CVE-2025-71158, CVE-2025-71160, CVE-2025-71161 +290 more CVEs: linux kernel 5.4, 4.6, 4.4 (+32 more affected versions); +41 more affected products

CVE-2025-71158

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71160

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71161

Affected technology

linux kernel · from 4.5 (inclusive), before 6.18.6 (exclusive)
linux

Linux · a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 8b821ca892cfeeaf0bedc9fc72717294f67144d5, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before e227d2b229c7529bd98d348efc55262ccf24ab35, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 897d9006e75f46f8bd7df78faa424327ae6a4bcf, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 4220cb37406915c926c0e4a3dbab77cd9cceeb1e, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before 232948cf600fba69aff36b25d85ef91a73a35756, a739ff3f543afbb4a041c16cd0182c8e8d366e70 to before d9f3e47d3fae0c101d9094bc956ed24e7a0ee801
Linux

Linux · 4.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/md/dm-verity-fec.c, drivers/md/dm-verity-fec.h, drivers/md/dm-verity-target.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.

CVE-2025-71162

Affected technology

linux kernel · from 4.7 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · f46b195799b5cb05338e7c44cb3617eacb56d755 to before 5f8d1d66a952d0396671e1f21ff8127a4d14fb4e, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 76992310f80776b4d1f7f8915f59b92883a3e44c, f46b195799b5cb05338e7c44cb3617eacb56d755 to before ae3eed72de682ddbba507ed2d6b848c21a6b721e, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 59cb421b0902fbef2b9512ae8ba198a20f26b41f, f46b195799b5cb05338e7c44cb3617eacb56d755 to before cb2c9c4bb1322cc3c9984ad17db8cdd2663879ca, f46b195799b5cb05338e7c44cb3617eacb56d755 to before be655c3736b3546f39bc8116ffbf2a3b6cac96c4, f46b195799b5cb05338e7c44cb3617eacb56d755 to before 2efd07a7c36949e6fa36a69183df24d368bf9e96
Linux

Linux · 4.7
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/tegra210-adma.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71163

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before b7bd948f89271c92d9ca9b2b682bfba56896e959, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before b2d077180a56e3b7c97b7517d0465b584adc693b, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before c81ea0222eaaafdd77348e27d1e84a1b8cfc0c99, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before 0c97ff108f825a70c3bb29d65ddf0a013d231bb9, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before a7226fd61def74b60dd8e47ec84cabafc39d575b, 6e7f3ee97bbe2c7d7a53b7dbd7a08a579e03c8c9 to before 799900f01792cf8b525a44764f065f83fcafd468
Linux

Linux · 5.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/idxd/compat.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71180

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71182

Affected technology

linux kernel · from 5.4.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 5.4
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 9d71dd0c70099914fcd063135da3c580865e924c to before ebb0dfd718dd31c8d3600612ca4b7207ec3d923a, 9d71dd0c70099914fcd063135da3c580865e924c to before c3a4316e3c746af415c0fd6c6d489ad13f53714d, 9d71dd0c70099914fcd063135da3c580865e924c to before 46ca9dc978923c5e1247a9e9519240ba7ace413c, 9d71dd0c70099914fcd063135da3c580865e924c to before 78d87b72cebe2a993fd5b017e9f14fb6278f2eae, 9d71dd0c70099914fcd063135da3c580865e924c to before ba6f0d1832eeb5eb3a6dc5cb30e0f720b3cb3536, 9d71dd0c70099914fcd063135da3c580865e924c to before 79dd3f1d9dd310c2af89b09c71f34d93973b200f, 9d71dd0c70099914fcd063135da3c580865e924c to before 5d5602236f5db19e8b337a2cd87a90ace5ea776d
Linux

Linux · 5.4
Linux

Component: Not specified by the source
File: net/can/j1939/transport.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71183

Affected technology

linux kernel · from 3.18.32 (inclusive), before 3.19 (exclusive)
linux

linux kernel · from 4.1.23 (inclusive), before 4.2 (exclusive)
linux

linux kernel · from 4.4.8 (inclusive), before 4.5 (exclusive)
linux

linux kernel · from 4.5.2 (inclusive), before 4.6 (exclusive)
linux

linux kernel · from 4.6.1 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 4.6
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 56f23fdbb600e6087db7b009775b95ce07cc3195 to before c7f0207db68d5a1b4af23acbef1a8e8ddc431ebb, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before a63998cd6687c14b160dccb0bbcf281b2eb0dab3, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before 0c2413c69129f6ce60157f7b53d9ba880260400b, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before d52af58dd463821c5c516aebb031a58934f696ea, 56f23fdbb600e6087db7b009775b95ce07cc3195 to before 7ba0b6461bc4edb3005ea6e00cdae189bcf908a5, 048605483fbdd1e77ead32a7cd7b95cc17eaaf0e, 033ad030df0ea932a21499582fea59e1df95769b, 1653a3b0e9436c10eb307c318776cf91fe18ff08, ff440e9185e96cbb94481fc8b6192b944dcfc061, 3.18.32 to before 3.19, 4.1.23 to before 4.2, 4.4.8 to before 4.5, 4.5.2 to before 4.6
Linux

Linux · 4.6
Linux

Component: Not specified by the source
File: fs/btrfs/tree-log.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality impact as none; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71184

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71185

Affected technology

linux kernel · from 4.4.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 4.4
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 1befa553f1ecc045dc9ff56107ff50162f63f3c0, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before c933aa74d9f8d35e6cda322c38c4a907d37a9a2b, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 43725bd47d984937c429919ae291896d982d1f17, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 6fdf168f57e331e148a1177a9b590a845c21b315, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before f810132e825588fbad3cba940458c58bb7ec4d84, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 30352277d8e09c972436f883a5efd1f1b763ac14, 42dbdcc6bf965997c088caff2a8be7f9bf44f701 to before 4fc17b1c6d2e04ad13fd6c21cfbac68043ec03f9
Linux

Linux · 4.4
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/ti/dma-crossbar.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71186

Affected technology

linux kernel · from 4.15.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 4.15
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 3b42020e6790a5e19b36c187ed5b488a5716f97f, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 6393da54dcb3488c080a183c4182ddec71ba8d7f, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 1dda2a32303df0091896b01a9d09070d61fa344c, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 1a179ac01ff3993ab97e33cc77c316ed7415cda1, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 2fb10259d4efb4367787b5ae9c94192e8a91c648, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before 3ef52d31cce8ba816739085a61efe07b63c6cf27, df7e762db5f6c8dbd9e480f1c9ef9851de346657 to before dd6e4943889fb354efa3f700e42739da9bddb6ef
Linux

Linux · 4.15
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/stm32/stm32-dmamux.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71187

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71188

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71189

Affected technology

linux kernel · from 5.19.1 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 5.19
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 134d9c52fca26d2d199516e915da00f0cc6adc73 to before 6b87288581a0fcbe54b39da5c10e1aee2df8776e, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before db7c79c1bbfb1b0184e78a17ac2bd0f2bc3134d1, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before 8f7a391211381ed2f6802032c78c7820d166bc49, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before eabe40f8a53c29f531e92778ea243e379f4f7978, 134d9c52fca26d2d199516e915da00f0cc6adc73 to before ec25e60f9f95464aa11411db31d0906b3fb7b9f2
Linux

Linux · 5.19
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/dw/rzn1-dmamux.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71190

Affected technology

linux kernel · from 4.13.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 4.13
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 4316e4c4fd2c09f68a262365f21847cafa8fe9dd, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 4730f12a192d7314119b3d8331611ab151b87bdf, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before bc98e68adfef3b25c06ff08f0808bb59f787420c, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before c80ca7bdff158401440741bdcf9175bd8608580b, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before db6f1d6d31711e73e6a214c73e6a8fb4cda0483d, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 2ed1a9de1f2d727ccae5bc9cc7c63ee3519c0c8b, 743e1c8ffe4ee5dd7596556dcc3f022ccde13d7b to before 7c3a46ebf15a9796b763a54272407fdbf945bed8
Linux

Linux · 4.13
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/bcm-sba-raid.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71191

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 49d964cde422dc66fea514b7ab24aa729df7081d, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 4c67b4f45c8540ee4e62e24ca4608c6a9a81ee0f, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 48b2d7f530b83cb149dbf0e48f95ccadb2d90da9, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 987c71671367f42460689b78244d7b894c50999a, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before 6a86cf2c09e149d5718a5b7090545f7566da9334, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before f3c23b7e941349505c3d40de2cc0acd93d9ac057, bbe89c8e3d598129b728d1388c3ad9abe4e8e261 to before b9074b2d7a230b6e28caa23165e9d8bc0677d333
Linux

Linux · 3.10
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/dma/at_hdmac.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2025-71192

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71193

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71194

Affected technology

Linux · 4a9d8bdee368de78ace8b36da4eb2186afea162d to before e563f59395981fcd69d130761290929806e728d6, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before dc84036c173cff6a432d9ab926298850b1d2a659, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before d7b04b40ac8e6d814e35202a0e1568809b818295, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 99da896614d17e8a84aeb2b2d464ac046cc8633d, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 8b0bb145d3bc264360f525c9717653be3522e528, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 9ac63333d600732a56b35ee1fa46836da671eb50, 4a9d8bdee368de78ace8b36da4eb2186afea162d to before 5037b342825df7094a4906d1e2a9674baab50cb2
Linux

Linux · 3.11
Linux

Component: Not specified by the source
File: fs/btrfs/transaction.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71195

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71196

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71197

Affected technology

Linux · e2c94d6f572079511945e64537eb1218643f2e68 to before 49ff9b4b9deacbefa6654a0a2bcaf910c9de7e95, e2c94d6f572079511945e64537eb1218643f2e68 to before 060b08d72a38b158a7f850d4b83c17c2969e0f6b, e2c94d6f572079511945e64537eb1218643f2e68 to before b3fc3e1f04dcc7c41787bbf08a6e0d2728e022cf, e2c94d6f572079511945e64537eb1218643f2e68 to before 6a5820ecfa5a76c3d3e154802c8c15f391ef442e, e2c94d6f572079511945e64537eb1218643f2e68 to before 6fd6d2a8e41b7f544a4d26cbd60bedf9c67893a0, e2c94d6f572079511945e64537eb1218643f2e68 to before e6b2609af21b5cccc9559339591b8a2cbf884169, e2c94d6f572079511945e64537eb1218643f2e68 to before 761fcf46a1bd797bd32d23f3ea0141ffd437668a
Linux

Linux · 5.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/w1/slaves/w1_therm.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71198

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71199

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71200

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-71201

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22976

Affected technology

linux kernel · from 3.0 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 0545a3037773512d3448557ba048cebb73b3e4af to before 6116a83ec167d3ab1390cded854d237481f41b63, 0545a3037773512d3448557ba048cebb73b3e4af to before 0809c4bc06c9c961222df29f2eccfd449304056f, 0545a3037773512d3448557ba048cebb73b3e4af to before cdb24200b043438a144df501f1ebbd926bb1a2c7, 0545a3037773512d3448557ba048cebb73b3e4af to before 11bf9134613f6c71fc0ff36c5d8d33856f6ae3bb, 0545a3037773512d3448557ba048cebb73b3e4af to before 43497313d0da3e12b5cfcd97aa17bf48ee663f95, 0545a3037773512d3448557ba048cebb73b3e4af to before 51ffd447bc37bf1a5776b85523f51d2bc69977f6, 0545a3037773512d3448557ba048cebb73b3e4af to before c1d73b1480235731e35c81df70b08f4714a7d095
Linux

Linux · 3.0
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

Component: Not specified by the source
Function: tc_new_tfilter
File: net/sched/sch_qfq.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22977

Affected technology

linux kernel · from 4.16 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 88dd6be7ebb3153b662c2cebcb06e032a92857f5, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before c655d2167bf014d4c61b4faeca59b60ff9b9f6b1, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 8c6901aa29626e35045130bac09b75f791acca85, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 582a5e922a9652fcbb7d0165c95d5b20aa37575d, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 005671c60fcf1dbdb8bddf12a62568fd5e4ec391, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before e00b169eaac5f7cdbf710c354c8fa76d02009115, 6d07d1cd300f4c7e16005f881fea388164999cc8 to before 2a71a1a8d0ed718b1c7a9ac61f07e5755c47ae20
Linux

Linux · 4.16
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/sock.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22978

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22979

Affected technology

linux kernel · from 5.15.154 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.85 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.6.26 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.8.5 (inclusive), before 6.9 (exclusive)
linux

linux kernel · from 6.9.1 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.9
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

linux kernel · 6.9 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 2eeab8c47c3c0276e0746bc382f405c9a236a5ad to before 0b27828ebd1ed3107d7929c3737adbe862e99e74, fc126c1d51e9552eacd2d717b9ffe9262a8a4cd6 to before 88bea149db2057112af3aaf63534b24fab5858ab, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before 3264881431e308b9c72cb8a0159d57a56d67dd79, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before c114a32a2e70b82d447f409f7ffcfa3058f9d5bd, ed4cccef64c1d0d5b91e69f7a8a6697c3a865486 to before 238e03d0466239410b72294b79494e43d4fabe77, d225b0ac96dc40d7e8ae2bc227eb2c56e130975f, 5b3b67f731296027cceb3efad881ae281213f86f, 6.1.85 to before 6.1.161, 6.6.26 to before 6.6.121, 5.15.154 to before 5.16, 6.8.5 to before 6.9
Linux

