Vendor: microsoft

net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels

2026-05-11 CVE-2025-71285

net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect

2026-05-11 CVE-2025-38385

net: use dst_dev_rcu() in sk_setup_caps()

2026-05-11 CVE-2025-40170

net: use skb_header_pointer() for TCPv4 GSO frag_off check

2026-05-11 CVE-2026-43036

net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query

2026-05-11 CVE-2026-43199

net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

2026-05-11 CVE-2026-31700

netconsole: avoid OOB reads, msg is not nul-terminated

2026-05-11 CVE-2026-43197

netfilter: ctnetlink: ensure safe access to master conntrack

2026-05-11 CVE-2026-43116

netfilter: nf_conntrack: fix crash due to removal of uninitialised entry

2026-05-11 CVE-2025-38472

ntfs: ->d_compare() must not block

2026-05-11 CVE-2026-43245

ntfs3: fix circular locking dependency in run_unpack_ex

2026-05-11 CVE-2026-43127

nvme-tcp: sanitize request list handling

2026-05-11 CVE-2025-38264

perf/x86/intel/uncore: Fix die ID init and look up bugs

2026-05-11 CVE-2026-43344

RDMA/mlx5: Fix a WARN during dereg_mr for DM type

2026-05-11 CVE-2025-21888

rxrpc: Fix missing validation of ticket length in non-XDR key preparsing

2026-05-11 CVE-2026-31696

s390/mm: Fix in_atomic() handling in do_secure_storage_access()

2026-05-11 CVE-2025-38359

smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path

2026-05-11 CVE-2026-31708

smb: client: fix warning when reconnecting channel

2026-05-11 CVE-2025-38379

smb: client: validate the whole DACL before rewriting it in cifsacl

2026-05-11 CVE-2026-31709

smb: server: fix active_num_conn leak on transport allocation failure

2026-05-11 CVE-2026-31711

smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

2026-05-11 CVE-2025-40139

smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

2026-05-11 CVE-2025-40168

soc/tegra: pmc: Fix unsafe generic_handle_irq() call

2026-05-11 CVE-2026-43311

srcu: Use irq_work to start GP in tiny SRCU

2026-05-11 CVE-2026-43115

tcp: Correct signedness in skb remaining space calculation

2026-05-11 CVE-2025-38463

tcp: fix potential race in tcp_v6_syn_recv_sock()

2026-05-11 CVE-2026-43198

team: avoid NETDEV_CHANGEMTU event when unregistering slave

2026-05-11 CVE-2026-43234

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

2026-05-11 CVE-2026-7210

usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()

2026-05-11 CVE-2026-43250

usb: gadget: f_ecm: Fix net_device lifecycle with device_move

2026-05-11 CVE-2026-31725

usb: gadget: f_eem: Fix net_device lifecycle with device_move

2026-05-11 CVE-2026-31724

usb: gadget: f_hid: move list and spinlock inits from bind to alloc

2026-05-11 CVE-2026-31721

usb: gadget: f_rndis: Fix net_device lifecycle with device_move

2026-05-11 CVE-2026-31722

usb: gadget: f_subset: Fix net_device lifecycle with device_move

2026-05-11 CVE-2026-31723

usb: typec: ucsi: validate connector number in ucsi_notify_common()

2026-05-11 CVE-2026-31729

vhost: move vdpa group bound check to vhost_vdpa

2026-05-11 CVE-2026-43248

virtio: break and reset virtio devices on device_shutdown()

2026-05-11 CVE-2025-38064

wifi: ath12k: Fix memory leak due to multiple rx_stats allocation

2026-05-11 CVE-2025-38199

wifi: iwlwifi: don't warn when if there is a FW error

2026-05-11 CVE-2025-38096

wifi: iwlwifi: fix 22000 series SMEM parsing

2026-05-11 CVE-2026-43172

wifi: mac80211: check tdls flag in ieee80211_tdls_oper

2026-05-11 CVE-2026-43052

wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()

2026-05-11 CVE-2025-71273

wifi: rtw89: fix potential zero beacon interval in beacon tracking

2026-05-11 CVE-2026-43267

wifi: rtw89: pci: validate release report content before using for RTL8922DE

2026-05-11 CVE-2026-43176

wifi: rtw89: pci: validate sequence number of TX release report

2026-05-11 CVE-2026-43213

x86-64: rename misleadingly named '__copy_user_nocache()' function

2026-05-11 CVE-2026-43073

lowMicrosoft MSRC 2026-W20

xfrm: account XFRMA_IF_ID in aevent size calculation

2026-05-11 CVE-2026-43107

xfs: close crash window in attr dabtree inactivation

2026-05-11 CVE-2026-43053

xfs: remove xfs_attr_leaf_hasname

2026-05-11 CVE-2026-43153

Mariner

2026-05-10 CVE-2026-45186

lowMicrosoft MSRC 2026-W19

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

2026-05-10 CVE-2026-8177

Bypass of meta content URL escaping causes XSS in html/template

2026-05-07 CVE-2026-39823

mediumMicrosoft MSRC 2026-W19

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

2026-05-07 CVE-2026-33814

Pallets Click contains a command injection via Unsanitized Filename "click.edit()"

2026-05-07 CVE-2026-7246

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

2026-05-06 CVE-2026-33846

Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash

2026-05-06 CVE-2026-6210

Apache HTTP Server: mod_authn_socache crash

2026-05-05 CVE-2026-33007

mediumMicrosoft MSRC 2026-W19

Apache HTTP Server: mod_md unrestricted OCSP response

2026-05-05 CVE-2026-29168

Apache Thrift: Node.js web_server.js multi-vulnerability

2026-05-05 CVE-2026-43870