|
621
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
ALSA: fireworks: bound device-supplied status before string array lookup
The status field in an EFW response is a 32-bit value su…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31619
|
2026-04-28 23:09 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
622
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divid…
Update
|
CWE-369
Divide By Zero
|
CVE-2026-31618
|
2026-04-28 23:07 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
623
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
bnge: return after auxiliary_device_uninit() in error path
When auxiliary_device_add() fails, the error block calls
auxiliary_dev…
Update
|
CWE-908
Use of Uninitialized Resource
|
CVE-2026-31621
|
2026-04-28 23:05 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
624
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
HID: core: clamp report_size in s32ton() to avoid undefined shift
s32ton() shifts by n-1 where n is the field's report_size, a va…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31624
|
2026-04-28 23:02 |
2026-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
625
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
l2cap_conn_del() calls cancel_delayed_work_sync() for both info_timer
and id_a…
Update
|
CWE-667
Improper Locking
|
CVE-2026-31499
|
2026-04-28 23:01 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
626
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
btintel_hw_error() issues two __hci_cmd_sync() calls (HCI…
Update
|
CWE-416
Use After Free
|
CVE-2026-31500
|
2026-04-28 22:57 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
627
|
9.8 |
CRITICAL
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path
cppi5_hdesc_get_psdata() returns a pointer into the CPPI …
Update
|
CWE-416
Use After Free
|
CVE-2026-31501
|
2026-04-28 22:50 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
628
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
s390/entry: Scrub r12 register on kernel entry
Before commit f33f2d4c7c80 ("s390/bp: remove TIF_ISOLATE_BP"),
all entry handlers …
Update
|
NVD-CWE-noinfo
|
CVE-2026-31482
|
2026-04-28 22:46 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
629
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
s390/syscalls: Add spectre boundary for syscall dispatch table
The s390 syscall number is directly controlled by userspace, but d…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31483
|
2026-04-28 22:40 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
630
|
7.1 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check
__io_uring_show_fdinfo() iterates over pending SQEs and, for 128-byte
SQEs …
Update
|
CWE-125
Out-of-bounds Read
|
CVE-2026-31484
|
2026-04-28 22:39 |
2026-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|