Linux · 6.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/core/skbuff.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22980

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ca97360860eb02e3ae4ba42c19b439a0fcecbf06, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before e8bfa2401d4c51eca6e48e9b33c798828ca9df61, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 34eb22836e0cdba093baac66599d68c4cd245a9d, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 06600719d0f7a723811c45e4d51f5b742f345309, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before ba4811c8b433bfa681729ca42cc62b6034f223b0, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 53f07d095e7e680c5e4569a55a019f2c0348cdc6, 7f5ef2e900d9462bf9cffaf6bb246ed87a20a6d6 to before 2857bd59feb63fcf40fe4baf55401baea6b4feb4
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/netns.h, fs/nfsd/nfs4state.c, fs/nfsd/nfsctl.c, fs/nfsd/state.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2026-22981

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22982

Affected technology

linux kernel · from 5.12 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 528d3f190c98c8f7d9581f68db4af021696727b2 to before 8767f238b0e6c3d0b295ac6dce9fbe6a99bd1b9d, 528d3f190c98c8f7d9581f68db4af021696727b2 to before b17818307446c5a8d925a39a792261dbfa930041, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 2985712dc76dfa670eb7fd607c09d4d48e5f5c6e, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 03fb1708b7d1e76aecebf767ad059c319845039f, 528d3f190c98c8f7d9581f68db4af021696727b2 to before f490af47bbee02441e356a1e0b86e3b3dd5120ff, 528d3f190c98c8f7d9581f68db4af021696727b2 to before 34f3ff52cb9fa7dbf04f5c734fcc4cb6ed5d1a95
Linux

Linux · 5.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: in
File: drivers/net/ethernet/mscc/ocelot.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22984

Affected technology

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · cd1a677cad994021b19665ed476aea63f5d54f31 to before 194cfe2af4d2a1de599d39dad636b47c2f6c2c96, cd1a677cad994021b19665ed476aea63f5d54f31 to before 79fe3511db416d2f2edcfd93569807cb02736e5e, cd1a677cad994021b19665ed476aea63f5d54f31 to before ef208ea331ef688729f64089b895ed1b49e842e3, cd1a677cad994021b19665ed476aea63f5d54f31 to before 2802ef3380fa8c4a08cda51ec1f085b1a712e9e2, cd1a677cad994021b19665ed476aea63f5d54f31 to before 2d653bb63d598ae4b096dd678744bdcc34ee89e8, cd1a677cad994021b19665ed476aea63f5d54f31 to before 818156caffbf55cb4d368f9c3cac64e458fb49c9
Linux

Linux · 5.11
Linux

Component: Not specified by the source
File: net/ceph/messenger_v2.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22985

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22986

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22987

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22989

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22990

Affected technology

linux kernel · from 2.6.34.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 2.6.34
linux

linux kernel · 2.6.34 · update rc2
linux

linux kernel · 2.6.34 · update rc3
linux

linux kernel · 2.6.34 · update rc4
linux

linux kernel · 2.6.34 · update rc5
linux

linux kernel · 2.6.34 · update rc6
linux

linux kernel · 2.6.34 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 9aa0b0c14cefece078286d78b97d4c09685e372d, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 4b106fbb1c7b841cd402abd83eb2447164c799ea, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6afd2a4213524bc742b709599a3663aeaf77193c, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before d3613770e2677683e65d062da5e31f48c409abe9, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6c6cec3db3b418c4fdf815731bc39e46dff75e1b, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before 6348d70af847b79805374fe628d3809a63fd7df3, f24e9980eb860d8600cbe5ef3d2fd9295320d229 to before e00c3f71b5cf75681dbd74ee3f982a99cb690c2b
Linux

Linux · 2.6.34
Linux

Component: Not specified by the source
File: net/ceph/osdmap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22991

Affected technology

linux kernel · from 4.13 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 9b3730dabcf3764bfe3ff07caf55e641a0b45234, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 851241d3f78a5505224dc21c03d8692f530256b4, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before ec1850f663da64842614c86b20fe734be070c2ba, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 8081faaf089db5280c3be820948469f7c58ef8dd, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before c4c2152a858c0ce4d2bff6ca8c1d5b0ef9f2cbdf, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before f21c3fdb96833aac2f533506899fe38c19cf49d5, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before e3fe30e57649c551757a02e1cad073c47e1e075e
Linux

Linux · 4.13
Linux

Component: Not specified by the source
File: net/ceph/osdmap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22992

Affected technology

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · cd1a677cad994021b19665ed476aea63f5d54f31 to before 77229551f2cf72f3e35636db68e6a825b912cf16, cd1a677cad994021b19665ed476aea63f5d54f31 to before 33908769248b38a5e77cf9292817bb28e641992d, cd1a677cad994021b19665ed476aea63f5d54f31 to before e097cd858196b1914309e7e3d79b4fa79383754d, cd1a677cad994021b19665ed476aea63f5d54f31 to before d2c4a5f6996683f287f3851ef5412797042de7f1, cd1a677cad994021b19665ed476aea63f5d54f31 to before 9e0101e57534ef0e7578dd09608a6106736b82e5, cd1a677cad994021b19665ed476aea63f5d54f31 to before e84b48d31b5008932c0a0902982809fbaa1d3b70
Linux

Linux · 5.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ceph/mon_client.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22993

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-22994

Affected technology

linux kernel · from 5.18 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 1c194998252469cad00a08bd9ef0b99fd255c260 to before 368569bc546d3368ee9980ba79fc42fdff9a3365, 1c194998252469cad00a08bd9ef0b99fd255c260 to before 98676ee71fd4eafeb8be63c7f3f1905d40e03101, 1c194998252469cad00a08bd9ef0b99fd255c260 to before fb9ef40cccdbacce36029b305d0ef1e12e4fea38, 1c194998252469cad00a08bd9ef0b99fd255c260 to before 737be05a765761d7d7c9f7fe92274bd8e6f6951e, 1c194998252469cad00a08bd9ef0b99fd255c260 to before ec69daabe45256f98ac86c651b8ad1b2574489a7
Linux

Linux · 5.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/bpf/test_run.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22996

Affected technology

linux kernel · from 5.12 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · c4d7eb57687f358cd498ea3624519236af8db97e to before 7b3b902320214835013ce625053b0743a71c804c, c4d7eb57687f358cd498ea3624519236af8db97e to before dcb2ad755a16cb0ecd2dc98234d71a6e216ae7fe, c4d7eb57687f358cd498ea3624519236af8db97e to before a3d4f87d41f5140f1cf5c02fce5cdad2637f6244, c4d7eb57687f358cd498ea3624519236af8db97e to before 123eda2e5b1638e298e3a66bb1e64a8da92de5e1
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/en.h, drivers/net/ethernet/mellanox/mlx5/core/en_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22997

Affected technology

linux kernel · from 5.4 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 9d71dd0c70099914fcd063135da3c580865e924c to before a73e7d7e346dae1c22dc3e95b02ca464b12daf2c, 9d71dd0c70099914fcd063135da3c580865e924c to before adabf01c19561e42899da9de56a6a1da0e6b8a5b, 9d71dd0c70099914fcd063135da3c580865e924c to before b1d67607e97d489c0cfbbf55f48a76b00710b0e4, 9d71dd0c70099914fcd063135da3c580865e924c to before 809a437e27a3bf3c1c6c8c157773635552116f2b, 9d71dd0c70099914fcd063135da3c580865e924c to before cb2a610867bc379988bae0bb4b8bbc59c0decf1a, 9d71dd0c70099914fcd063135da3c580865e924c to before 6121b7564c725b632ffe4764abe85aa239d37703, 9d71dd0c70099914fcd063135da3c580865e924c to before 1809c82aa073a11b7d335ae932d81ce51a588a4a
Linux

Linux · 5.4
Linux

Component: Not specified by the source
File: net/can/j1939/transport.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22998

Affected technology

linux kernel · from 5.4.268 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.209 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.15.148 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 6.1.75 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.14 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7.2 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · f775f2621c2ac5cc3a0b3a64665dad4fb146e510 to before baabe43a0edefac8cd7b981ff87f967f6034dafe, 4cb3cf7177ae3666be7fb27d4ad4d72a295fb02d to before 76abc83a9d25593c2b7613c549413079c14a4686, 2871aa407007f6f531fae181ad252486e022df42 to before 7d75570002929d20e40110d6b03e46202c9d1bc7, 24e05760186dc070d3db190ca61efdbce23afc88 to before fdecd3b6aac10d5a18d0dc500fe57f8648b66cd4, efa56305908ba20de2104f1b8508c6a7401833be to before 3def5243150716be86599c2a1767c29c68838b6d, efa56305908ba20de2104f1b8508c6a7401833be to before 374b095e265fa27465f34780e0eb162ff1bef913, efa56305908ba20de2104f1b8508c6a7401833be to before 32b63acd78f577b332d976aa06b56e70d054cbba, ee5e7632e981673f42a50ade25e71e612e543d9d, 70154e8d015c9b4fb56c1a2ef1fc8b83d45c7f68, 5.10.209 to before 5.10.249, 5.15.148 to before 5.15.199, 6.1.75 to before 6.1.162, 6.6.14 to before 6.6.122, 5.4.268 to before 5.5, 6.7.2 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
Function: dereferences
File: drivers/nvme/target/tcp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-22999

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before 2a64fb9b47afffeb5dbab5fd3a518e1436dcc90e, 462dbc9101acd38e92eda93c0726857517a24bbd to before cff6cd703f41d8071995956142729e4bba160363, 462dbc9101acd38e92eda93c0726857517a24bbd to before f06f7635499bc806cbe2bbc8805c7cef8b1edddf, 462dbc9101acd38e92eda93c0726857517a24bbd to before 0a234660dc70ce45d771cbc76b20d925b73ec160, 462dbc9101acd38e92eda93c0726857517a24bbd to before 362e269bb03f7076ba9990e518aeddb898232e50, 462dbc9101acd38e92eda93c0726857517a24bbd to before e9d8f11652fa08c647bf7bba7dd8163241a332cd, 462dbc9101acd38e92eda93c0726857517a24bbd to before 3879cffd9d07aa0377c4b8835c4f64b4fb24ac78
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: net/sched/sch_qfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23000

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23001

Affected technology

linux kernel · from 3.18.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 3.18
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8133e85b8a3ec9f10d861e0002ec6037256e987e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 484919832e2db6ce1e8add92c469e5d459a516b5, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 232afc74a6dde0fe1830988e5827921f5ec9bb3f, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 15f6faf36e162532bec5cc05eb3fc622108bf2ed, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8518712a2ca952d6da2238c6f0a16b4ae5ea3f13, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 6dbead9c7677186f22b7981dd085a0feec1f038e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 7470a7a63dc162f07c26dbf960e41ee1e248d80e
Linux

Linux · 3.18
Linux

Component: Not specified by the source
File: drivers/net/macvlan.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23002

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23003

Affected technology

linux kernel · from 5.10.210 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.15.149 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 6.1.77 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.16 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7.4 (inclusive), before 6.8 (exclusive)
linux

linux kernel · from 6.8.1 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.8
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · a9bc32879a08f23cdb80a48c738017e39aea1080 to before f9c5c5b791d3850570796f9e067629474e613796, af6b5c50d47ab43e5272ad61935d0ed2e264d3f0 to before 64c71d60a21a9ed0a802483dcd422b5b24eb1abe, d54e4da98bbfa8c257bdca94c49652d81d18a4d8 to before 9e1c8c2a33d0a7b1f637b5d0602fe56ed10166af, 350a6640fac4b53564ec20aa3f4a0922cb0ba5e6 to before 2f03dafea0a8096a2eb60f551218b360e5bab9a3, 8d975c15c0cd744000ca386247432d57b21f9df0 to before df5ffde9669314500809bc498ae73d6d3d9519ac, 8d975c15c0cd744000ca386247432d57b21f9df0 to before b9f915340f25cae1562f18e1eb52deafca328414, 8d975c15c0cd744000ca386247432d57b21f9df0 to before 81c734dae203757fb3c9eee6f9896386940776bd, c835df3bcc14858ae9b27315dd7de76370b94f3a, 5.10.210 to before 5.10.249, 5.15.149 to before 5.15.199, 6.1.77 to before 6.1.162, 6.6.16 to before 6.6.122, 6.7.4 to before 6.8
Linux

Linux · 6.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/ip6_tunnel.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23004

Affected technology

linux kernel · from 3.6.1 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.12 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.18 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 3.6
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 78df76a065ae3b5dbcb9a29912adc02f697de498 to before 815db2363e51f0ef416947492d4dac5b7a520f56, 78df76a065ae3b5dbcb9a29912adc02f697de498 to before f24a52948c95e02facbca2b3b6eb5a225e27eb01, 78df76a065ae3b5dbcb9a29912adc02f697de498 to before 722de945216144af7cd4d39bdeb936108d2595a7, 78df76a065ae3b5dbcb9a29912adc02f697de498 to before 9a6f0c4d5796ab89b5a28a890ce542344d58bd69
Linux

