CVE-2026-53018 f2fs: avoid reading already updated pages during GC
Information published.
Categories: Microsoft
CVE-2025-38660 [ceph] parse_longname(): strrchr() expects NUL-terminated string
Information published.
Categories: Microsoft
CVE-2026-53078 bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
Information published.
Categories: Microsoft
CVE-2025-66038 OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers
Information published.
Categories: Microsoft
CVE-2025-21649 net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
Information published.
Categories: Microsoft
CVE-2026-53115 bus: fsl-mc: use generic driver_override infrastructure
Information published.
Categories: Microsoft
CVE-2026-9697 undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
Information published.
Categories: Microsoft
CVE-2026-53192 ALSA: timer: Fix UAF at snd_timer_user_params()
Information published.
Categories: Microsoft
CVE-2025-38585 staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
Information published.
Categories: Microsoft
CVE-2025-49010 OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
Information published.
Categories: Microsoft
CVE-2024-57872 scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
Information published.
Categories: Microsoft
CVE-2026-53149 thunderbolt: Bound root directory content to block size
Information published.
Categories: Microsoft
CVE-2026-53275 ipv6: mcast: Fix use-after-free when processing MLD queries
Information published.
Categories: Microsoft
CVE-2025-38591 bpf: Reject narrower access to pointer ctx fields
Information published.
Categories: Microsoft
CVE-2026-23371 sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
Information published.
Categories: Microsoft
CVE-2024-53187 io_uring: check for overflows in io_pin_pages
Information published.
Categories: Microsoft
CVE-2026-52916 batman-adv: frag: disallow unicast fragment in fragment
Information published.
Categories: Microsoft
CVE-2024-58266 The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.
Information published.
Categories: Microsoft
CVE-2026-23346 arm64: io: Extract user memory type in ioremap_prot()
Information published.
Categories: Microsoft
CVE-2026-53139 drm/v3d: Skip CSD when it has zeroed workgroups
Information published.
Categories: Microsoft
