Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.5 MEDIUM
CVE-2026-43272 — ring-buffer: Fix possible dereference of uninitialized pointer

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_meta_validate_events() which is…

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43271 — md-cluster: fix NULL pointer dereference in process_metadata_update

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in process_metadata_update The function process_metadata_update() blindly dereferences t…

linux_kernel | Race Condition
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43270 — media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() In mtk_mdp_probe(), vpu_get_plat_device() increases the reference co…

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43269 — drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback

In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback After several commits, the slab memory increases. Some dr…

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43268 — hfsplus: pretend special inodes as regular files

In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires an…

linux_kernel | Misconfiguration
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43267 — wifi: rtw89: fix potential zero beacon interval in beacon tracking

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bss_conf->beacon_i…

linux_kernel | Denial of Service
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43266 — EFI/CPER: don't go past the ARM processor CPER record buffer

In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor CPER record buffer There's a logic inside GHES/CPER to detect if the section_length is …

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43265 — KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Ignore -EBUSY when checking nested events after exiting a b…

linux_kernel | Denial of Service
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43264 — fbdev: of: display_timing: fix refcount leak in of_get_display_timings()

In the Linux kernel, the following vulnerability has been resolved: fbdev: of: display_timing: fix refcount leak in of_get_display_timings() of_parse_phandle() returns a device_node with refcount i…

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
7.8 HIGH
CVE-2026-43263 — media: chips-media: wave5: Fix Null reference while testing fluster

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances are created/destroyed, many interrupts h…

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43262 — gfs2: fiemap page fault fix

In the Linux kernel, the following vulnerability has been resolved: gfs2: fiemap page fault fix In gfs2_fiemap(), we are calling iomap_fiemap() while holding the inode glock. This can lead to recu…

May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43261 — arm64: Add support for TSV110 Spectre-BHB mitigation

In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the Spectre-BHB (Branch History Buffer…

linux_kernel | Denial of Service
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
7.8 HIGH
CVE-2026-43260 — bnxt_en: Fix RSS context delete logic

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need to free the corresponding RSS context VNIC in FW everytime an RSS context is delete…

linux_kernel | Misconfiguration
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
5.5 MEDIUM
CVE-2026-43259 — phy: fsl-imx8mq-usb: set platform driver data

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: set platform driver data Add missing platform_set_drvdata() as the data will be used in remove().

linux_kernel | Misconfiguration
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
7.8 HIGH
CVE-2026-43258 — alpha: fix user-space corruption during memory compaction

In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory compaction Alpha systems can suffer sporadic user-space crashes and heap corruptio…

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
0.0 NA
CVE-2026-43257 — media: cx88: Add missing unmap in snd_cx88_hw_params()

In the Linux kernel, the following vulnerability has been resolved: media: cx88: Add missing unmap in snd_cx88_hw_params() In error path, add cx88_alsa_dma_unmap() to release resource acquired by c…

May 06, 2026 May 06, 2026
May 06, 2026
May 06, 2026
7.8 HIGH
CVE-2026-43256 — media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() vfe_isr() iterates using MSM_VFE_IMAGE_MASTERS_NUM(7) a…

linux_kernel | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
0.0 NA
CVE-2026-43255 — wifi: libertas: fix WARNING in usb_tx_block

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The function usb_tx_block() submits cardp->tx_urb without ensuring that any previous …

linux_kernel | Race Condition
May 06, 2026 May 06, 2026
May 06, 2026
May 06, 2026
7.5 HIGH
CVE-2026-43254 — ovpn: tcp - fix packet extraction from stream

In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When processing TCP stream data in ovpn_tcp_recv, we receive large cloned skbs from…

linux_kernel | Remote | Memory Corruption
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
7.5 HIGH
CVE-2026-43253 — iommu/amd: move wait_on_sem() out of spinlock

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With iommu.strict=1, the existing completion wait path can cause soft lockups under…

linux_kernel | Remote | Race Condition
May 06, 2026 May 08, 2026
May 06, 2026
May 08, 2026
Showing 20 of 5739 Results