Linux · 3.6
Linux

Component: Not specified by the source
File: net/core/dst.c, net/ipv4/route.c, net/ipv6/route.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23005

Affected technology

linux kernel · from 5.17.1 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 5.17
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 820a6ee944e74e57255ac2e90916ecdaade57b95 to before b5995c01ba53d84182ecb9492fc4d91cfe8a362d, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before 1e2848bda819af569dfe7ab186223855e092a2cb, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before f577508cc8a0adb8b4ebe9480bba7683b6149930, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before eea6f395ca502c4528314c8112da9b5d65f685eb, 820a6ee944e74e57255ac2e90916ecdaade57b95 to before b45f721775947a84996deb5c661602254ce25ce6
Linux

Linux · 5.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: arch/x86/kernel/fpu/core.c, arch/x86/kvm/x86.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23006

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23007

Affected technology

linux kernel · from 6.11.1 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.11
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · c546d6f438338017480d105ab597292da67f6f6a to before 765bf0a5880777c04ae98fc2a9f3b995737b3a64, c546d6f438338017480d105ab597292da67f6f6a to before d6072557b90e0c557df319a56f4a9dc482706d2c, c546d6f438338017480d105ab597292da67f6f6a to before ca22c566b89164f6e670af56ecc45f47ef3df819
Linux

Linux · 6.11
Linux

Component: Not specified by the source
File: block/bio-integrity-auto.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23008

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23009

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23010

Affected technology

linux kernel · from 6.1.120 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.64 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.11.11 (inclusive), before 6.12 (exclusive)
linux

linux kernel · from 6.12.2 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13.1 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.13
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · ca97dd10424860a3806ad3a9e26b9dce2901ee0c to before 6e89d60b4f03014f7d412ce64b17a840840d490e, 836deb96383ed9c1a411f172954d74b3f74ec6ac to before 9356b69d03d0f50cce91cebdabd33dda023fbd64, cb74207ef98317f8874a0b9780bb339c2eb700b0 to before 2684610a9c9c53f262fd864fa5c407e79f304804, 00b5b7aab9e422d00d5a9d03d7e0760a76b5d57f to before 8b6dcb565e419846bd521e31d5e1f98e4d0e1179, 00b5b7aab9e422d00d5a9d03d7e0760a76b5d57f to before ddf96c393a33aef4887e2e406c76c2f8cda1419c, 851b3bb105c595cc20b8dcc1b4de029061ce2b76, 6.1.120 to before 6.1.162, 6.6.64 to before 6.6.122, 6.12.2 to before 6.12.67, 6.11.11 to before 6.12
Linux

Linux · 6.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/addrconf.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23011

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · c54419321455631079c7d6e60bc732dd0c5914c5 to before eeb9a521de40c6fadccc12fa5205e5a1b364d5a8, c54419321455631079c7d6e60bc732dd0c5914c5 to before 8d5b6b2d79c1c22a5b0db1187a6439dff375a022, c54419321455631079c7d6e60bc732dd0c5914c5 to before 2ecf0aa7cc262472a9599cc51ba02ada0897a17a, c54419321455631079c7d6e60bc732dd0c5914c5 to before 06fe0801396a36cab865b34f666de1d65bc5ce8e, c54419321455631079c7d6e60bc732dd0c5914c5 to before aa57bfea4674e6da8104fa3a37760a6f5f255dad, c54419321455631079c7d6e60bc732dd0c5914c5 to before 554201ed0a8f4d32e719f42caeaeb2735a9ed6ca, c54419321455631079c7d6e60bc732dd0c5914c5 to before e67c577d89894811ce4dcd1a9ed29d8b63476667
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/ip_gre.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23012

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23013

Affected technology

linux kernel · from 6.9.1 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.9
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before aa05a8371ae4a452df623f7202c72409d3c50e40, 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before aa4c066229b05fc3d3c5f42693d25b1828533b6e, 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before f93fc5d12d69012788f82151bee55fce937e1432
Linux

Linux · 6.9
Linux

Component: Not specified by the source
File: drivers/net/ethernet/marvell/octeon_ep_vf/octep_vf_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23014

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23015

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23017

Affected technology

linux kernel · from 6.7.1 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 0fe45467a1041ea3657a7fa3a791c84c104fbd34 to before f32ae3cfc976074e9c5927893ce49bcf12f53748, 0fe45467a1041ea3657a7fa3a791c84c104fbd34 to before a514c374edcd33581cdcccf8faa7cc606a600319, 0fe45467a1041ea3657a7fa3a791c84c104fbd34 to before 4d792219fe6f891b5b557a607ac8a0a14eda6e38
Linux

Linux · 6.7
Linux

Component: Not specified by the source
File: drivers/net/ethernet/intel/idpf/idpf_lib.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23018

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23019

Affected technology

linux kernel · from 5.10.1 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 5.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 8a4333b2818f0d853b43e139936c20659366e4a0, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 325aea74be7e192b5c947c782da23b0d19a5fda2, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 94e070cd50790317fba7787ae6006934b7edcb6f, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 3950054c9512add0cc79ab7e72b6d2f9f675e25b, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before 326a4b7e61d01db3507f71c8bb5e85362f607064, 34dd1710f5a3c9a7dc78e1ff6de69a19d407db25 to before a428e0da1248c353557970848994f35fd3f005e2
Linux

Linux · 5.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/marvell/prestera/prestera_devlink.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23020

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23021

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.248 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.198 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.161 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 323b34963d113efb566635f43858f40cce01d5f9 to before 5397ea6d21c35a17707e201a60761bdee00bcc4e, 323b34963d113efb566635f43858f40cce01d5f9 to before a40af9a2904a1ab8ce61866ebe2a894ef30754ba, 323b34963d113efb566635f43858f40cce01d5f9 to before ac5d92d2826dec51e5d4c6854865bc5817277452, 323b34963d113efb566635f43858f40cce01d5f9 to before 93f18eaa190374e0f2d253e3b1a65cee19a7abe6, 323b34963d113efb566635f43858f40cce01d5f9 to before 471dfb97599eec74e0476046b3ef8e7037f27b34, 323b34963d113efb566635f43858f40cce01d5f9 to before ce6eef731aba23a988decea1df3b08cf978f7b01, 323b34963d113efb566635f43858f40cce01d5f9 to before afa27621a28af317523e0836dad430bec551eb54
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: drivers/net/usb/pegasus.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23022

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23023

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23024

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23025

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23026

Affected technology

linux kernel · from 5.11.1 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 5.11
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 4532f18e4ab36def1f55cd936d0fc002b2ce34c2, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 694ab1f6f16cb69f7c5ef2452b22ba7b00a3c7c7, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 6bf4ef078fd11910988889a6c0b3698d2e0c89af, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 01b1d781394fc9b83015e3a3cd46b17bda842bd8, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 55a67ba5ac4cebfd54cc8305d4d57a0f1dfe6a85, 5d0c3533a19f48e5e7e73806a3e4b29cd4364130 to before 3f747004bbd641131d9396d87b5d2d3d1e182728
Linux

Linux · 5.11
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: directly
File: drivers/dma/qcom/gpi.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23030

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23031

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23032

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23033

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23034

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23035

Affected technology

Linux · c4d7eb57687f358cd498ea3624519236af8db97e to before 444b0e44aa43081d4ddd138575e5a2dcabf439c7, c4d7eb57687f358cd498ea3624519236af8db97e to before a7625bacaa8c8c2bfcde6dd6d1397bd63ad82b02, c4d7eb57687f358cd498ea3624519236af8db97e to before 66a25f6b7c0bfd84e6d27b536f5d24116dbd52da, c4d7eb57687f358cd498ea3624519236af8db97e to before 4ef8512e1427111f7ba92b4a847d181ff0aeec42
Linux

Linux · 5.12
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/en.h, drivers/net/ethernet/mellanox/mlx5/core/en_main.c, drivers/net/ethernet/mellanox/mlx5/core/en_rep.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23036

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23037

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23038

Affected technology

Linux · d67ae825a59d639e4d8b82413af84d854617a87e to before e2dde5dafb80f1af4028ed10ad255f42af71c784, d67ae825a59d639e4d8b82413af84d854617a87e to before 27c90d8ed81e7a289c9fe41b5e31d8bb609a3385, d67ae825a59d639e4d8b82413af84d854617a87e to before 34b9dd179818ff7af2b36410985fd8166573c62d, d67ae825a59d639e4d8b82413af84d854617a87e to before 869862056e100973e76ce9f5f1b01837771b7722, d67ae825a59d639e4d8b82413af84d854617a87e to before 86da7efd12295a7e2b4abde5e5984c821edd938f, d67ae825a59d639e4d8b82413af84d854617a87e to before ed5d3f2f6885eb99f729e6ffd946e3aa058bd3eb, d67ae825a59d639e4d8b82413af84d854617a87e to before 0c728083654f0066f5e10a1d2b0bd0907af19a58
Linux

Linux · 4.0
Linux

RUGGEDCOM RST2428P · 0 to before V4.0
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: jumps
File: fs/nfs/flexfilelayout/flexfilelayoutdev.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23042

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23044

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23045

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23046

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23047

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23049

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23050

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23051

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23052

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23053

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23054

Affected technology

Linux · 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to before 8288136f508e78eb3563e7073975999cf225a2f9, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to before 82c9039c8ebb715753a40434df714f865a3aec9c, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to before 4cd55c609e85ae2313248ef1a33619a3eef44a16, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to before 11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to before d23564955811da493f34412d7de60fa268c8cb50
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/hyperv/netvsc_drv.c

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23055

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23056

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23057

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23058

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23059

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23061

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before d9d824582f2ec76459ffab449e9b05c7bc49645c, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 40a3334ffda479c63e416e61ff086485e24401f7, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before c1b39fa24c140bc616f51fef4175c1743e2bb132, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 7c308f7530bffafa994e0aa8dc651a312f4b9ff4, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 94a7fc42e21c7d9d1c49778cd1db52de5df52a01, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 3b1a593eab941c3f32417896cc7df564191f2482, 080f40a6fa28dab299da7a652e444b1e2d9231e7 to before 248e8e1a125fa875158df521b30f2cc7e27eeeaa
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23062

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23063

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23064

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23065

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23066

Affected technology

linux kernel · from 4.11 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 8fd3b5e297854a4da0f273169baf4b1b7b257b97, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before c198628f3fca5c874d93874c233014d336e09f64, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before c6cebcb4e0b3140ec2ace45c020a9049527385d1, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 0464bf75590da75b8413c3e758c04647b4cdb3c6, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before cf969bddd6e69c5777fa89dc88402204e72f312a, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 930114425065f7ace6e0c0630fab4af75e059ea8, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 2c28769a51deb6022d7fbd499987e237a01dd63a
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: include/trace/events/rxrpc.h, net/rxrpc/recvmsg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23067

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23068

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23069

Affected technology

linux kernel · from 4.8 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 06a8fc78367d070720af960dcecec917d3ae5f3b to before d96de882d6b99955604669d962ae14e94b66a551, 06a8fc78367d070720af960dcecec917d3ae5f3b to before 02f9af192b98d15883c70dd41ac76d1b0217c899, 06a8fc78367d070720af960dcecec917d3ae5f3b to before d05bc313788f0684b27f0f5b60c52a844669b542, 06a8fc78367d070720af960dcecec917d3ae5f3b to before ec0f1b3da8061be3173d1c39faaf9504f91942c3, 06a8fc78367d070720af960dcecec917d3ae5f3b to before 3ef3d52a1a9860d094395c7a3e593f3aa26ff012
Linux

Linux · 4.8
Linux

Component: Not specified by the source
File: net/vmw_vsock/virtio_transport_common.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23070

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23071

Affected technology

linux kernel · from 4.15 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before e1a7072bc4f958c9e852dc7e57e39f12b0bb44b5, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 766e243ae8c8b27087a4cc605752c0d5ee2daeab, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before f1e2fe26a51eca95b41420af76d22c2e613efd5e, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 24f31be6ad70537fd7706269d99c92cade465a09, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 4aab0ca0a0f7760e33edcb4e47576064d05128f5, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before c2d2cf710dc3ee1a69e00b4ed8de607a92a07889, 8698b9364710e7bac84b3af07dd410e39c8c2e08 to before 4b58aac989c1e3fafb1c68a733811859df388250
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/base/regmap/regmap.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23072

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23073

Affected technology

linux kernel · from 3.15 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 49ef094fdbc3526e5db2aebb404b84f79c5603dc, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 0d7c9e793e351cbbe9e06a9ca47d77b6ad288fb0, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 7c54d0c3e2cad4300be721ec2aecfcf8a63bc9f4, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 7761d7801f40e61069b4df3db88b36d80d089f8a, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 99129d80a5d4989ef8566f434f3589f60f28042b, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 31efbcff90884ea5f65bf3d1de01267db51ee3d1, dad0d04fa7ba41ce603a01e8e64967650303e9a2 to before 4f431d88ea8093afc7ba55edf4652978c5a68f33
Linux

Linux · 3.15
Linux

Component: Not specified by the source
File: drivers/net/wireless/rsi/rsi_91x_mac80211.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23075

