CVE-2026-3099 Libsoup: libsoup: authentication bypass via digest authentication replay attack
Information published.
Categories: Microsoft
CVE-2026-53181 vsock/vmci: fix sk_ack_backlog leak on failed handshake
Information published.
Categories: Microsoft
CVE-2024-42107 ice: Don't process extts if PTP is disabled
Information published.
Categories: Microsoft
CVE-2025-38279 bpf: Do not include stack ptr register in precision backtracking bookkeeping
Information published.
Categories: Microsoft
CVE-2026-3633 Libsoup: libsoup: header and http request injection via crlf injection
Information published.
Categories: Microsoft
CVE-2024-56742 vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
Information published.
Categories: Microsoft
CVE-2026-53246 sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
Information published.
Categories: Microsoft
CVE-2025-38303 Bluetooth: eir: Fix possible crashes on eir_create_adv_data
Information published.
Categories: Microsoft
CVE-2026-3632 Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames
Information published.
Categories: Microsoft
CVE-2024-56712 udmabuf: fix memory leak on last export_udmabuf() error path
Information published.
Categories: Microsoft
CVE-2026-53163 locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
Information published.
Categories: Microsoft
CVE-2025-38333 f2fs: fix to bail out in get_new_segment()
Information published.
Categories: Microsoft
CVE-2026-3634 Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header
Information published.
Categories: Microsoft
CVE-2026-12003 CPython >3.11 Insecure Input Validation resulting in privilege escalation
Information published.
Categories: Microsoft
CVE-2024-53089 LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
Information published.
Categories: Microsoft
CVE-2026-53150 thunderbolt: Reject zero-length property entries in validator
Information published.
Categories: Microsoft
CVE-2026-55653 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
Information published.
Categories: Microsoft
CVE-2025-38264 nvme-tcp: sanitize request list handling
Information published.
Categories: Microsoft
CVE-2026-23276 net: add xmit recursion limit to tunnel xmit functions
Information published.
Categories: Microsoft
