Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-23443 — ACPI: processor: Fix previous acpi_processor_errata_piix4() fix

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix After commi f132e089fe89 ("ACPI: processor: Fix NULL-pointer dere…

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23442 — ipv6: add NULL checks for idev in SRv6 paths

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths __in6_dev_get() can return NULL when the device has no IPv6 configuration (e.g. MTU …

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23441 — net/mlx5e: Prevent concurrent access to IPSec ASO context

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent concurrent access to IPSec ASO context The query or updating IPSec offload object is through Access ASO WQE. T…

linux_kernel | Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23440 — net/mlx5e: Fix race condition during IPSec ESN update

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN (Extended Sequence Nu…

linux_kernel | Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23439 — udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n

In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n When CONFIG_IPV6 is disabled, the udp_sock_create6() fun…

linux_kernel | Misconfiguration
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23438 — net: mvpp2: guard flow control update with global_tx_fc in buffer switching

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: guard flow control update with global_tx_fc in buffer switching mvpp2_bm_switch_buffers() unconditionally calls mvpp2…

linux_kernel | Misconfiguration
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23437 — net: shaper: protect late read accesses to the hierarchy

In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect late read accesses to the hierarchy We look up a netdev during prep of Netlink ops (pre- callbacks) and take…

linux_kernel | Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23436 — net: shaper: protect from late creation of hierarchy

In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops (pre- callbacks) and take a r…

linux_kernel | Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23435 — perf/x86: Move event pointer setup earlier in x86_pmu_enable()

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86_pmu_enable() A production AMD EPYC system crashed with a NULL pointer dereferen…

linux_kernel | Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23434 — mtd: rawnand: serialize lock/unlock against other NAND operations

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: serialize lock/unlock against other NAND operations nand_lock() and nand_unlock() call into chip->ops.lock_area/unl…

linux_kernel | Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23433 — arm_mpam: Fix null pointer dereference when restoring bandwidth counters

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix null pointer dereference when restoring bandwidth counters When an MSC supporting memory bandwidth monitoring is br…

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23432 — mshv: Fix use-after-free in mshv_map_user_memory error path

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix use-after-free in mshv_map_user_memory error path In the error path of mshv_map_user_memory(), calling vfree() directly…

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23431 — spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is allocated by spi_alloc_target()/spi_alloc_…

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23430 — drm/vmwgfx: Don't overwrite KMS surface dirty tracker

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak.

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23429 — iommu/sva: Fix crash in iommu_sva_unbind_device()

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommu_sva_unbind_device() domain->mm->iommu_mm can be freed by iommu_domain_free(): iommu_domain_free()…

Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23428 — ksmbd: fix use-after-free of share_conf in compound request

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon in compound requests without …

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23427 — ksmbd: fix use-after-free in durable v2 replay of active file handles

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parse_durable_handle_context() unconditionally assigns dh_i…

linux_kernel | Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
7.1 HIGH
CVE-2025-68153 — Juju: Resource poisoning

Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to befor…

Remote | Authorization
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
6.9 MEDIUM
CVE-2025-68152 — Juju: Read All Controller Logs From Compromised Workload

Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to befor…

Remote | Information Disclosure
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
6.7 MEDIUM
CVE-2025-64340 — FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g., &) can cause command injection on Windows when passed to f…

fastmcp | Injection
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
Showing 20 of 6373 Results