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23076

Affected technology

linux kernel · from 2.6.31 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 8cc72361481f00253f1e468ade5795427386d593 to before 6524205326e0c1a21263b5c14e48e14ef7e449ae, 8cc72361481f00253f1e468ade5795427386d593 to before afca7ff5d5d4d63a1acb95461f55ca9a729feedf, 8cc72361481f00253f1e468ade5795427386d593 to before 8c1d09806e1441bc6a54b9a4f2818918046d5174, 8cc72361481f00253f1e468ade5795427386d593 to before a8c42d11b0526a89192bd2f79facb4c60c8a1f38, 8cc72361481f00253f1e468ade5795427386d593 to before d77ba72558cd66704f0fb7e0969f697e87c0f71c, 8cc72361481f00253f1e468ade5795427386d593 to before 873e2360d247eeee642878fcc3398babff7e387c, 8cc72361481f00253f1e468ade5795427386d593 to before 61006c540cbdedea83b05577dc7fb7fa18fe1276
Linux

Linux · 2.6.31
Linux

Component: Not specified by the source
File: sound/pci/ctxfi/ctamixer.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23077

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23078

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23079

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23080

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23081

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23083

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before c7498f9bc390479ccfad7c7f2332237ff4945b03, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 611ef4bd9c73d9e6d87bed57a635ff1fdd8c91ea, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 6e983789b7588ee59cbf303583546c043bad8e19, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 1cc98b8887cabb1808d2f4a37cd10a7be7574771, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before b7db31a52c3862a1a32202a273a4c32e7f5f4823, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 9b75dff8446ec871030d8daf5a69e74f5fe8b956, 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 7a9bc9e3f42391e4c187e099263cf7a1c4b69ff5
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: Documentation/netlink/specs/fou.yaml, net/ipv4/fou_nl.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23084

Affected technology

linux kernel · from 3.12 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 4cba480c9b9a3861a515262225cb53a1f5978344, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 92c6dc181a18e6e0ddb872ed35cb48a9274829e4, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 6c3e00888dbec887125a08b51a705b9b163fcdd1, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before e206fb415db36bad52bb90c08d46ce71ffbe8a80, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 47ffb4dcffe336f4a7bd0f3284be7aadc6484698, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 31410a01a86bcb98c798d01061abf1f789c4f75a, 95046b927a54f461766f83a212c6a93bc5fd2e67 to before 8215794403d264739cc676668087512950b2ff31
Linux

Linux · 3.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: will
File: drivers/net/ethernet/emulex/benet/be_cmds.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23085

Affected technology

linux kernel · from 3.19 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before e332b3b69e5b3acf07204a4b185071bab15c2b88, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before e2f9c751f73a2d5bb62d94ab030aec118a811f27, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 85215d633983233809f7d4dad163b953331b8238, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 1b323391560354d8c515de8658b057a1daa82adb, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 084ba3b99f2dfd991ce7e84fb17117319ec3cd9f, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 03faa61eb4b9ca9aa09bd91d4c3773d8e7b1ac98, cc2d3216f53c9fff0030eb71cacc4ce5f39d1d7e to before 8d76a7d89c12d08382b66e2f21f20d0627d14859
Linux

Linux · 3.19
Linux

Component: Not specified by the source
File: drivers/irqchip/irq-gic-v3-its.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23086

Affected technology

linux kernel · from 4.8 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 06a8fc78367d070720af960dcecec917d3ae5f3b to before fef7110ae5617555c792a2bb4d27878d84583adf, 06a8fc78367d070720af960dcecec917d3ae5f3b to before d9d5f222558b42f6277eafaaa6080966faf37676, 06a8fc78367d070720af960dcecec917d3ae5f3b to before c0e42fb0e054c2b2ec4ee80f48ccd256ae0227ce, 06a8fc78367d070720af960dcecec917d3ae5f3b to before 84ef86aa7120449828d1e0ce438c499014839711, 06a8fc78367d070720af960dcecec917d3ae5f3b to before 8ee784fdf006cbe8739cfa093f54d326cbf54037
Linux

Linux · 4.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/vmw_vsock/virtio_transport_common.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23087

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · d9d660f6e562a47b4065eeb7e538910b0471b988 to before a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 427b0fb30ddec3bad05dcd73b00718f98c7026d2, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 4a975c72429b050c234405668b742cdecc11548e, d9d660f6e562a47b4065eeb7e538910b0471b988 to before f86264ec0e2b102fcd49bf3e4f32fee669d482fc, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 32e52b56056daf0f0881fd9254706acf25b4be97, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 24c441f0e24da175d7912095663f526ac480dc4f, d9d660f6e562a47b4065eeb7e538910b0471b988 to before 901a5f309daba412e2a30364d7ec1492fa11c32c
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/xen/xen-scsiback.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23088

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23089

Affected technology

linux kernel · from 2.6.13 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 51b1aa6fe7dc87356ba58df06afb9677c9b841ea, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 56fb6efd5d04caf6f14994d51ec85393b9a896c6, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 7009daeefa945973a530b2f605fe445fc03747af, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 7bff0156d13f0ad9436e5178b979b063d59f572a, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before e6f103a22b08daf5df2f4aa158081840e5910963, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before dc1a5dd80af1ee1f29d8375b12dd7625f6294dad, 6639b6c2367f884ca172b78d69f7da17bfab2e5e to before 930e69757b74c3ae083b0c3c7419bfe7f0edc7b2
Linux

Linux · 2.6.13
Linux

Component: Not specified by the source
File: sound/usb/mixer.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23090

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23092

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23093

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23094

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23095

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 886f186328b718400dbf79e1bc8cbcbd710ab766, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 380a82d36e37db49fd41ecc378c22fd29392e96a, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 536f5bbc322eb1e175bdd1ced22b236a951c4d8f, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before f87b9b7a618c82e7465e872eb10e14c803871892, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before ce569b389a5c78d64788a5ea94560e17fa574b35, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 5437a279804ced8088cabb945dba88a26d828f8c, 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 9a56796ad258786d3624eef5aefba394fc9bdded
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/ipv4/fou_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23096

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23097

Affected technology

linux kernel · from 5.9.9 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 5.10
linux

linux kernel · 5.10 · update rc4
linux

linux kernel · 5.10 · update rc5
linux

linux kernel · 5.10 · update rc6
linux

linux kernel · 5.10 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 336bf30eb76580b579dc711ded5d599d905c0217 to before e7396d23f9d5739f56cf9ab430c3a169f5508394, 336bf30eb76580b579dc711ded5d599d905c0217 to before ad97b9a55246eb940a26ac977f80892a395cabf9, 336bf30eb76580b579dc711ded5d599d905c0217 to before 5edb9854f8df5428b40990a1c7d60507da5bd330, 336bf30eb76580b579dc711ded5d599d905c0217 to before 526394af4e8ade89cacd1a9ce2b97712712fcc34, 336bf30eb76580b579dc711ded5d599d905c0217 to before b75070823b89009f5123fd0e05a8e0c3d39937c1, 336bf30eb76580b579dc711ded5d599d905c0217 to before 1b68efce6dd483d22f50d0d3800c4cfda14b1305, 336bf30eb76580b579dc711ded5d599d905c0217 to before b7880cb166ab62c2409046b2347261abf701530e, ef792d6ce0db6a56e56743b1de1716a982c3b851, 5.9.9 to before 5.10
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: mm/migrate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23098

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23099

Affected technology

linux kernel · from 2.6.24 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 19266182b82e9100c799d8a29f5e0452f0bf7703, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 72925dbb0c8c7b16bf922e93c6cc03cbd8c955c4, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 5063b2cd9b27d35ab788d707d7858ded0acc8f1d, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 80c881e53a4fa0a80fa4bef7bc0ead0e8e88940d, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before ef68afb1bee8d35a18896c27d7358079353d8d8a, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before 43dee6f7ef1d228821de1b61c292af3744c8d7da, 872254dd6b1f80cb95ee9e2e22980888533fc293 to before c84fcb79e5dbde0b8d5aeeaf04282d2149aebcf6
Linux

Linux · 2.6.24
Linux

Component: Not specified by the source
File: drivers/net/bonding/bond_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23100

Affected technology

linux kernel · from 5.10.239 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.186 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.142 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.6.72 (inclusive), before 6.6.127 (exclusive)
linux

linux kernel · from 6.12.9 (inclusive), before 6.12.74 (exclusive)
linux

linux kernel · from 6.13.1 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.13
linux

linux kernel · 6.13 · update rc6
linux

linux kernel · 6.13 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 94b4b41d0cdf5cfd4d4325bc0e6e9e0d0e996133 to before 8ae48255bcb17b32436be97553dca848730d365f, 8410996eb6fea116fe1483ed977aacf580eee7b4 to before bf3c2affe245cf831866ddc8f736ae6a22cdc11c, 02333ac1c35370517a19a4a131332a9690c6a5c7 to before 5b2aec77f92265a9028c5f632bdd9af5b57ec3a3, 56b274473d6e7e7375f2d0a2b4aca11d67c6b52f to before 51dcf459845fd28f5a0d83d408a379b274ec5cc5, 2e31443a0d18ae43b9d29e02bf0563f07772193d to before 3a18b452dd5f7f1652c2e92f8ae769aa17a66c9e, 59d9094df3d79443937add8700b2ef1a866b1081 to before 69c4e241ff13545d410a8b2a688c932182a858bf, 59d9094df3d79443937add8700b2ef1a866b1081 to before ca1a47cd3f5f4c46ca188b1c9a27af87d1ab2216, 5.10.239 to before 5.10.253, 5.15.186 to before 5.15.203, 6.1.142 to before 6.1.167, 6.6.72 to before 6.6.127, 6.12.9 to before 6.12.74
Linux

Linux · 6.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: include/linux/hugetlb.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23101

Affected technology

linux kernel · from 3.7 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · d23a22a74fded23a12434c9463fe66cec2b0afcd to before f7a6df659af777058833802c29b3b7974db5e78a, d23a22a74fded23a12434c9463fe66cec2b0afcd to before d117fdcb21b05c0e0460261d017b92303cd9ba77, d23a22a74fded23a12434c9463fe66cec2b0afcd to before e90c861411fc84629a240384b0a72830539d3386, d23a22a74fded23a12434c9463fe66cec2b0afcd to before 2757f7748ce2d0fa44112024907bafb37e104d6e, d23a22a74fded23a12434c9463fe66cec2b0afcd to before da565bf98c9ad0eabcb09fc97859e0b52f98b7c3, d23a22a74fded23a12434c9463fe66cec2b0afcd to before 78822628165f3d817382f67f91129161159ca234, d23a22a74fded23a12434c9463fe66cec2b0afcd to before d1883cefd31752f0504b94c3bcfa1f6d511d6e87
Linux

Linux · 3.7
Linux

Component: Not specified by the source
File: drivers/leds/led-class.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23102

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23103

Affected technology

linux kernel · from 4.17 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 8230819494b3bf284ca7262ac5f877333147b937 to before 3c149b662cbb202a450e81f938e702ba333864ad, 8230819494b3bf284ca7262ac5f877333147b937 to before 70feb16e3fbfb10b15de1396557c38e99f1ab8df, 8230819494b3bf284ca7262ac5f877333147b937 to before 88f83e6c9cdb46b8c8ddd0ba01393362963cf589, 8230819494b3bf284ca7262ac5f877333147b937 to before 04ba6de6eff61238e5397c14ac26a6578c7735a5, 8230819494b3bf284ca7262ac5f877333147b937 to before 1f300c10d92c547c3a7d978e1212ff52f18256ed, 8230819494b3bf284ca7262ac5f877333147b937 to before 6a81e2db096913d7e43aada1c350c1282e76db39, 8230819494b3bf284ca7262ac5f877333147b937 to before d3ba32162488283c0a4c5bedd8817aec91748802
Linux

Linux · 4.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ipvlan/ipvlan.h, drivers/net/ipvlan/ipvlan_core.c, drivers/net/ipvlan/ipvlan_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23104

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23105

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 462dbc9101acd38e92eda93c0726857517a24bbd to before fac2c67bb2bb732eae4283e45fc338af7e08c254, 462dbc9101acd38e92eda93c0726857517a24bbd to before b8c24cf5268fb3bfb8d16324c3dbb985f698c835, 462dbc9101acd38e92eda93c0726857517a24bbd to before f27047abf7cac1b6f90c3ad60de21ef9f717c26d, 462dbc9101acd38e92eda93c0726857517a24bbd to before 93b8635974fb050c43d07e35e5edfe6e685ca28a, 462dbc9101acd38e92eda93c0726857517a24bbd to before abd9fc26ea577561a5ef6241a1b058755ffdad0c, 462dbc9101acd38e92eda93c0726857517a24bbd to before 77f1afd0bb4d5da95236f6114e6d0dfcde187ff6, 462dbc9101acd38e92eda93c0726857517a24bbd to before d837fbee92453fbb829f950c8e7cf76207d73f33
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: net/sched/sch_qfq.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23106

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23107

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23108

Affected technology

linux kernel · from 3.9 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 0024d8ad1639e32d717445c69ca813fd19c2a91c to before feb8243eaea7efd5279b19667d7189fd8654c87a, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before ef6e608e5ee71eca0cd3475c737e684cef24f240, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before 60719661b4cbd7ffbed1a0e0fa3bbc82d8bd2be9, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before 59ff56992bba28051ad67cd8cc7b0edfe7280796, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before ea4a98e924164586066b39f29bfcc7cc9da108cd, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before 07e9373739c6388af9d99797cdb2e79dbbcbe92b, 0024d8ad1639e32d717445c69ca813fd19c2a91c to before f7a980b3b8f80fe367f679da376cf76e800f9480
Linux

