Linux Net XFRM Buffer Overflow

The vulnerability of the net/xfrm/xfrmpolicy.c component and the include/net/xfrm.h header in the Linux operating system’s kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Siemens SIMATIC S7-1500 TM MFP Detection of Error Condition Without Action (CVE-2026-23317)

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmwtranslateptr functions Before the referenced fixes these functions used a lookup function that returned a pointer. This was changed to another lookup function that returned an error code...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46022)

In the Linux kernel, the following vulnerability has been resolved: misc: ibmasm: fix OOB MMIO read in ibmasmhandlemouseinterrupt ibmasmhandlemouseinterrupt performs an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeds REMOTEQUEUESIZE 60. A compromised service...

Siemens SIMATIC S7-1500 TM MFP Release of Invalid Pointer or Reference (CVE-2026-23352)

In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efifreebootservices frees memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issue with that: memblockfreelate should be used for...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the ocfs2readblocks function in the fs/ocfs2/bufferheadio.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the groupunbindlocked function in the drivers/gpu/drm/panthor/panthorsched.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel enetc_xdp_xmit() Data Compromise

The vulnerability of the enetcxdpxmit function in the drivers/net/ethernet/freescale/enetc/enetc.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the sja1105peroutenable function within the drivers/net/dsa/sja1105/sja1105ptp.c file of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

intel_crtc_put_color_blobs() Function Kernel Module Use-After-Free

The vulnerability of the intelcrtcputcolorblobs function in the drivers/gpu/drm/i915/display/intelatomic.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux kernel aa_label_alloc Heap Buffer Overflow DoS

The vulnerability of the aalabelalloc function in the security/apparmor/label.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45838)

In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroupstoragegetnextkey listnextentry never returns NULL -- when the current element is the last entry it wraps to the list head via containerof. The subsequent NULL check is therefore dead code...

Siemens SIMATIC S7-1500 TM MFP Out-of-bounds Write (CVE-2026-46331)

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43111)

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccatreportevent roccatreportevent iterates over the device-readers list without holding the readerslock. This allows a concurrent roccatrelease to remove and free a reader while it's still bei...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45843)

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53149)

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size tbpropertyparsedir does not check that contentoffset + contentlen fits within blocklen for the root directory case. When rootdir-length equals or exceeds blocklen - 2, the...

Siemens SIMATIC S7-1500 TM MFP Improper Resource Locking (CVE-2026-23356)

In the Linux kernel, the following vulnerability has been resolved: drbd: fix 'LOGIC BUG' in drbdalbeginiononblock Even though we check that we 'should' be able to do lcgetcumulative while holding the device-allock spinlock, it may still fail, if some other code path decided to do lctrylock with...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53255)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

Siemens SIMATIC S7-1500 TM MFP NULL Pointer Dereference (CVE-2026-23396)

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

Linux Distros Unpatched Vulnerability : CVE-2026-98724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23310)

In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmithashpolicy change when XDP is loaded bondoptionmodeset already rejects mode changes that would make a loaded XDP program incompatible via bondxdpcheck. However, bondoptionxmithashpolicyset has ...