Week: 2026-W14

net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads

2026-03-31 CVE-2025-37833

net/sched: fix use-after-free in taprio_dev_notifier

2026-03-31 CVE-2025-38087

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

2026-03-31 CVE-2025-38052

netdevsim: Fix memory leak of nsim_dev->fa_cookie

2026-03-31 CVE-2022-49803

netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

2026-03-31 CVE-2025-39894

netfilter: ipset: fix region locking in hash types

2026-03-31 CVE-2025-37997

netfs: Fix missing xas_retry() calls in xarray iteration

2026-03-31 CVE-2022-49810

netlink: Bounds-check struct nlmsgerr creation

2026-03-31 CVE-2022-49766

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59201

NFSD: Define a proc_layoutcommit for the FlexFiles layout type

2026-03-31 CVE-2025-40087

No QUIC certificate pinning with wolfSSL

2026-03-31 CVE-2025-5025

Nodes can bypass dynamic resource allocation authorization checks

2026-03-31 CVE-2025-4563

NTFS Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-32707

NTLM Hash Disclosure Spoofing Vulnerability

2026-03-31 CVE-2025-59185

NTLM Hash Disclosure Spoofing Vulnerability

2026-03-31 CVE-2025-59244

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-55696

Nuance Digital Engagement Platform Spoofing Vulnerability

2026-03-31 CVE-2025-47977

nvmet-tcp: don't restore null sk_state_change

2026-03-31 CVE-2025-38035

octeon_ep: Fix host hang issue during device reboot

2026-03-31 CVE-2025-37933

octeontx2-pf: Fix SQE threshold checking

2026-03-31 CVE-2022-49858

openvswitch: Fix unsafe attribute parsing in output_userspace()

2026-03-31 CVE-2025-37998

Oracle Java SE: Mehrere Schwachstellen

2026-03-31 WID-SEC-2025-1569

highBSI 2026-W14

orangefs: Do not truncate file size

2026-03-31 CVE-2025-38065

page_pool: avoid infinite loop to schedule delayed worker

2026-03-31 CVE-2025-37859

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

2026-03-31 CVE-2023-53154

PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops

2026-03-31 CVE-2025-38069

PCI: Fix reference leak in pci_register_host_bridge()

2026-03-31 CVE-2025-37836

PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type

2026-03-31 CVE-2025-23161

pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result

2026-03-31 CVE-2025-37887

pds_core: make wait_context part of q_info

2026-03-31 CVE-2025-37886

pds_core: Prevent possible adminq overflow/stuck condition

2026-03-31 CVE-2025-37987

pds_core: remove write-after-free of client_id

2026-03-31 CVE-2025-37916

perf: Fix hang while freeing sigtrap event

2026-03-31 CVE-2025-37747

perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init

2026-03-31 CVE-2025-37878

perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.

2026-03-31 CVE-2025-37936

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

2026-03-31 CVE-2025-40914

criticalMicrosoft MSRC 2026-W14

Perl threads have a working directory race condition where file operations may target unintended paths

2026-03-31 CVE-2025-40909

ping in iputils before 20250602 allows a denial of service

2026-03-31 CVE-2025-47268

platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()

2026-03-31 CVE-2025-38077

Playwright Spoofing Vulnerability

2026-03-31 CVE-2025-59288

pm: cpupower: bench: Prevent NULL dereference on malloc failure

2026-03-31 CVE-2025-37841

PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()

2026-03-31 CVE-2025-37745

Podman: podman missing tls verification

2026-03-31 CVE-2025-6032

Possible denial of service when passing malformed data in a URL to qDecodeDataUrl

2026-03-31 CVE-2025-5455

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

2026-03-31 CVE-2025-4207

Power Automate Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-47966

criticalMicrosoft MSRC 2026-W14

powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

2026-03-31 CVE-2025-38088

powerpc/rtas: Fix RTAS MSR[HV] handling for Cell

2026-03-31 CVE-2022-49955

PowerShell Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-25004

ptp: Add a upper bound on max_vclocks

2026-03-31 CVE-2025-40057

PyTorch nccl.py torch.cuda.nccl.reduce denial of service

2026-03-31 CVE-2025-4287

qibfs: fix _another_ leak

2026-03-31 CVE-2025-37983

Quadratic complexity when checking name constraints in crypto/x509

2026-03-31 CVE-2025-58187

Quadratic complexity when parsing some invalid inputs in encoding/pem

2026-03-31 CVE-2025-61723

QUIC certificate check skip with wolfSSL

2026-03-31 CVE-2025-4947

RabbitMQ Node can log Basic Auth header from an HTTP request

2026-03-31 CVE-2025-50200

RDMA/cma: Fix workqueue crash in cma_netevent_work_handler

2026-03-31 CVE-2025-37772

RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem

2026-03-31 CVE-2025-38022

RDMA/core: Silence oversized kvmalloc() warning

2026-03-31 CVE-2025-37867