Linux · 3.9
Linux

Component: Not specified by the source
File: drivers/net/can/usb/usb_8dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23109

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23110

Affected technology

linux kernel · from 5.5 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 6eb045e092efefafc6687409a6fa6d1dabf0fb69 to before cc872e35c0df80062abc71268d690a2f749e542e, 6eb045e092efefafc6687409a6fa6d1dabf0fb69 to before 6d9a367be356101963c249ebf10ea10b32886607, 6eb045e092efefafc6687409a6fa6d1dabf0fb69 to before 9fdc6f28d5e81350ab1d2cac8389062bd09e61e1, 6eb045e092efefafc6687409a6fa6d1dabf0fb69 to before 64ae21b9c4f0c7e60cf47a53fa7ab68852079ef0, 6eb045e092efefafc6687409a6fa6d1dabf0fb69 to before 219f009ebfd1ef3970888ee9eef4c8a06357f862, 6eb045e092efefafc6687409a6fa6d1dabf0fb69 to before fe2f8ad6f0999db3b318359a01ee0108c703a8c3
Linux

Linux · 5.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/scsi/scsi_error.c, drivers/scsi/scsi_lib.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23113

Affected technology

linux kernel · from 5.12.1 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 5.12
linux

linux kernel · 5.12 · update rc7
linux

linux kernel · 5.12 · update rc8
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · c60eb049f4a19ddddcd3ee97a9c79ab8066a6a03 to before 27e47500fac23d15b7dc93ff650bc4844d2581bd, c60eb049f4a19ddddcd3ee97a9c79ab8066a6a03 to before d05d99573f81a091547b1778b9a50120f5d6c68a, c60eb049f4a19ddddcd3ee97a9c79ab8066a6a03 to before 85eb83694a91c89d9abe615d717c0053c3efa714, c60eb049f4a19ddddcd3ee97a9c79ab8066a6a03 to before 2e8ca1078b14142db2ce51cbd18ff9971560046b, c60eb049f4a19ddddcd3ee97a9c79ab8066a6a03 to before bdf0bf73006ea8af9327cdb85cfdff4c23a5f966, c60eb049f4a19ddddcd3ee97a9c79ab8066a6a03 to before 10dc959398175736e495f71c771f8641e1ca1907
Linux

Linux · 5.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: io_uring/io-wq.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23114

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23115

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23116

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23118

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23119

Affected technology

linux kernel · from 5.5 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 58deb77cc52da9360d20676e68dd215742cbe473 to before 8e53780732ee881394406f79da5263b81eb48f7e, 58deb77cc52da9360d20676e68dd215742cbe473 to before 3be945abdd228fd00f6afcf8d137002867a4651b, 58deb77cc52da9360d20676e68dd215742cbe473 to before f4faaa1297ecf3255a8591fff2633df05bd5ec84, 58deb77cc52da9360d20676e68dd215742cbe473 to before 0efee0b992f28bd5ee01c7a86ef6a307c42eb907, 58deb77cc52da9360d20676e68dd215742cbe473 to before bc3c8d2493c6f4d2038844dc8b7ee93de050f7fa, 58deb77cc52da9360d20676e68dd215742cbe473 to before de97735a40a144974bf3896ee4cc0270db2e47db, 58deb77cc52da9360d20676e68dd215742cbe473 to before 5f9b329096596b7e53e07d041d7fca4cbe1be752
Linux

Linux · 5.5
Linux

Component: Not specified by the source
File: drivers/net/bonding/bond_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23120

Affected technology

linux kernel · from 3.16.57 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.15.8 (inclusive), before 4.16 (exclusive)
linux

linux kernel · from 4.16.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 4.16
linux

linux kernel · 4.16 · update rc5
linux

linux kernel · 4.16 · update rc6
linux

linux kernel · 4.16 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 1f63ca44b4f419a1663d94d1bb0b4e2beb73fdb4, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 36c40a80109f1771d59558050b1a71e13c60c759, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before eae074dab764ea181bbed5e88626889319177498, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 68e92085427c84e7679ddb53c0d68836d220b6e7, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 3d6d414b214ce31659bded2f8df50c93a3769474, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 32d417497b79efb403d75f4c185fe6fd9d64b94f, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 7a29f6bf60f2590fe5e9c4decb451e19afad2bcf, 15df699fdc5af46a9fb15ae2d9326294852de5b5, 18bdaefc715b4530b4b2fe670506bb47713664cc, 3.16.57 to before 3.17, 4.15.8 to before 4.16
Linux

Linux · 4.16
Linux

Component: Not specified by the source
File: net/l2tp/l2tp_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23121

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 1b2b03f8e514e4f68e293846ba511a948b80243c to before d5d99cb9e0839093cd53aa3b28176fce2f820ca0, 1b2b03f8e514e4f68e293846ba511a948b80243c to before 13f3b3b87068898056db4c79ee67052fbde11d43, 1b2b03f8e514e4f68e293846ba511a948b80243c to before accc3f8266d2a49881dbcf78c459477f4efa0ff3, 1b2b03f8e514e4f68e293846ba511a948b80243c to before fc8ba17fd3337bd8b1913c30b95df0fee00d8fb7, 1b2b03f8e514e4f68e293846ba511a948b80243c to before aa6e33cd74ca4965f2bbcb025e0b672fb0168a69, 1b2b03f8e514e4f68e293846ba511a948b80243c to before 7ac345a93af31358e18e9606eb7b354691bf6757, 1b2b03f8e514e4f68e293846ba511a948b80243c to before 8175dbf174d487afab81e936a862a8d9b8a1ccb6
Linux

Linux · 2.6.27
Linux

Component: Not specified by the source
File: drivers/isdn/mISDN/timerdev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23122

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23123

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23124

Affected technology

linux kernel · from 5.15 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 4630897eb1a039b5d7b737b8dc9521d9d4b568b5, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 2619499169fb1c2ac4974b0f2d87767fb543582b, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before fad8f4ff7928f4d52a062ffdcffa484989c79c47, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 2a2b9d25f801afecf2f83cacce98afa8fd73e3c9, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before e3c1040252e598f7b4e33a42dc7c38519bc22428, 49b99da2c9ce13ffcd93fe3a0f5670791c1d76f7 to before 9a063f96d87efc3a6cc667f8de096a3d38d74bb5
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: net/ipv6/ndisc.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23125

Affected technology

linux kernel · from 2.6.24 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before 5a309bedf02ee08b0653215f06c94d61ec7a214a, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before 784428ab1889eb185a1459e9d6bc52df33d572ef, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before e94294798548e8cfbd80869e1d2f97efce92582c, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before e7e81abbcc5620c9532080538f9709a6ea382855, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before bf2b543b3cc4ebb4ab5bca4f8dfa5612035d45b8, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before 0c4adb1f391a7b92a0405e9d7c05624c0d9f8a65, 730fc3d05cd4ba4c9ce2de91f3d43349e95dbbf5 to before a80c9d945aef55b23b54838334345f20251dad83
Linux

Linux · 2.6.24
Linux

Component: Not specified by the source
File: net/sctp/sm_statefuns.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23126

Affected technology

linux kernel · from 4.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 31d3ad832948c75139b0e5b653912f7898a1d5d5 to before 3f560cfc7706029294132482fff5d1bc7884b70d, 31d3ad832948c75139b0e5b653912f7898a1d5d5 to before f1f9cfd2f46a73b7de2982d01be822eac3a0efaa, 31d3ad832948c75139b0e5b653912f7898a1d5d5 to before d77379ca82efcb2fe563359cc795027d680410db, 31d3ad832948c75139b0e5b653912f7898a1d5d5 to before 68462ecc40ea8f780fb3c74ebfddd05506bb731b, 31d3ad832948c75139b0e5b653912f7898a1d5d5 to before b97d5eedf4976cc94321243be83b39efe81a0e15
Linux

Linux · 4.16
Linux

Component: Not specified by the source
File: drivers/net/netdevsim/bpf.c, drivers/net/netdevsim/dev.c, drivers/net/netdevsim/netdevsim.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23128

Affected technology

linux kernel · from 6.1 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 122b7cb80f7d468fcc2d18cf7eb320f09f310a96, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 8557bdd9af8dd04911fba56ff92b17842b0b5c7f, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 9773a886f26766a8db92d4b342b620a82c2de7dd, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before 6e32070d29d1a35d8f4b3c03babf6c0e5efd1d08, 89245600941e4e0f87d77f60ee269b5e61ef4e49 to before e2f8216ca2d8e61a23cb6ec355616339667e0ba6
Linux

Linux · 6.1
Linux

Component: Not specified by the source
File: arch/arm64/kernel/hibernate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23129

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23130

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23131

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23133

Affected technology

linux kernel · from 4.16 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before e2dda298ef809aa201ea7c0904c4d064f6c497cb, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before fc8da65f9fe1bc6802f8240b342cfff4f5c7e841, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before b0ad924332a96550a84b8c0ae5483e7042d65fa9, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 1928851334ecfd6e0d663121ab69ac639d4217a6, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 5d6fa4d2c9799c09389588da5118a72d97d87e92, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 07f363f305793baecad41816f73056252f3df61e, 2a1e1ad3fd37a632b61f50e73dafddb4b0fa57f1 to before 9282a1e171ad8d2205067e8ec3bbe4e3cef4f29f
Linux

Linux · 4.16
Linux

Component: Not specified by the source
File: drivers/net/wireless/ath/ath10k/ce.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23135

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23136

Affected technology

linux kernel · from 6.6 (inclusive), before 6.6.121 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.66 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · f628d799972799023d32c2542bb2639eb8c4f84e to before 90a60fe61908afa0eaf7f8fcf1421b9b50e5f7ff, f628d799972799023d32c2542bb2639eb8c4f84e to before e94075e950a6598e710b9f7dffea5aa388f40313, f628d799972799023d32c2542bb2639eb8c4f84e to before 10b7c72810364226f7b27916ea3e2a4f870bc04b, f628d799972799023d32c2542bb2639eb8c4f84e to before 11194b416ef95012c2cfe5f546d71af07b639e93
Linux

Linux · 6.6
Linux

Component: Not specified by the source
File: net/ceph/osd_client.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23137

Affected technology

linux kernel · from 3.18 (inclusive), before 6.18.6 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

Linux · 2eb46da2a760e5764c48b752a5ef320e02b96b21 to before 4c7ad40c285ab85e3614433e063f14aac2e2fe17, 2eb46da2a760e5764c48b752a5ef320e02b96b21 to before 58baf98d1bdab897fd796f39a16061bade229d71, 2eb46da2a760e5764c48b752a5ef320e02b96b21 to before f09b0f705bd7197863b90256ef533a6414d1db2c, 2eb46da2a760e5764c48b752a5ef320e02b96b21 to before 235a1eb8d2dcc49a6cf0a5ee1aa85544a5d0054b
Linux

Linux · 3.18
Linux

Component: Not specified by the source
File: drivers/of/unittest.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23138

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23139

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23140

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23141

Affected technology

linux kernel · from 4.11 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 82bfb2e7b645c8f228dc3b6d3b27b0b10125ca4f to before 901e581bfc44d181f7d9c3f11880dac3e89deb2e, 82bfb2e7b645c8f228dc3b6d3b27b0b10125ca4f to before d948055bd46a9c14d1d4217aed65c5c258c32903, 82bfb2e7b645c8f228dc3b6d3b27b0b10125ca4f to before f2dc6ab3a14c2d2eb0b14783427eb9b03bf631c9, 82bfb2e7b645c8f228dc3b6d3b27b0b10125ca4f to before db00636643e66898d79f2530ac9c56ebd5eca369, 82bfb2e7b645c8f228dc3b6d3b27b0b10125ca4f to before 39f83f10772310ba4a77f2b5256aaf36994ef7e8, 82bfb2e7b645c8f228dc3b6d3b27b0b10125ca4f to before 08b096c1372cd69627f4f559fb47c9fb67a52b39
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: fs/btrfs/send.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23142

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23143

Affected technology

linux kernel · from 6.15 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 4c47aff10f6f0a2506dc2126c17ccd4c42bfa211 to before d1e9614a142eff34c93e94a15a71ad0e806799c4, ed3100e90d0d120a045a551b85eb43cf2527e885 to before ae48108c2310f1dd700e0dbb655c2f1d92ed00fc, ed3100e90d0d120a045a551b85eb43cf2527e885 to before 4156c3745f06bc197094b9ee97a9584e69ed00bf, 6.12.91 to before 6.12.114
Linux

Linux · 6.15
Linux

Component: Not specified by the source
File: drivers/net/virtio_net.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23144

