Thu, Apr 09 · 08:16 PM CDTCVE-2026-5194
9.1/10 · Must read/watchNVDvuln
Summary
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication if the public CA key u
CVECVE-2026-5194
SeverityCRITICAL
TypeUPDATED
PublishedThu, Apr 09 · 08:16 PM CDT
ModifiedThu, Apr 16 · 08:37 PM CDT
CVE-2026-43490
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate inherited ACE SID length smb_inherit_dacl() walks the parent directory DACL loaded from the security descriptor xattr. It verifies that each ACE contains the fixed SID header before using it, but does not verify that the variable-length
CVECVE-2026-43490
SeverityHIGH
TypeUPDATED
PublishedFri, May 15 · 06:16 AM CDT
ModifiedWed, May 20 · 05:16 PM CDT
CVE-2026-31613
8.1/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns STATUS_STOPPED_ON_SYMLINK, smb2_check_message() returns success without any length validation, leaving the symlink parsers as the only defense against an untrusted server.
CVECVE-2026-31613
SeverityHIGH
TypeUPDATED
PublishedFri, Apr 24 · 03:16 PM CDT
ModifiedTue, Apr 28 · 03:13 PM CDT
CVE-2026-23272
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nelems before insertion In case that the set is full, a new element gets published then removed without waiting for the RCU grace period, while RCU reader can be walking over it already. To address this i
CVECVE-2026-23272
SeverityHIGH
TypeUPDATED
PublishedFri, Mar 20 · 09:16 AM CDT
ModifiedThu, Apr 02 · 03:16 PM CDT
CVE-2026-42009
7.5/10 · Worth your timeNVDvuln
Summary
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable
CVECVE-2026-42009
SeverityHIGH
TypeUPDATED
PublishedMon, May 18 · 01:16 PM CDT
ModifiedMon, May 18 · 07:32 PM CDT
CVE-2026-43245
7.5/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ntfs: ->d_compare() must not block ... so don't use __getname() there. Switch it (and ntfs_d_hash(), while we are at it) to kmalloc(PATH_MAX, GFP_NOWAIT). Yes, ntfs_d_hash() almost certainly can do with smaller allocations, but let ntfs folks deal with
CVECVE-2026-43245
SeverityHIGH
TypeUPDATED
PublishedWed, May 06 · 12:16 PM CDT
ModifiedMon, May 11 · 01:34 PM CDT
CVE-2026-31707
7.1/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expected message size for each response type by adding (or multiplying) attacker-controlled fields from the daemon response to a fixed struct size in unsigned int arit
CVECVE-2026-31707
SeverityHIGH
TypeUPDATED
PublishedFri, May 01 · 02:16 PM CDT
ModifiedWed, May 06 · 08:26 PM CDT
CVE-2025-13118
6.3/10 · Skim only if relevantNVDvuln
Summary
A vulnerability was detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The ven
CVECVE-2025-13118
SeverityMEDIUM
TypeUPDATED
PublishedThu, Nov 13 · 03:15 PM CST
ModifiedWed, Apr 29 · 01:00 AM CDT
CVE-2026-43137
5.5/10 · Skim only if relevantNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix NULL pointer dereference If there's a mismatch between the DAI links in the machine driver and the topology, it is possible that the playback/capture widget is not set, especially in the case of loopback capture for echo refe
CVECVE-2026-43137
SeverityMEDIUM
TypeUPDATED
PublishedWed, May 06 · 12:16 PM CDT
ModifiedTue, May 12 · 09:15 PM CDT
CVE-2025-68251
4.8/10 · SkipNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that `clusterofs` can be larger than `lclustersize` for !NONHEAD `lclusters` in corrupted subpage co
CVECVE-2025-68251
SeverityUNKNOWN
TypeUPDATED
PublishedTue, Dec 16 · 03:15 PM CST
ModifiedWed, Apr 15 · 12:35 AM CDT
CVE-2026-43494
4.8/10 · SkipNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails When iov_iter_get_pages2() fails in rds_message_zcopy_from_user(), the pinned pages are released with put_page(), and rm->data.op_mmp_znotifier is cleared. But we fail to properly clear rm->data.op_n
CVECVE-2026-43494
SeverityUNKNOWN
TypeUPDATED
PublishedThu, May 21 · 12:16 PM CDT
ModifiedThu, May 21 · 04:16 PM CDT
