit

2026-04-01 CVE-2024-40997

mediumMicrosoft MSRC 2026-W14

crypto: aeadcipher - zeroize key buffer after use

2026-04-01 CVE-2024-42229

mediumMicrosoft MSRC 2026-W14

crypto: hisilicon/sec - Fix memory leak for sec resource release

2026-04-01 CVE-2024-41002

mediumMicrosoft MSRC 2026-W14

crypto: iaa - Fix nr_cpus < nr_iaa case

2026-04-01 CVE-2024-26945

highMicrosoft MSRC 2026-W14

crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak

2026-04-01 CVE-2024-39493

mediumMicrosoft MSRC 2026-W14

crypto: starfive - Do not free stack buffer

2026-04-01 CVE-2024-39478

mediumMicrosoft MSRC 2026-W14

crypto: sun8i-ce - Fix use after free in unprepare

2026-04-01 CVE-2024-27061

highMicrosoft MSRC 2026-W14

CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened.

2026-04-01 CVE-2024-6612

mediumMicrosoft MSRC 2026-W14

CUPS: Mehrere Schwachstellen

2026-04-01 WID-SEC-2026-0947

mediumBSI 2026-W14

cxl/region: Avoid null pointer dereference in region lookup

2026-04-01 CVE-2024-41084

mediumMicrosoft MSRC 2026-W14