Affected technology

linux kernel · from 5.18 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · c951cd3b89010c7a4751b9d4ea074007e44851e6 to before db7dfe78fc81bdd2b532d77f340fe453f2360426, c951cd3b89010c7a4751b9d4ea074007e44851e6 to before 43964644348f6b1add3055c4a6cae8f77d892a6e, c951cd3b89010c7a4751b9d4ea074007e44851e6 to before 5651c0c391c0029541794f9c4c9597faecfd401f, c951cd3b89010c7a4751b9d4ea074007e44851e6 to before 78b4eb99751ebd37ceade78810bf94de80f7fb3a, c951cd3b89010c7a4751b9d4ea074007e44851e6 to before 9814cc832b88bd040fc2a1817c2b5469d0f7e862
Linux

Linux · 5.18
Linux

Component: Not specified by the source
File: mm/damon/sysfs.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23145

Affected technology

linux kernel · from 5.4.301 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.246 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.15.195 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 6.1.157 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.113 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.12.54 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.17.4 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · 1cfb3e4ddbdc8e02e637b8852540bd4718bf4814 to before 7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f, 505e69f76ac497e788f4ea0267826ec7266b40c8 to before 6241cd1d0acc2363016ac55b8773ba1332dd59d7, 3d6269028246f4484bfed403c947a114bb583631 to before 3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626, 79ea7f3e11effe1bd9e753172981d9029133a278 to before 0b06cde92f2f960f4ebe3c988c69f2711f2a24dc, 6b879c4c6bbaab03c0ad2a983953bd1410bb165e to before 8e8542c539927ae3898a4d02941f84e252e2dea1, 57295e835408d8d425bef58da5253465db3d6888 to before 06e26287f2e349a28ad363941ffd9076bfed8b2e, 57295e835408d8d425bef58da5253465db3d6888 to before d250bdf531d9cd4096fedbb9f172bb2ca660c868, ea39e712c2f5ae148ee5515798ae03523673e002, 440b003f449a4ff2a00b08c8eab9ba5cd28f3943, 5.10.246 to before 5.10.249, 5.15.195 to before 5.15.199, 6.1.157 to before 6.1.162, 6.6.113 to before 6.6.122, 6.12.54 to before 6.12.67, 5.4.301 to before 5.5, 6.17.4 to before 6.18
Linux

Linux · 6.18
Linux

Component: Not specified by the source
File: fs/ext4/xattr.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23146

Affected technology

linux kernel · from 5.4.293 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.237 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.15.181 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 6.1.135 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.88 (inclusive), before 6.6.123 (exclusive)
linux

linux kernel · from 6.12.24 (inclusive), before 6.12.69 (exclusive)
linux

linux kernel · from 6.13.12 (inclusive), before 6.14 (exclusive)
linux

linux kernel · from 6.14.3 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · a40f94f7caa8d3421b64f63ac31bc0f24c890f39 to before b0a900939e7e4866d9b90e9112514b72c451e873, 9e5a0f5777162e503400c70c6ed25fbbe2d38799 to before ccc683f597ceb28deb966427ae948e5ac739a909, 80f14e9de6a43a0bd8194cad1003a3e6dcbc3984 to before 937a573423ce5a96fdb1fd425dc6b8d8d4ab5779, 02e1bcdfdf769974e7e9fa285e295cd9852e2a38 to before 186d147cf7689ba1f9b3ddb753ab634a84940cc9, 281782d2c6730241e300d630bb9f200d831ede71 to before 53e54cb31e667fca05b1808b990eac0807d1dab0, 5df5dafc171b90d0b8d51547a82657cd5a1986c7 to before 03e8c90c62233382042b7bd0fa8b8900552fdb62, 5df5dafc171b90d0b8d51547a82657cd5a1986c7 to before 0c3cd7a0b862c37acbee6d9502107146cc944398, 1dcf08fcff5ca529de6dc0395091f28854f4e54a, 8e5aff600539e5faea294d9612cca50220e602b8, db7509fa110dd9b11134b75894677f30353b2c51, 5.10.237 to before 5.10.249, 5.15.181 to before 5.15.199, 6.1.135 to before 6.1.162, 6.6.88 to before 6.6.123, 6.12.24 to before 6.12.69, 5.4.293 to before 5.5, 6.13.12 to before 6.14, 6.14.3 to before 6.15
Linux

Linux · 6.15
Linux

Component: Not specified by the source
File: drivers/bluetooth/hci_ldisc.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23147

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23148

Affected technology

linux kernel · from 6.12.37 (inclusive), before 6.12.69 (exclusive)
linux

linux kernel · from 6.15.6 (inclusive), before 6.16 (exclusive)
linux

linux kernel · from 6.16.1 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.16
linux

linux kernel · 6.16 · update rc5
linux

linux kernel · 6.16 · update rc6
linux

linux kernel · 6.16 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · 431e58d56fcb5ff1f9eb630724a922e0d2a941df to before ee10b06980acca1d46e0fa36d6fb4a9578eab6e4, 190f4c2c863af7cc5bb354b70e0805f06419c038 to before 68207ceefd71cc74ce4e983fa9bd10c3122e349b, 190f4c2c863af7cc5bb354b70e0805f06419c038 to before 0fcee2cfc4b2e16e62ff8e0cc2cd8dd24efad65e, 2e2028fcf924d1c6df017033c8d6e28b735a0508, 6.12.37 to before 6.12.69, 6.15.6 to before 6.16
Linux

Linux · 6.16
Linux

Component: Not specified by the source
File: drivers/nvme/target/io-cmd-bdev.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23150

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23151

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23152

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23154

Affected technology

linux kernel · from 5.6 (inclusive), before 6.12.69 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · 9fd1ff5d2ac7181844735806b0a703c942365291 to before 9122d7280b2303e835cdfec156bd932ac1f586ed, 9fd1ff5d2ac7181844735806b0a703c942365291 to before 2cbef9ea5a0ac51863ede35c45f26931a85d3888, 9fd1ff5d2ac7181844735806b0a703c942365291 to before 3e62db1e3140449608975e29e0979cc5f3b1cc07, 9fd1ff5d2ac7181844735806b0a703c942365291 to before 3d48d59235c494d34e32052f768393111c0806ef, 9fd1ff5d2ac7181844735806b0a703c942365291 to before 426ca15c7f6cb6562a081341ca88893a50c59fa2
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: skb_segment_list
File: net/core/filter.c, net/ipv4/tcp_offload.c, net/ipv4/udp_offload.c, net/ipv6/tcpv6_offload.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23156

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23157

Affected technology

linux kernel · from 2.6.29 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · 793955bca66c99defdffc857ae6eb7e8431d6bbe to before 6a8b6242eaa1dd7a0de2d6de6420d10ffe68db90, 793955bca66c99defdffc857ae6eb7e8431d6bbe to before bb9be3f713652e330df00f3724c18c7a5469e7ac, 793955bca66c99defdffc857ae6eb7e8431d6bbe to before 4357e02cafabe01c2d737ceb4c4c6382fc2ee10a, 793955bca66c99defdffc857ae6eb7e8431d6bbe to before 0c3666ec188640c20e254011e7adf4464c32ee58, 793955bca66c99defdffc857ae6eb7e8431d6bbe to before 629666d20c7dcd740e193ec0631fdff035b1f7d6, 793955bca66c99defdffc857ae6eb7e8431d6bbe to before 4e159150a9a56d66d247f4b5510bed46fe58aa1c
Linux

Linux · 2.6.29
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: is
File: fs/btrfs/disk-io.c, fs/btrfs/extent_io.c, fs/btrfs/extent_io.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23158

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23159

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23160

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23161

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23162

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23163

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23164

Affected technology

linux kernel · from 4.6 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.123 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.69 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · e420114eef4a3a5025a243b89b0dc343101e3d3c to before 2a3a64d75d2d0727da285749476761ebcad557a3, e420114eef4a3a5025a243b89b0dc343101e3d3c to before b11e6f926480ab0939fec44781f28558c54be4e7, e420114eef4a3a5025a243b89b0dc343101e3d3c to before 8ce2e85889939c02740b4245301aa5c35fc94887, e420114eef4a3a5025a243b89b0dc343101e3d3c to before d448bf96889f1905e740c554780f5c9fa0440566, e420114eef4a3a5025a243b89b0dc343101e3d3c to before d8723917efda3b4f4c3de78d1ec1e1af015c0be1, e420114eef4a3a5025a243b89b0dc343101e3d3c to before dce375f4afc348c310d171abcde7ec1499a4c26a, e420114eef4a3a5025a243b89b0dc343101e3d3c to before 8d7ba71e46216b8657a82ca2ec118bc93812a4d0
Linux

Linux · 4.6
Linux

Component: Not specified by the source
File: drivers/net/ethernet/rocker/rocker_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23165

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23166

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23167

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23168

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23169

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Microsoft Security Response Center, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Microsoft Security Response Center’s CVSS 3.1 assessment rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23170

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23171

Affected technology

linux kernel · from 5.15 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · 9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e to before 172dcb67dd35b162357df229d7806acc724cd469, 9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e to before 2889d92c5f728351c9930c7996d22fe6e906e785, 9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e to before bd25b092a06a3e05f7e8bd6da6fa7318777d8c3d, 9e2ee5c7e7c35d195e2aa0692a7241d47a433d1e to before e9acda52fd2ee0cdca332f996da7a95c5fd25294
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: drivers/net/bonding/bond_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23172

Affected technology

linux kernel · from 5.19 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.123 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.69 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · d642b012df70a76dd5723f2d426b40bffe83ac49 to before f9747a7521a48afded5bff2faf1f2dcfff48c577, d642b012df70a76dd5723f2d426b40bffe83ac49 to before 2a0522f564acd34442652ea083091c329fa7c5d5, d642b012df70a76dd5723f2d426b40bffe83ac49 to before af4b8577d0b388cc3d0039eb0cdd9ca5bbbc9276, d642b012df70a76dd5723f2d426b40bffe83ac49 to before 2c0fb0f60bc1545c52da61bc6bd4855c1e7814ba, d642b012df70a76dd5723f2d426b40bffe83ac49 to before f0813bcd2d9d97fdbdf2efb9532ab03ae92e99e6
Linux

Linux · 5.19
Linux

Component: Not specified by the source
Function: adds
File: drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23173

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23212

Affected technology

linux kernel · from 2.6.19 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.123 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.69 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.9 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

Linux · f5b2b966f032f22d3a289045a5afd4afa09f09c6 to before a7516cb0165926d308187e231ccd330e5e3ebff7, f5b2b966f032f22d3a289045a5afd4afa09f09c6 to before 8c0be3277e7aefb2f900fc37ca3fe7df362e26f5, f5b2b966f032f22d3a289045a5afd4afa09f09c6 to before b956289b83887e0a306067b6003c3fcd81bfdf84, f5b2b966f032f22d3a289045a5afd4afa09f09c6 to before bd98324e327e41de04b13e372cc16f73150df254, f5b2b966f032f22d3a289045a5afd4afa09f09c6 to before f6c3665b6dc53c3ab7d31b585446a953a74340ef
Linux

Linux · 2.6.19
Linux

Component: Not specified by the source
File: drivers/net/bonding/bond_main.c, drivers/net/bonding/bond_options.c, include/net/bonding.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23272

Affected technology

linux kernel · from 4.9.33 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.10.1 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 4.10
linux

linux kernel · 4.10 · update rc6
linux

linux kernel · 4.10 · update rc7
linux

linux kernel · 4.10 · update rc8
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

Linux · 35d0ac9070ef619e3bf44324375878a1c540387b to before 25fcaef7948912652905e96922f36583a84fffed, 35d0ac9070ef619e3bf44324375878a1c540387b to before e3ccb11fc8249759d23326038c8db987ddaabc77, 35d0ac9070ef619e3bf44324375878a1c540387b to before 86bc4b1a0f672d47ac19f9022432cb6a2e01cb33, 35d0ac9070ef619e3bf44324375878a1c540387b to before 6826131c7674329335ca25df2550163eb8a1fd0c, 35d0ac9070ef619e3bf44324375878a1c540387b to before ccb8c8f3c1127cf34d18c737309897c68046bf21, 35d0ac9070ef619e3bf44324375878a1c540387b to before def602e498a4f951da95c95b1b8ce8ae68aa733a, fefdd79403e89b0c673965343b92e2e01e2713a8, 4.9.33 to before 4.10
Linux

Linux · 4.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23278

Affected technology

linux kernel · from 4.19.316 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.262 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.188 (inclusive), before 5.11 (exclusive)
linux

linux kernel · from 5.15.121 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.36 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.3.10 (inclusive), before 6.4 (exclusive)
linux

linux kernel · from 6.4.1 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.19 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.9 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

Linux · d60be2da67d172aecf866302c91ea11533eca4d9 to before c4d4e86fda707d89eaba80e343321737375f8582, 628bd3e49cba1c066228e23d71a852c23e26da73 to before 4830fb44d12f586f3f544609e086933649a9175a, 628bd3e49cba1c066228e23d71a852c23e26da73 to before eb0948fa13298212c5f8b30ee48efdae4389ab09, 628bd3e49cba1c066228e23d71a852c23e26da73 to before de47a88c6b807910f05703fb6605f7efdaa11417, 628bd3e49cba1c066228e23d71a852c23e26da73 to before 77c26b5056d693ffe5e9f040e946251cdb55ae55, 628bd3e49cba1c066228e23d71a852c23e26da73 to before 7cb9a23d7ae40a702577d3d8bacb7026f04ac2a9, bc9f791d2593f17e39f87c6e2b3a36549a3705b1, 3c7ec098e3b588434a8b07ea9b5b36f04cef1f50, a136b7942ad2a50de708f76ea299ccb45ac7a7f9, 25aa2ad37c2162be1c0bc4fe6397f7e4c13f00f8, dc7cdf8cbcbf8b13de1df93f356ec04cdeef5c41, 6.1.36 to before 6.1.177, 4.19.316 to before 4.20, 5.4.262 to before 5.5, 5.10.188 to before 5.11, 5.15.121 to before 5.16, 6.3.10 to before 6.4
Linux

