Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46150)

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotifygetmarksafe may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46151)

In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblpctrlmsg collapses the usbcontrolmsg return value to 0/-errno, discarding the actual number of bytes transferred. A broken printer can complete the GETDEVICE...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46180)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between sendsig and kthreadstop calls, what results in the use-after-free issue. Fix this by increasing watchdog task referenc...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-23131)

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31708)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path smb2ioctlqueryinfo has two response-copy branches: PASSTHRUFSCTL and the default QUERYINFO path. The QUERYINFO branch clamps qi.inputbufferlength to the server-report...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46191)

In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the reallocation during console rotation fails in fbconrotatefont. The putcs implementations for the rotated buffer will return early in this case. S...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2026-53264)

"In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently it is possible to create a race with an associated action. Let's illustrate with CPU0 running NEWTFILTER an...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45991)

In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated partition descriptors can trigger a heap out-of-bounds write in partdescsloc. handlepartitiondescriptor deduplicates entries by partition...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46038)

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrlcmdbye A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-52918)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize acceptq access btsockpoll walks the accept queue without synchronization, while child teardown can unlink the same socket and drop its last reference. The unsynchronized accept queue walk has existed since th...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-39863)

"In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free when rescheduling brcmfbtcoexinfo work The brcmfbtcoexdetach only shuts down the btcoex timer, if the flag timeron is false. However, the brcmfbtcoextimerfunc, which runs as timer handler, sets...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: mxuport: fix memory...

ALSA-2026:85773 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufinfo CVE-2026-53196 kernel: sctp: keep chunk-transport in...

Linux Octeontx2 DoS

The vulnerability in the otx2freesqres function within the drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c file of the Linux kernel system is related to a resource leak that occurs after the expiration of its valid usage period. Exploitation of this vulnerability may enable an attacker to cau...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53256)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcommconnectind rfcommgetsockbychannel scans rfcommsklist under the list lock, but returns the selected listener after dropping that lock without taking a reference. rfcommconnectind th...

Siemens SIMATIC S7-1500 TM MFP Improper Validation of Consistency within Input (CVE-2026-31488)

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 'drm/amd/display: Add dsc pre-validation in atomic check', amdgpu resets the CRTC state modechanged flag to false when...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53265)

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de 'dm cache policy smq: fix missing locks in invalidating cache blocks' added mq-lock around the destructive part of smqinvalidatemapping, but left the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53181)

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix skackbacklog leak on failed handshake When vmcitransportrecvconnectingserver returns an error, vmcitransportrecvlisten calls vsockremovepending but never calls skacceptqremoved. This leaves skackbacklog incremente...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46321)

In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tunxdpone tunxdpone returns -EINVAL on a frame shorter than ETHHLEN without freeing the page that vhostnetbuildxdp allocated for it. tunsendmsg discards that -EINVAL and still returns...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43094)

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiatefeatures op to Hyper-V ops table Commit a7075f501bd3 'ixgbevf: fix mailbox API compatibility by negotiating supported features' added the .negotiatefeatures callback to ixgbemacoperations and populat...