Linux kernel Heap Buffer Overflow DoS

The vulnerability of the geminitone function in the drivers/net/ethernet/sun/sungem.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the sja1105peroutenable function within the drivers/net/dsa/sja1105/sja1105ptp.c file of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel RAID1 DoS

The vulnerability in the raid1readrequest function within the drivers/md/raid1.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ieee802154hdrgetaddr function in the net/ieee802154/headerops.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...

Linux kernel xfrm_input_state_lookup Buffer Overflow

The vulnerability of the xfrminputstatelookup function in the net/xfrm/xfrmstate.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53242)

In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in sndpcmdrain on linked streams sndpcmdrain uses initwaitqueueentry which does not clear entry.prev/next, and addwaitqueue with a conditional removewaitqueue that is skipped when tocheck...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31622)

In the Linux kernel, the following vulnerability has been resolved: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler The NFC-A anti-collision cascade in digitalinrecvsddres appends 3 or 4 bytes to target-nfcid1 on each round, but the number of cascade rounds is controlled...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45835)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsocknewconnectioncb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53349)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrack: destroy stale expectfn expectations on unregister NAT helpers such as nfnath323 store a raw pointer to module text in exp-expectfn e.g. ipnatq931expect. nfcthelperexpectfnunregister only unlinks the callba...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46243)

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcalltarget that cifs.upcall treats as kernel-originating inputs. However,...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46149)

In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf return in tgptgpmembersshow targettgptgpmembersshow formats LUN paths with snprintf into a 256-byte stack buffer, then will memcpy curlen bytes from that buffer. snprintf returns the length...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43421)

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Fix netdevice lifecycle with devicemove The network device outlived its parent gadget device during disconnection, resulting in dangling sysfs links and null pointer dereference problems. A prior attempt to sol...

Siemens SIMATIC S7-1500 TM MFP Improper Resource Locking (CVE-2026-23356)

In the Linux kernel, the following vulnerability has been resolved: drbd: fix 'LOGIC BUG' in drbdalbeginiononblock Even though we check that we 'should' be able to do lcgetcumulative while holding the device-allock spinlock, it may still fail, if some other code path decided to do lctrylock with...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46070)

In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size before accessing journal metadata r5crecoveryanalyzemetablock and r5lrecoveryverifydatachecksumformb iterate over payloads in a journal metadata block using on-disk payload size fields without...

Siemens SIMATIC S7-1500 TM MFP Missing Lock Check (CVE-2026-23382)

In the Linux kernel, the following vulnerability has been resolved: HID: Add HIDCLAIMEDINPUT guards in rawevent callbacks missing them In commit 2ff5baa9b527 'HID: appleir: Fix potential NULL dereference at raw event handle', we handle the fact that raw event callbacks can happen even for a HID...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-38250)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45850)

In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum validation fails for IPv6 if there are extension headers before the protocol header. iph-len already contains its offset, so use it to fix the problem. This plug...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23278)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always walk all pending catchall elements During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch. If...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-52948)

In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2CTIMEOUT ioctl While fuzzing with Syzkaller, a persistent scheduletimeout: wrong timeout value warning was observed, accompanied by SMBus controller state machine corruption. The I2CTIMEOUT...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31704)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use checkaddoverflow to prevent u16 DACL size overflow setposixaclentriesdacl and setntacldacl accumulate ACE sizes in u16 variables. When a file has many POSIX ACL entries, the accumulated size can wrap past 65535, causin...