Linux · 6.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23392

Affected technology

linux kernel · from 4.16.1 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 4.16
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before d2632de96ccb066e0131ad1494241b9c281c60b8, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before adee3436ccd29f1e514c028899e400cbc6d84065, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before 7e3955b282eae20d61c75e499c75eade51c20060, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before c8092edb9a11f20f95ccceeb9422b7dd0df337bd, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before e78a2dcc7cfb87b64a631441ca7681492b347ef6, 3b49e2e94e6ebb8b23d0955d9e898254455734f8 to before d73f4b53aaaea4c95f245e491aa5eeb8a21874ce
Linux

Linux · 4.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_tables_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23427

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-23428

Affected technology

linux kernel · from 5.15.121 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 6.1.36 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.3.10 (inclusive), before 6.4 (exclusive)
linux

linux kernel · from 6.4.1 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 6.4
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · eb947403518ea3d93f6d89264bb1f5416bb0c7d0 to before d08417981155883068b7260d9500ca306a03edac, 854156d12caa9d36de1cf5f084591c7686cc8a9d to before eae0dc86f71e6f3294c0cd7ffc05039258d243af, 5005bcb4219156f1bf7587b185080ec1da08518e to before 806f13752652216db0c309392b4db3e64eeed4f2, 5005bcb4219156f1bf7587b185080ec1da08518e to before c742b46a153d3ff95ff0825ab1950c87b9e14470, 5005bcb4219156f1bf7587b185080ec1da08518e to before 7f7468fd2a7554cea91b7d430335a3dbf01dcc09, 5005bcb4219156f1bf7587b185080ec1da08518e to before a5929c2020ce54e1dcbd1078c0f30b8aaf73c105, 5005bcb4219156f1bf7587b185080ec1da08518e to before c33615f995aee80657b9fdfbc4ee7f49c2bd733d, d1066c1b3663401cd23c0d6e60cdae750ce00c0f, 5.15.121 to before 5.15.203, 6.1.36 to before 6.1.167, 6.3.10 to before 6.4
Linux

Linux · 6.4
Linux

Component: Not specified by the source
File: fs/smb/server/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23450

Affected technology

linux kernel · from 5.15.174 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.18 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · ebfee3e153f67c8b38eb94a7062ee94aa6f92708 to before f315277856caeafcd996c2611afc085ca2d53275, 8270d9c21041470f58348248b9d9dcf3bf79592e to before 1e4f873879e075bbd4eb1c644d6933303ac5eba4, 8270d9c21041470f58348248b9d9dcf3bf79592e to before f00fc26c8a06442b225a350fe000c0a11483e6a3, 8270d9c21041470f58348248b9d9dcf3bf79592e to before cadf3da46c15523fba90d80c9955f536ee3b4023, 8270d9c21041470f58348248b9d9dcf3bf79592e to before fd7579f0a2c84ba8a7d4f206201b50dc8ddf90c2, 8270d9c21041470f58348248b9d9dcf3bf79592e to before 1fab5ece76fb42a761178dcd0ebcbf578377b0dd, 8270d9c21041470f58348248b9d9dcf3bf79592e to before 6d5e4538364b9ceb1ac2941a4deb86650afb3538, 5.15.174 to before 5.15.203
Linux

Linux · 5.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/smc/af_smc.c, net/smc/smc.h, net/smc/smc_close.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-23455

Affected technology

linux kernel · from 2.6.17 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

Linux · 5e35941d990123f155b02d5663e51a24f816b6f3 to before 2121f5fbe88daff0f1fc5bc47d359426c74b86b0, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 65fa92f79677858b14b9e4b7275f26639afe2710, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 495e97af9e7249ee02b72bb1d0848a6efc3700f4, 5e35941d990123f155b02d5663e51a24f816b6f3 to before f5e4f4e4cdb75ec36802059a94195a31f193da60, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 633e8f87dad32263f6a57dccdb873f042c062111, 5e35941d990123f155b02d5663e51a24f816b6f3 to before 9d00fe7d6d7c5b5f1065a6e042b54f2e44bd6df8, 5e35941d990123f155b02d5663e51a24f816b6f3 to before b652b05d51003ac074b912684f9ec7486231717b, 5e35941d990123f155b02d5663e51a24f816b6f3 to before f173d0f4c0f689173f8cdac79991043a4a89bf66
Linux

Linux · 2.6.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conntrack_h323_asn1.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31402

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f9fcb4441f6c02bb20c2eb340101e27dfe23607c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2665887a69437a8a4f552f69509eecfb73d4aa19, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c9452c0797c95cf2378170df96cf4f4b3bca7eff, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8afb437ea1f70cacb4bbdf11771fb5c4d720b965, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dad0c3c0a8e5d1d6eb0fc455694ce3e25e6c57d0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0f0e2a54a31a7f9ad2915db99156114872317388, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ae8498337dfdfda71bdd0b807c9a23a126011d76, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5133b61aaf437e5f25b1b396b14242a6bb0508e2
Linux

Linux · 2.6.12
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4xdr.c, fs/nfsd/state.h

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31405

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-31414

Affected technology

linux kernel · from 2.6.30 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · ea781f197d6a835cbb93a0bf88ee1696296ed8aa to before 847cb7fe26c5ce5dce0d1a41fac1ea488b7f1781, ea781f197d6a835cbb93a0bf88ee1696296ed8aa to before e7ccaa0a62a8ff2be5d521299ce79390c318d306, ea781f197d6a835cbb93a0bf88ee1696296ed8aa to before 4bd1b3d839172724b33d8d02c5a4ff6a1c775417, ea781f197d6a835cbb93a0bf88ee1696296ed8aa to before b53294bff19e56ada2f230ceb8b1ffde61cc3817, ea781f197d6a835cbb93a0bf88ee1696296ed8aa to before 3dfd3f7712b5a800f2ba632179e9b738076a51f0, ea781f197d6a835cbb93a0bf88ee1696296ed8aa to before f01794106042ee27e54af6fdf5b319a2fe3df94d
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/nf_conntrack_expect.c, net/netfilter/nf_conntrack_helper.c, net/netfilter/nf_conntrack_netlink.c, net/netfilter/nf_conntrack_sip.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31418

Affected technology

linux kernel · from 5.4.24 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.5.8 (inclusive), before 5.6 (exclusive)
linux

linux kernel · from 5.6.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 5.6
linux

linux kernel · 5.6 · update rc4
linux

linux kernel · 5.6 · update rc5
linux

linux kernel · 5.6 · update rc6
linux

linux kernel · 5.6 · update rc7
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before c098ff857e7ca923539164af5b3c2fe3e8f8afaf, 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before 58f3a14826d4e6b0d5421f1a64be280b48601ea2, 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before ad92ee87462f9a3061361d392e9dbfe2e5c1c9fb, 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before 6cea34d7ec6829b62f521a37a287f670144a2233, 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before b7eef00f08b92b0b9efe8ae0df6d0005e6199323, 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before 68ca0eea0af02bed36c5e2c13e9fa1647c31a7d4, 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before ceacaa76f221a6577aba945bb8873c2e640aeba4, 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 to before 9862ef9ab0a116c6dca98842aab7de13a252ae02, 6c717726f341fd8f39a3ec2dcf5d98d9d28a2769, d2997d64dfa65082236bca1efd596b6c935daf5e, 5.4.24 to before 5.5, 5.5.8 to before 5.6
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/ipset/ip_set_hash_gen.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31436

Affected technology

linux kernel · from 6.8 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · aa8d18becc0c14aa3eb46d6d1b81450446e11b87 to before e21da2ad8844585040fe4b82be1ad2fe99d40074, aa8d18becc0c14aa3eb46d6d1b81450446e11b87 to before 82656e8daf8de00935ae91b91bed43f4d6e0d644, aa8d18becc0c14aa3eb46d6d1b81450446e11b87 to before 0e4f43779d550e559be13a5cdb763bad92c4cc99, aa8d18becc0c14aa3eb46d6d1b81450446e11b87 to before e1c9866173c5f8521f2d0768547a01508cb9ff27
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: drivers/dma/idxd/submit.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31444

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-31448

Affected technology

linux kernel · from 2.6.22.1 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 2.6.22
linux

linux kernel · 2.6.22 · update rc4
linux

linux kernel · 2.6.22 · update rc5
linux

linux kernel · 2.6.22 · update rc6
linux

linux kernel · 2.6.22 · update rc7
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

Linux · 315054f023d28ee64f308adf8b5737831541776b to before c66545e83a802c3851d9be27a41c0479dd29ff0c, 315054f023d28ee64f308adf8b5737831541776b to before ecc50bfca9b5c2ee6aeef998181689b80477367b, 315054f023d28ee64f308adf8b5737831541776b to before 3a7667595bcad84da53fc156a418e110267c3412, 315054f023d28ee64f308adf8b5737831541776b to before 416c86f30f91b4fb2642ef6b102596ca898f41a5, 315054f023d28ee64f308adf8b5737831541776b to before 64f425b06b3bea9abc8977fd3982779b3ad070c9, 315054f023d28ee64f308adf8b5737831541776b to before 5422fe71d26d42af6c454ca9527faaad4e677d6c
Linux

Linux · 2.6.22
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/extents.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.4/10) rates confidentiality impact as low; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31478

Affected technology

linux kernel · from 5.15.145 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 6.1.71 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.6.1 (inclusive), before 6.6.131 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.80 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.21 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 6.6
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · f2283680a80571ca82d710bc6ecd8f8beac67d63 to before 70b4c414889492c522b6e4331562360f49be2361, 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 to before 9a7166f0ef8cbb7bb48dd05e2471d995566003f5, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before c3a89e3ec1ccf64fa6a34e391e1581ebbcba8683, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 6aef1765d6807e0f027cd87f6ac973eb0879a46d, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 80824c7e527b70cf9039534e60aff592e8f209d1, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 4cb537ae4f37d7d0f617815ed4bed7173fb50861, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 0e55f63dd08f09651d39e1b709a91705a8a0ddcb, 5.15.145 to before 5.15.203, 6.1.71 to before 6.1.168
Linux

Linux · 6.6
Linux

Component: Not specified by the source
File: fs/smb/server/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31501

Affected technology

linux kernel · from 6.15.1 (inclusive), before 6.19.11 (exclusive)
linux

linux kernel · 6.15
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 46eeb90f03e03d5e8f7f9f1f0eb0792104fc5f86 to before c516c2e06fe580b8d38de60cd407072a5de81506, 46eeb90f03e03d5e8f7f9f1f0eb0792104fc5f86 to before d5827316debcb677679bb014885d7be92c410e11, 46eeb90f03e03d5e8f7f9f1f0eb0792104fc5f86 to before eb8c426c9803beb171f89d15fea17505eb517714
Linux

Linux · 6.15
Linux

Component: Not specified by the source
File: drivers/net/ethernet/ti/icssg/icssg_common.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31589

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-31607

Affected technology

linux kernel · from 2.6.39 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · from 7.0 (inclusive), before 7.0.1 (exclusive)
linux

Linux · 1325f85fa49f57df034869de430f7c302ae23109 to before 324262c38438255bf6bdbf6342ca47c0badaab76, 1325f85fa49f57df034869de430f7c302ae23109 to before 973f2c250289f5bf6cc146b98aa6fdde11fe50d6, 1325f85fa49f57df034869de430f7c302ae23109 to before ce744264b06b97069b3722511ab355738311fee0, 1325f85fa49f57df034869de430f7c302ae23109 to before 885c8591784da6314f9aa82fa460ac69f9f79e5f, 1325f85fa49f57df034869de430f7c302ae23109 to before 8d155e2d1c4102f74f82a2bf9c016164bb0f7384, 1325f85fa49f57df034869de430f7c302ae23109 to before 906f16a836de13fe61f49cdce2f66f2dbd14caf4, 1325f85fa49f57df034869de430f7c302ae23109 to before ef8ebb1c637b4cfb61a9dd2e013376774ee2033b, 1325f85fa49f57df034869de430f7c302ae23109 to before 5e1c4ece08ccdc197177631f111845a2c68eede3, 1325f85fa49f57df034869de430f7c302ae23109 to before 2ab833a16a825373aad2ba7d54b572b277e95b71, d9638d9236eed035a575feddec61d036dacc2676, ca7d3501b7a287c18b5b470e871d3029b0f4842a, 1ce528277e1a66856ed3f7526c1e3458c0ed4a70, db898d0c5c493ce4177d5e1d3a953e079a56a24b, 5aa02704b9ee67c5b2ee26d54c5f4eb99e93ba9a, 2.6.32.37 to before 2.6.33, 2.6.33.10 to before 2.6.34, 2.6.34.11 to before 2.6.35, 2.6.35.13 to before 2.6.36, 2.6.38.3 to before 2.6.39
Linux

