Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
30355
Total
2427
Critical
9086
High
9450
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-31554 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it was … | Apr 24, 2026 |
| CVE-2026-31553 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Using "(u64 __user *)hva + offset" to … | Apr 24, 2026 |
| CVE-2026-31552 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Since upstream … | Apr 24, 2026 |
| CVE-2026-31551 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. syzbot reported static_branch_dec() underflow in aql_enable_write(). [0] The … | Apr 24, 2026 |
| CVE-2026-31550 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835_asb_control() function uses a tight polling loop … | Apr 24, 2026 |
| CVE-2026-31549 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device … | Apr 24, 2026 |
| CVE-2026-31548 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down When the nl80211 socket that originated a PMSR request … | Apr 24, 2026 |
| CVE-2026-31547 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing runtime PM reference in ccs_mode_store ccs_mode_store() calls xe_gt_reset() which internally invokes xe_pm_runtime_get_noresume(). … | Apr 24, 2026 |
| CVE-2026-31546 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL deref in bond_debug_rlb_hash_show rlb_clear_slave intentionally keeps RLB hash-table entries on the … | Apr 24, 2026 |
| CVE-2026-31545 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep. This … | Apr 24, 2026 |
| CVE-2026-31544 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix NULL dereference on notify error path Since commit b5daf93b809d1 ("firmware: arm_scmi: Avoid … | Apr 24, 2026 |
| CVE-2026-31543 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() logs … | Apr 24, 2026 |
| CVE-2026-31542 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff). This … | Apr 24, 2026 |
| CVE-2026-31541 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates When the "copy_trace_marker" option is enabled for an … | Apr 24, 2026 |
| CVE-2026-31540 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check set_default_submission() before deferencing When the i915 driver firmware binaries are not present, the … | Apr 24, 2026 |
| CVE-2026-31539 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_io and … | Apr 24, 2026 |
| CVE-2026-31538 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted … | Apr 24, 2026 |
| CVE-2026-31537 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.send_io.bcredits It turns out that our code will corrupt the … | Apr 24, 2026 |
| CVE-2026-31536 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch processing we likely have … | Apr 24, 2026 |
| CVE-2026-31535 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted … | Apr 24, 2026 |
| CVE-2026-31534 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | Apr 24, 2026 |
| CVE-2026-31052 | MEDIUM | 5.3 | An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow component | Apr 24, 2026 |
| CVE-2026-31051 | LOW | 3.8 | An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance component | Apr 24, 2026 |
| CVE-2026-31050 | MEDIUM | 4.9 | Cross Site Scripting vulnerability in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code | Apr 24, 2026 |
| CVE-2025-61872 | MEDIUM | 6.1 | Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger XSS via a malicious search query string. This occurs in the 'search … | Apr 24, 2026 |