Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-23444 — wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure ieee80211_tx_prepare_skb() has three error paths, but only …

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23443 — ACPI: processor: Fix previous acpi_processor_errata_piix4() fix

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix After commi f132e089fe89 ("ACPI: processor: Fix NULL-pointer dere…

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23442 — ipv6: add NULL checks for idev in SRv6 paths

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths __in6_dev_get() can return NULL when the device has no IPv6 configuration (e.g. MTU …

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23441 — net/mlx5e: Prevent concurrent access to IPSec ASO context

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent concurrent access to IPSec ASO context The query or updating IPSec offload object is through Access ASO WQE. T…

| Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23440 — net/mlx5e: Fix race condition during IPSec ESN update

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN update In IPSec full offload mode, the device reports an ESN (Extended Sequence Nu…

| Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23439 — udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n

In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n When CONFIG_IPV6 is disabled, the udp_sock_create6() fun…

| Misconfiguration
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23438 — net: mvpp2: guard flow control update with global_tx_fc in buffer switching

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: guard flow control update with global_tx_fc in buffer switching mvpp2_bm_switch_buffers() unconditionally calls mvpp2…

| Misconfiguration
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23437 — net: shaper: protect late read accesses to the hierarchy

In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect late read accesses to the hierarchy We look up a netdev during prep of Netlink ops (pre- callbacks) and take…

| Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23436 — net: shaper: protect from late creation of hierarchy

In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops (pre- callbacks) and take a r…

| Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23435 — perf/x86: Move event pointer setup earlier in x86_pmu_enable()

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86_pmu_enable() A production AMD EPYC system crashed with a NULL pointer dereferen…

| Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23434 — mtd: rawnand: serialize lock/unlock against other NAND operations

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: serialize lock/unlock against other NAND operations nand_lock() and nand_unlock() call into chip->ops.lock_area/unl…

| Race Condition
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23433 — arm_mpam: Fix null pointer dereference when restoring bandwidth counters

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix null pointer dereference when restoring bandwidth counters When an MSC supporting memory bandwidth monitoring is br…

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23432 — mshv: Fix use-after-free in mshv_map_user_memory error path

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix use-after-free in mshv_map_user_memory error path In the error path of mshv_map_user_memory(), calling vfree() directly…

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23431 — spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is allocated by spi_alloc_target()/spi_alloc_…

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23430 — drm/vmwgfx: Don't overwrite KMS surface dirty tracker

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak.

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23429 — iommu/sva: Fix crash in iommu_sva_unbind_device()

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommu_sva_unbind_device() domain->mm->iommu_mm can be freed by iommu_domain_free(): iommu_domain_free()…

Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23428 — ksmbd: fix use-after-free of share_conf in compound request

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon in compound requests without …

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
0.0 NA
CVE-2026-23427 — ksmbd: fix use-after-free in durable v2 replay of active file handles

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parse_durable_handle_context() unconditionally assigns dh_i…

| Memory Corruption
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
5.1 MEDIUM
CVE-2026-5468 — Casdoor dangerouslySetInnerHTML cross site scripting

A security flaw has been discovered in Casdoor 2.356.0. This affects the function dangerouslySetInnerHTML. Performing a manipulation of the argument formCss/formCssMobile/formSideHtml results in cros…

Remote | Cross-Site Scripting
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
4.3 MEDIUM
CVE-2026-28736 — Focalboard IDOR in file content endpoint allows cross-user file access (unsupported produ…

** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded files. This allows an authenticated attacker who knows a victim's fileID to read the cont…

Remote | Information Disclosure
Apr 03, 2026 Apr 03, 2026
Apr 03, 2026
Apr 03, 2026
Showing 20 of 6418 Results