Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens) - vulnerabilities (CVEs)

952 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-29. Vendor: Siemens.

CVEs of Simatic S7-1500 Tm Mfp - Gnulinux Subsystem

CVE-2026-64560 - CVSS 7.8 (high), 2026-07-29: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded…
CVE-2026-53362 - CVSS 7.8 (high), 2026-07-04: In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data(), when the…
CVE-2026-53358 - CVSS 8.8 (high), 2026-07-02: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() l2cap_chan_close()…
CVE-2026-53356 - CVSS 7.8 (high), 2026-07-01: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer…
CVE-2026-53352 - CVSS 4.7 (medium), 2026-07-01: In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() When a multi-threaded…
CVE-2026-53350 - CVSS 5.5 (medium), 2026-07-01: In the Linux kernel, the following vulnerability has been resolved: ASoC: wm_adsp: Fix NULL dereference when removing firmware controls In…
CVE-2026-53349 - CVSS 5.5 (medium), 2026-07-01: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: destroy stale expectfn expectations on unregister NAT helpers…
CVE-2026-53337 - CVSS 5.5 (medium), 2026-07-01: In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bond_do_ioctl() In bond_do_ioctl(),…
CVE-2026-53325 - CVSS 5.5 (medium), 2026-06-29: In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agp_amd64_probe() A NULL pointer dereference…
CVE-2026-53275 - CVSS 8.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD queries When processing an MLD query,…
CVE-2026-53269 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy…
CVE-2026-53268 - CVSS 8.2 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bounds read When parsing fails after we've…
CVE-2026-53265 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalidate lock commit 2d1f7b65f5de ("dm cache…
CVE-2026-53263 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in…
CVE-2026-53264 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and…
CVE-2026-53256 - CVSS 8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()…
CVE-2026-53254 - CVSS 8.1 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast…
CVE-2026-53255 - CVSS 7.1 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlv_data_is_valid() reads…
CVE-2026-53253 - CVSS 7.1 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing A BNEP peer can send a short BNEP SDU.…
CVE-2026-53249 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options This patch restricts setting Loose Source…
CVE-2026-53245 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr In…
CVE-2026-53242 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams…
CVE-2026-53239 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() Fix the race by…
CVE-2026-53236 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of…
CVE-2026-53228 - CVSS 9.8 (critical), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6_tunnel_xmit() caches the…
CVE-2026-53227 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfree_skb of ERR_PTR After the patch in the "Fixes" tag,…
CVE-2026-53225 - CVSS 9.1 (critical), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() __sctp_rcv_asconf_lookup() in…
CVE-2026-53221 - CVSS 9.8 (critical), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(), when an…
CVE-2026-53219 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leaking percpu counter pointers The native and compat…
CVE-2026-53218 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes…
CVE-2026-53212 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix use-after-free on object destroy nft_tunnel_obj_destroy() calls…
CVE-2026-53208 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig…
CVE-2026-53198 - CVSS 8.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL A deferred…
CVE-2026-53192 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer object, e.g. when a…
CVE-2026-53184 - CVSS 7.5 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: udp: clear skb->dev before running a sockmap verdict On the UDP receive path skb->dev is…
CVE-2026-53183 - CVSS 7.5 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the `window` field in the TCP…
CVE-2026-53181 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix sk_ack_backlog leak on failed handshake When…
CVE-2026-53177 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream…
CVE-2026-53168 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: fuse: reject fuse_notify() pagecache ops on directories The operations FUSE_NOTIFY_STORE…
CVE-2026-53167 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios FUSE_NOTIFY_RETRIEVE must be limited…
CVE-2026-53150 - CVSS 5.5 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid()…
CVE-2026-53149 - CVSS 7.1 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound root directory content to block size __tb_property_parse_dir() does not…
CVE-2026-53148 - CVSS 7.8 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Clamp XDomain response data copy to allocation size…
CVE-2026-53147 - CVSS 8.1 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tb_xdp_handle_request()…
CVE-2026-53146 - CVSS 7.1 (high), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Limit XDomain response copy to actual frame size tb_xdomain_copy() copies…
