|
191
|
7.1 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
mpls: add seqcount to protect the platform_label{,s} pair
The RCU-protected codepaths (mpls_forward, mpls_dump_routes) can have
a…
Update
|
CWE-125
Out-of-bounds Read
|
CVE-2026-43042
|
2026-05-9 03:55 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
192
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
__radix_tree_create() allocates and links intermediate …
Update
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2026-43041
|
2026-05-9 03:54 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193
|
7.1 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
When processing Router…
Update
|
CWE-909
Missing Initialization of Resource
|
CVE-2026-43040
|
2026-05-9 03:53 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
auxdisplay: line-display: fix NULL dereference in linedisp_release
linedisp_release() currently retrieves the enclosing struct li…
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-31753
|
2026-05-9 03:52 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
usb: cdns3: gadget: fix state inconsistency on gadget init failure
When cdns3_gadget_start() fails, the DRD hardware is left in g…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31754
|
2026-05-9 03:49 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196
|
9.8 |
CRITICAL
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch
emac_dispatch_skb_zc() allocates a new skb via n…
Update
|
NVD-CWE-noinfo
|
CVE-2026-43039
|
2026-05-9 03:48 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197
|
9.8 |
CRITICAL
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
Sashiko AI-review observed:
In ip6_err_gen_icmpv6_unreach(), the …
Update
|
NVD-CWE-noinfo
|
CVE-2026-43038
|
2026-05-9 03:47 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
When the gadget endpoint is disabled or not yet configured, the ep->…
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-31755
|
2026-05-9 03:45 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199
|
9.1 |
CRITICAL
Network
|
zfnd
|
zebra-script
zebrad
|
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed to validate a consensus rule that restricted t…
New
|
CWE-573
Improper Following of Specification by Caller
|
CVE-2026-41583
|
2026-05-9 03:44 |
2026-05-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: use skb_header_pointer() for TCPv4 GSO frag_off check
Syzbot reported a KMSAN uninit-value warning in gso_features_check()
c…
Update
|
CWE-908
Use of Uninitialized Resource
|
CVE-2026-43036
|
2026-05-9 03:44 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
