Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31698)

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the PDH cert, don't attempt to copy the blobs to userspace if the firmware command failed. If the failure was due to an invalid length...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53225)

"In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only checks that the ASCONF chunk can hold the ADDIP header and a parameter header, then calls af-fromaddrparam, which reads the full address ...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46151)

In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblpctrlmsg collapses the usbcontrolmsg return value to 0/-errno, discarding the actual number of bytes transferred. A broken printer can complete the GETDEVICE...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45842)

"In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhcinit accepts rslots == 0 as a valid configuration, with the documented meaning of 'no receive compression'. In that case the allocation loop in slhcinit is...

Siemens SIMATIC S7-1500 TM MFP Missing Release of Resource after Effective Lifetime (CVE-2026-23339)

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on ncitransceive early error paths ncitransceive takes ownership of the skb passed by the caller, but the -EPROTO, -EINVAL, and -EBUSY error paths return without freeing it. Due to issues clearing NCIDATAEXCHAN...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43110)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmffwehhandleifevent validates the firmware-provided interface index before it touches drvr-iflist, but it still uses the raw bsscfgidx field as an array index without a...

Siemens SIMATIC S7-1500 TM MFP Improper Control of a Resource Through its Lifetime (CVE-2026-43503)

"In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers pskbcopyfclone and skbshift fail to propagate the SKBFLSHAREDFRAG bit in skbshinfo-flags when moving frags from source to...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23336)

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkillblock work in wiphyunregister There is a use-after-free error in cfg80211shutdownallinterfaces found by syzkaller: BUG: KASAN: use-after-free in cfg80211shutdownallinterfaces+0x213/0x220 Read of size ...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46180)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between sendsig and kthreadstop calls, what results in the use-after-free issue. Fix this by increasing watchdog task referenc...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the afsupdatecell function in the fs/afs/cell.c component of the Linux kernel is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Octeontx2 DoS

The vulnerability in the otx2freesqres function within the drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c file of the Linux kernel system is related to a resource leak that occurs after the expiration of its valid usage period. Exploitation of this vulnerability may enable an attacker to cau...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: mxuport: fix memory...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-36922)

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq-readptr under lock If we read txq-readptr without lock, we can read the same value twice, then obtain the lock, and reclaim from there to two different places, but crucially reclaim the same entry twice,...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43493)

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAYBACKLOG requests MAYBACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31642)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion Fix rxrpc call removal from the rxnet-calls list to use listdelrcu rather than listdelinit to prevent stuffing up reading /proc/net/rxrpc/calls from potentially getting into an...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23302)

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk-skdataready,writespace skmsg and probably other layers are changing these pointers while other cpus might read them concurrently. Add corresponding READONCE/WRITEONCE annotations for UDP, TCP an...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the function rvuafdlnixmaxlfvalidate in the driver/net/ethernet/marvell/octeontx2/af/rvudevlink.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53147)

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tbxdphandlerequest casts the received packet buffer to protocol-specific structs without verifying that the allocation is large enough for the target type. A peer...

Siemens SIMATIC S7-1500 TM MFP Multiple Locks of a Critical Resource (CVE-2026-23292)

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquired and then the loaded store function is called, which, here, is targetcoreitemdbrootstore. This function called filpopen, following...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45991)

In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated partition descriptors can trigger a heap out-of-bounds write in partdescsloc. handlepartitiondescriptor deduplicates entries by partition...