Week: 2026-W15

arm64: io: Extract user memory type in ioremap_prot()

2026-04-06 CVE-2026-23346

mediumMicrosoft CVE 2026-W15

atm: lec: fix null-ptr-deref in lec_arp_clear_vccs

2026-04-06 CVE-2026-23286

bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded

2026-04-06 CVE-2026-23310

can: mcp251x: fix deadlock in error path of mcp251x_open

2026-04-06 CVE-2026-23357

can: usb: f81604: correctly anchor the urb in the read bulk callback

2026-04-06 CVE-2026-23347

can: usb: f81604: handle short interrupt urb messages properly

2026-04-06 CVE-2026-23334

Checkmk: Mehrere Schwachstellen

2026-04-06 CVE-2025-39666

highBSI 2026-W15

cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

2026-04-06 CVE-2026-23327

Dell PowerScale OneFS: Mehrere Schwachstellen

2026-04-06 CVE-2026-24511

mediumBSI 2026-W15

drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()

2026-04-06 CVE-2026-23356

drbd: fix null-pointer dereference on local read error

2026-04-06 CVE-2026-23285

drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

2026-04-06 CVE-2026-23468

mediumMicrosoft CVE 2026-W15

drm/vmwgfx: Return the correct value in vmw_translate_ptr functions

2026-04-06 CVE-2026-23317

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

2026-04-06 CVE-2026-1519

Fortinet FortiClient EMS Improper Access Control Vulnerability

2026-04-06 CVE-2026-35616

highFortinet CVE 2026-W15

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

2026-04-06 CVE-2026-5272

highBSI 2026-W15

IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()

2026-04-06 CVE-2026-23289

ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()

2026-04-06 CVE-2026-23304

irqchip/sifive-plic: Fix frozen interrupt due to affinity setting

2026-04-06 CVE-2026-23287

ksmbd: Compare MACs in constant time

2026-04-06 CVE-2026-23364

Libssh: buffer underflow in ssh_get_hexa() on invalid input

2026-04-06 CVE-2026-0966

Libssh: improper sanitation of paths received from scp servers

2026-04-06 CVE-2026-0964

Libssh: libssh: denial of service due to malformed sftp message

2026-04-06 CVE-2026-0968

Libssh: libssh: denial of service via inefficient regular expression processing

2026-04-06 CVE-2026-0967

Linux Kernel: Mehrere Schwachstellen

2026-04-06 CVE-2026-23412

mediumBSI 2026-W15

mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

2026-04-06 CVE-2026-31394

mediumMicrosoft CVE 2026-W15

Mariner

2026-04-06 CVE-2025-69720

criticalMicrosoft MSRC 2026-W15

Mariner

2026-04-06 CVE-2026-21710

Mariner

2026-04-06 CVE-2026-21711

Mariner

2026-04-06 CVE-2026-21713

Mariner

2026-04-06 CVE-2026-21716

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-04-06 CVE-2026-0385

net: annotate data-races around sk->sk_{data_ready,write_space}

2026-04-06 CVE-2026-23302

net: phy: register phy led_triggers during probe to avoid AB-BA deadlock

2026-04-06 CVE-2026-23368

net: usb: kaweth: validate USB endpoints

2026-04-06 CVE-2026-23312

net: usb: pegasus: validate USB endpoints

2026-04-06 CVE-2026-23290

net/sched: ets: fix divide by zero in the offload path

2026-04-06 CVE-2026-23379

Nextcloud Flow: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten

2026-04-06 CVE-2026-29059

criticalBSI 2026-W15

nfc: nci: complete pending data exchange on device close

2026-04-06 CVE-2026-23330

nfc: nci: free skb on nci_transceive early error paths

2026-04-06 CVE-2026-23339

nfc: pn533: properly drop the usb interface reference on disconnect

2026-04-06 CVE-2026-23291

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

2026-04-06 CVE-2025-66038

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

2026-04-06 CVE-2025-66215

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

2026-04-06 CVE-2025-49010

P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters

2026-04-06 CVE-2026-2100

PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

2026-04-06 CVE-2026-23361

pinctrl: equilibrium: fix warning trace on load

2026-04-06 CVE-2026-23308

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

2026-04-06 CVE-2026-23370

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

2026-04-06 CVE-2026-23335

Roundcube: Mehrere Schwachstellen

2026-04-06 CVE-2026-35537

mediumBSI 2026-W15

scsi: core: Fix refcount leak for tagset_refcnt

2026-04-06 CVE-2026-23296

scsi: target: Fix recursive locking in __configfs_open_file()

2026-04-06 CVE-2026-23292