Linux · 2.6.39
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: drivers/usb/usbip/usbip_common.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31633

Affected technology

linux kernel · from 6.16.1 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 6.16
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to before 1f864d9daaf622aeaa774404fd51e7d6a435b046, 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to before c1e242beb6b1efc3c286f617e8d940c8fbf2ed41, 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a to before 699e52180f4231c257821c037ed5c99d5eb0edb8
Linux

Linux · 6.16
Linux

Component: Not specified by the source
File: net/rxrpc/rxgk.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31635

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-31636

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-31637

Affected technology

linux kernel · from 2.6.22.1 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 2.6.22
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 17926a79320afa9b95df6b977b40cca6d8713cea to before 252157d939d179b5d767cb860ff8fa7f8723b67a, 17926a79320afa9b95df6b977b40cca6d8713cea to before a75b3b361dd481d942c5f259a82d59718a41092c, 17926a79320afa9b95df6b977b40cca6d8713cea to before b3a808cd0790b5075aaa2bc3588edf02cd71d352, 17926a79320afa9b95df6b977b40cca6d8713cea to before 47073aab8a3a5a7b41c9bd37d2a3dcbeeccd6c8a, 17926a79320afa9b95df6b977b40cca6d8713cea to before a149dcae23309df9de1c3b6b5d468610ef5ab7de, 17926a79320afa9b95df6b977b40cca6d8713cea to before 22f6258e7b31dba9bf88dce4e3ee7f0f20072e60, 17926a79320afa9b95df6b977b40cca6d8713cea to before 58fcd1b156152613ba00a064a129fb69507ddd7d, 17926a79320afa9b95df6b977b40cca6d8713cea to before fe4447cd95623b1cfacc15f280aab73a6d7340b2
Linux

Linux · 2.6.22
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/rxrpc/rxkad.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31649

Affected technology

linux kernel · from 3.2.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 3.2
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 286a837217204b1ef105e3a554d0757e4fdfaac1 to before 513e06735f5be575b409d195822195348b164e48, 286a837217204b1ef105e3a554d0757e4fdfaac1 to before 275bdf762e82082f064e60a92448fa2ac43cf95b, 286a837217204b1ef105e3a554d0757e4fdfaac1 to before a2b68a9a476b9544ff31f1fbcd5d80867a8a5e2f, 286a837217204b1ef105e3a554d0757e4fdfaac1 to before b7b8012193fd98236d7ae05d4b553f010a77b2ef, 286a837217204b1ef105e3a554d0757e4fdfaac1 to before 2c91b39912278d0878f9ba60ba04d2518b18a08d, 286a837217204b1ef105e3a554d0757e4fdfaac1 to before 6fca757c20396dc2e604dcc61922264e9e3dc803, 286a837217204b1ef105e3a554d0757e4fdfaac1 to before 10d12b9240ebf96c785f0e2e4228318cd5f3a3eb, 286a837217204b1ef105e3a554d0757e4fdfaac1 to before 51f4e090b9f87b40c21b6daadb5c06e6c0a07b67
Linux

Linux · 3.2
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/stmicro/stmmac/chain_mode.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31657

Affected technology

linux kernel · from 3.5.1 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 3.5
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 23721387c409087fd3b97e274f34d3ddc0970b74 to before 5202f071b367ffbc8e279fc7a00db14f5e587f52, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 69d1ce9c72eca91203ffdb8d08bacd511100aec6, 23721387c409087fd3b97e274f34d3ddc0970b74 to before f4858832ddef2f39f21e30b7226bbcd3c4b2bc96, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 2f55b58b5a0bbed192d60c444a45a49cdf1b545f, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 7962b522222628596ca9ecc8722efc95367aadbd, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 4dee4c0688443aaf5bbec74aa203c851d1d53c35, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 1f2dc36c297d27733f1b380ea644cf15a361bd7b, 23721387c409087fd3b97e274f34d3ddc0970b74 to before 82d8701b2c930d0e96b0dbc9115a218d791cb0d2
Linux

Linux · 3.5
Linux

Component: Not specified by the source
File: net/batman-adv/bridge_loop_avoidance.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31659

Affected technology

linux kernel · from 3.13.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 3.13
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before 7e5d007e0df946bffb8542fb112e0044014a5897, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before 2997f4bd1f982e7013709946e00be89b507693fa, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before 95c71365a2222908441b54d6f2c315e0c79fcec3, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before 69d61639bc7e963c3b645e570279d731e7c89062, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before f970646b9a39539d1bac86822ac78b5915455ea9, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before de6c1dc3c7d01a152607e6fcecee4d5288283f10, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before cf2199171ef799ca7270019125f4a91bd20ad4d9, 7ea7b4a142758deaf46c1af0ca9ceca6dd55138b to before 3a359bf5c61d52e7f09754108309d637532164a6
Linux

Linux · 3.13
Linux

Component: Not specified by the source
File: net/batman-adv/translation-table.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31668

Affected technology

linux kernel · from 4.10.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 4.10
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 1dec91d3b1cefb82635761b7812154af3ef46449, 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 750569d6987a0ff46317a4b86eb3907e296287bf, 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 57d0374d14fa667dec6952173b93e7e84486d5c9, 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 84d458018b147176b259347103fccb7e93abd2b1, 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 6305ad032b03d2ea4181b953a66e19a9a6ed053c, 6c8702c60b88651072460f3f4026c7dfe2521d12 to before fb56de5d99218de49d5d43ef3a99e062ecd0f9a1, 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 17d87d42874f5d6c1a0ccc6d9190dfe82a9a7a6a, 6c8702c60b88651072460f3f4026c7dfe2521d12 to before c3812651b522fe8437ebb7063b75ddb95b571643
Linux

Linux · 4.10
Linux

Component: Not specified by the source
File: net/ipv6/seg6_iptunnel.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31669

Affected technology

linux kernel · from 5.12.1 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.169 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.135 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.82 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.23 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.13 (exclusive)
linux

linux kernel · 5.12
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · b19bc2945b40b9fd38e835700907ffe8534ef0de to before f6e1f25fa5e733570f6d6fe37a4dfed2a0deba47, b19bc2945b40b9fd38e835700907ffe8534ef0de to before fb1f54b7d16f393b8b65d328410f78b4beea8fcc, b19bc2945b40b9fd38e835700907ffe8534ef0de to before 3fd6547f5b8ac99687be6d937a0321efda760597, b19bc2945b40b9fd38e835700907ffe8534ef0de to before eb9c6aeb512f877cf397deb1e4526f646c70e4a7, b19bc2945b40b9fd38e835700907ffe8534ef0de to before 15fa9ead4d5e6b6b9c794e84144146c917f2cb62, b19bc2945b40b9fd38e835700907ffe8534ef0de to before b313e9037d98c13938740e5ebda7852929366dff, b19bc2945b40b9fd38e835700907ffe8534ef0de to before 9b55b253907e7431210483519c5ad711a37dafa1
Linux

Linux · 5.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/mptcp/protocol.c, net/mptcp/protocol.h, net/mptcp/subflow.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31682

Affected technology

linux kernel · from 4.15 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · ed842faeb2bd49256f00485402f3113205f91d30 to before c68433fd291c9e88c00292095172c62d1997d662, ed842faeb2bd49256f00485402f3113205f91d30 to before 4f397b950c916e9a1f8a4fce04ea0110206cad47, ed842faeb2bd49256f00485402f3113205f91d30 to before bd91ec85aa4c77d645bd2739fc56784157a88ca2, ed842faeb2bd49256f00485402f3113205f91d30 to before 658261898130da620fc3d0fbb0523efb3366cb55, ed842faeb2bd49256f00485402f3113205f91d30 to before 2ba4caba423ed94d63006eb1d2227b0332ab7fcd, ed842faeb2bd49256f00485402f3113205f91d30 to before 9c55e41c73af5c4511070933b1bd25248521270c, ed842faeb2bd49256f00485402f3113205f91d30 to before 3a30f6469b058574f49efde61cd6f5d79e576053, ed842faeb2bd49256f00485402f3113205f91d30 to before a01aee7cafc575bb82f5529e8734e7052f9b16ea
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/bridge/br_arp_nd_proxy.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31685

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.83 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.24 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.14 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4d75bc2cd093bf5803edf512c099bfb220fd6459, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d6a57411caf54df025860c9b1a82cd42d57a562, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d5603591373441fecf9951833d6d873e09320f08, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 288138418bef956f8b295751a4536c60f0e89f4a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9eda5478746ef7dc0e4e537b5a5e4b0ca1027091, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 807d6ee15804df6f01a35c910f09612e858739a6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 309ae3e9a51a69699ca94eac5fac5688fa562d55, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fdce0b3590f724540795b874b4c8850c90e6b0a8
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/ipv6/netfilter/ip6t_eui64.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.4/10) rates confidentiality and availability impact as high; integrity impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31705

Affected technology

linux kernel · from 5.15.145 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.71 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.6 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.84 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.25 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.2 (exclusive)
linux

Linux · 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 to before ddbbc8b2a09dd2cfed90871313e3691ae1db08a2, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before ffbce350c6fd1e99116ea57383b9031717e36d3b, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 98f3de6ef4efbd899348d333f0902dc4ff14380c, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 790304c02bf9bd7b8171feda4294d6e62d32ae8f, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 922d48fe8c19f388ffa2f709f33acaae4e408de2, e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d to before 30010c952077a1c89ecdd71fc4d574c75a8f5617, f2283680a80571ca82d710bc6ecd8f8beac67d63, 6.1.71 to before 6.1.175, 5.15.145 to before 5.16
Linux

Linux · 6.6
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: fs/smb/server/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-31718

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-43011

Affected technology

linux kernel · from 2.6.12.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 2.6.12
linux

linux kernel · 2.6.12 · update rc2
linux

linux kernel · 2.6.12 · update rc3
linux

linux kernel · 2.6.12 · update rc4
linux

linux kernel · 2.6.12 · update rc5
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5d0aa038a90b30c9bedde0c41c1fdcd98ecb16e9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3f5e3005984645bf5bd129c6b13149879580b1fb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f782dd382203b2a8c4552a628431b7de65a19a7b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 143d4fa68ae9efb83b0c55b12cc7f0d03732a2b1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 524371398d8463ea7e101fce2cbf3915645d1730, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa1dbc93530b34fab0da9862426fe9c918c74dc0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c87dd137c0dad07cc55f98181ff380b0c23d2878, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d10a26aa4d072320530e6968ef945c8c575edf61
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/x25/x25_in.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-43037

Affected technology

linux kernel · from 2.6.22 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before ea9f65b27c8404e164848ebff1443310fd187629, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before d6621f60192fe10c047a4487be42a6f4c150707f, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 2cc6e3b0fe0f0242d1f530a93a4924f48ab85ba5, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before a0c4ce9900a108eaf55d0f3b399cb55999647d39, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 1063515ce15ff31065c4e7f8265f4c2fd3c54876, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 590f622669b97eaf7b57a1de7b0a6e68c5d8b2c3, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 4a622658f384b03560834cbe8ffcfe69a278f7c8, c4d3efafcc933fd2ffd169d7dc4f980393a13796 to before 2edfa31769a4add828a7e604b21cb82aaaa05925
Linux

Linux · 2.6.22
Linux

NVIDIA for RHEL 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.12 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.13 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.14 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.15 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.16 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.17 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.18 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.19 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.20 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.21 · Exact affected versions not specified by the source
Red Hat

Red Hat OpenShift Container Platform 4.22 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: net/ipv6/ip6_tunnel.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2026-43038

Affected technology

linux kernel · after 3.13 (exclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.168 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.134 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.81 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.22 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.12 (exclusive)
linux

linux kernel · 3.13
linux

linux kernel · 3.13 · update rc3
linux

linux kernel · 3.13 · update rc4
linux

linux kernel · 3.13 · update rc5
linux

linux kernel · 3.13 · update rc6
linux

linux kernel · 3.13 · update rc7
linux

linux kernel · 3.13 · update rc8
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

Linux · ca15a078bd907df5fc1c009477869c5cbde3b753 to before c438ba010171b70bad22fc18b1d5bdc3627476e8, ca15a078bd907df5fc1c009477869c5cbde3b753 to before 0452b6526b2f54b2413b9cb4ff1ea2ac542c99c7, ca15a078bd907df5fc1c009477869c5cbde3b753 to before a4437faf135da293d16fcc4cc607316742bd0ebb, ca15a078bd907df5fc1c009477869c5cbde3b753 to before 3d5127d998de617b130aae96b138dba22ac6a8a7, ca15a078bd907df5fc1c009477869c5cbde3b753 to before e41953e7d118e2702bcb217879c173d9d1d3cd4e, ca15a078bd907df5fc1c009477869c5cbde3b753 to before a2edbb6393972a02114b6003953a5cef3104fada, ca15a078bd907df5fc1c009477869c5cbde3b753 to before 1ceeebd5bd6d855b17a5df625109bfe29129d7cf, ca15a078bd907df5fc1c009477869c5cbde3b753 to before 86ab3e55673a7a49a841838776f1ab18d23a67b5
Linux

Linux · 3.13
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens