Vendor: microsoft

drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()

2026-04-18 CVE-2026-23356

icmp: fix NULL pointer dereference in icmp_tag_validation()

2026-04-18 CVE-2026-23398

net: mvpp2: guard flow control update with global_tx_fc in buffer switching

2026-04-18 CVE-2026-23438

net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs

2026-04-18 CVE-2026-23340

net: usb: aqc111: Do not perform PM inside suspend callback

2026-04-18 CVE-2026-23446

nfnetlink_osf: validate individual option lengths in fingerprints

2026-04-18 CVE-2026-23397

udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n

2026-04-18 CVE-2026-23439

wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()

2026-04-18 CVE-2026-23336

xen/privcmd: restrict usage in unprivileged domU

2026-04-18 CVE-2026-31788

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.

2026-04-16 CVE-2026-41035

bridge: cfm: Fix race condition in peer_mep deletion

2026-04-13 CVE-2026-23393

cxl: Fix race of nvdimm_bus object when creating nvdimm objects

2026-04-13 CVE-2026-23348

drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

2026-04-13 CVE-2026-23468

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

2026-04-13 CVE-2026-1519

ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

2026-04-13 CVE-2026-31410

net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check

2026-04-13 CVE-2026-23447

netfilter: nf_tables: release flowtable after rcu grace period on error

2026-04-13 CVE-2026-23392

netfilter: nft_set_rbtree: validate open interval overlap

2026-04-13 CVE-2026-23333

PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

2026-04-13 CVE-2026-23361

wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

2026-04-13 CVE-2026-23444

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

2026-04-13 CVE-2026-23315

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

2026-04-10 CVE-2026-40226

mediumMicrosoft MSRC 2026-W15

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.

2026-04-10 CVE-2026-40225

mediumMicrosoft MSRC 2026-W15

Inefficient policy validation in crypto/x509

2026-04-08 CVE-2026-32281

mediumMicrosoft MSRC 2026-W15

Unexpected work during chain building in crypto/x509

2026-04-08 CVE-2026-32280

highMicrosoft MSRC 2026-W15

usb: gadget: f_ncm: align net_device lifecycle with bind/unbind

2026-04-03 CVE-2026-23320

Mariner

2026-04-02 CVE-2026-35414

In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.

2026-04-01 CVE-2025-66442

Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function

2026-04-01 CVE-2026-25833

highMicrosoft MSRC 2026-W14

Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).

2026-04-01 CVE-2026-25835

highMicrosoft MSRC 2026-W14

Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.

2026-04-01 CVE-2026-25834

Mariner

2026-03-30 CVE-2026-21711

P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters

2026-03-26 CVE-2026-2100

wifi: mac80211: fix NULL deref in mesh_matches_local()

2026-03-26 CVE-2026-23396

arm64: io: Extract user memory type in ioremap_prot()

2026-03-25 CVE-2026-23346

Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ

2026-03-25 CVE-2026-23395

criticalMicrosoft MSRC 2026-W13

bpf: Fix stack-out-of-bounds write in devmap

2026-03-25 CVE-2026-23359

can: usb: etas_es58x: correctly anchor the urb in the read bulk callback

2026-03-25 CVE-2026-23324

cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

2026-03-25 CVE-2026-23327

irqchip/sifive-plic: Fix frozen interrupt due to affinity setting

2026-03-25 CVE-2026-23287

net: annotate data-races around sk->sk_{data_ready,write_space}

2026-03-25 CVE-2026-23302

nfc: nci: complete pending data exchange on device close

2026-03-25 CVE-2026-23330

nfc: nci: free skb on nci_transceive early error paths

2026-03-25 CVE-2026-23339

pinctrl: equilibrium: fix warning trace on load

2026-03-25 CVE-2026-23308

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

2026-03-25 CVE-2026-23335