Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
27385
Total
2080
Critical
8289
High
8496
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-43370 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg() to prevent … | May 08, 2026 |
| CVE-2026-43369 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix NULL pointer dereference in device cleanup When GPU initialization fails due to an … | May 08, 2026 |
| CVE-2026-43368 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatterlist length When a scatterlists table of a GEM … | May 08, 2026 |
| CVE-2026-43367 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix a few more NULL pointer dereference in device cleanup I found a few … | May 08, 2026 |
| CVE-2026-43366 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: check if target buffer list is still legacy on recycle There's a gap between … | May 08, 2026 |
| CVE-2026-43365 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: xfs: fix undersized l_iclog_roundoff values If the superblock doesn't list a log stripe unit, we … | May 08, 2026 |
| CVE-2026-43364 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ublk: fix NULL pointer dereference in ublk_ctrl_set_size() ublk_ctrl_set_size() unconditionally dereferences ub->ub_disk via set_capacity_and_notify() without checking … | May 08, 2026 |
| CVE-2026-43363 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: x86/apic: Disable x2apic on resume if the kernel expects so When resuming from s2ram, firmware … | May 08, 2026 |
| CVE-2026-43362 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix in-place encryption corruption in SMB2_write() SMB2_write() places write payload in iov[1..n] as … | May 08, 2026 |
| CVE-2026-43361 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort when snapshotting received subvolumes Currently a user can trigger a transaction … | May 08, 2026 |
| CVE-2026-43360 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due to name hash collision If we attempt … | May 08, 2026 |
| CVE-2026-43359 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set … | May 08, 2026 |
| CVE-2026-43358 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer() Call rcu_read_lock() before exiting the … | May 08, 2026 |
| CVE-2026-43357 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050-core: fix pm_runtime error handling The return value of pm_runtime_get_sync() is not checked, … | May 08, 2026 |
| CVE-2026-43356 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis: Fix NULL pointer dereference in adis_init The adis_init() function dereferences adis->ops to … | May 08, 2026 |
| CVE-2026-43355 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pm_runtime_put_autosuspend() before the error … | May 08, 2026 |
| CVE-2026-43354 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: iio: proximity: hx9023s: Protect against division by zero in set_samp_freq Avoid division by zero when … | May 08, 2026 |
| CVE-2026-43353 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue The HCI DMA dequeue path (hci_dma_dequeue_xfer()) may … | May 08, 2026 |
| CVE-2026-43352 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue The logic used to abort the DMA … | May 08, 2026 |
| CVE-2026-43351 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Eagerly init vgic dist/redist on vgic creation If vgic_allocate_private_irqs_locked() fails for any odd … | May 08, 2026 |
| CVE-2026-41588 | CRITICAL | 9.0 | RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched … | May 08, 2026 |
| CVE-2026-41585 | UNKNOWN | — | ZEBRA is a Zcash node written entirely in Rust. From zebrad versions 2.2.0 to before 4.3.1 and from zebra-rpc versions 1.0.0-beta.45 to before 6.0.2, a … | May 08, 2026 |
| CVE-2026-41584 | UNKNOWN | — | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-chain version 6.0.2, Orchard transactions contain a rk … | May 08, 2026 |
| CVE-2026-41583 | UNKNOWN | — | ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed … | May 08, 2026 |
| CVE-2026-41576 | HIGH | 7.1 | Brave CMS is an open-source CMS. Prior to commit 6c56603, the contact form is publicly accessible (no authentication required). User-supplied message text is passed through … | May 08, 2026 |