CVE-2026-53131 - CVSS 9.4 (critical), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the…
CVE-2026-53080 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL dereference of "old" filters before change() Like pointed out…
CVE-2026-52948 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl While fuzzing with Syzkaller, a…
CVE-2026-52947 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove In…
CVE-2026-52946 - CVSS 7.5 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling A SOFTIRQ-safe to…
CVE-2026-52943 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskb_carve helpers…
CVE-2026-52942 - CVSS 7.1 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: validate MAC header was set before dumping it The fallback path of…
CVE-2026-52929 - CVSS 7.5 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADD_OUT_STREAMS is denied, SCTP…
CVE-2026-52930 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shm_nattch updates shm_destroy_orphaned() walks the…
CVE-2026-52928 - CVSS 5.5 (medium), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports whether the receive…
CVE-2026-52923 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can…
CVE-2026-52918 - CVSS 8.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize accept_q access bt_sock_poll() walks the accept queue without…
CVE-2026-52917 - CVSS 7.1 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dump_one path The SCTP exact sock_diag lookup can…
CVE-2026-52909 - CVSS 7.8 (high), 2026-06-19: In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported…
CVE-2026-52910 - CVSS 7.8 (high), 2026-06-19: In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below…
CVE-2026-46331 - CVSS 7.8 (high), 2026-06-16: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes…
CVE-2026-46322 - CVSS 7.1 (high), 2026-06-09: In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in…
CVE-2026-46321 - CVSS 7.1 (high), 2026-06-09: In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_one() returns -EINVAL on…
CVE-2026-46320 - CVSS 7.4 (high), 2026-06-09: In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame…
CVE-2026-46323 - CVSS 7.8 (high), 2026-06-09: In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the…
CVE-2026-46307 - CVSS 8.3 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k driver seems to do an…
CVE-2026-46306 - CVSS 7.5 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 states that Protocol…
CVE-2026-46304 - CVSS 7.5 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_release_queue_work()…
CVE-2026-46303 - CVSS 8.2 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_continue()…
CVE-2026-46294 - CVSS 7.8 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson (using Claude) found a buffer…
CVE-2026-46275 - CVSS 7.8 (high), 2026-06-08: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities…
CVE-2026-46243 - CVSS 7.8 (high), 2026-06-01: In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions…
CVE-2026-46234 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size(), the buffer size was…
CVE-2026-46227 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL The SCTP_SENDALL…
CVE-2026-46214 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix accept queue count leak on transport mismatch…
CVE-2026-46209 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()…
CVE-2026-46196 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() When a…
CVE-2026-46195 - CVSS 9.8 (critical), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building DACL pointers parse_sec_desc(),…
CVE-2026-46187 - CVSS 4.7 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-stop RSI driver use…
CVE-2026-46193 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV…
CVE-2026-46185 - CVSS 9.1 (critical), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlink_data() Since smb2_check_message() returns…
CVE-2026-46191 - CVSS 7.1 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: fbcon: Avoid OOB font access if console rotation fails Clear the font buffer if the…
CVE-2026-46190 - CVSS 7.1 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() Sashiko noticed an…
CVE-2026-46180 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog…
CVE-2026-46177 - CVSS 7.5 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events…
CVE-2026-46167 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Just like in a previous…
CVE-2026-46173 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: exit: prevent preemption of oopsing TASK_DEAD task When an already-exiting task oopses,…
CVE-2026-46165 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: openvswitch: vport: fix self-deadlock on release of tunnel ports vports are used…
CVE-2026-46172 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() xfrm6_rcv_encap() performs an IPv6…
CVE-2026-46168 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using lock_sock_fast() (atomic…
CVE-2026-46161 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies setup_geo() extracts…
CVE-2026-46159 - CVSS 4.7 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak…
CVE-2026-46163 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix as b43:…
CVE-2026-46150 - CVSS 7.1 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotify_get_mark_safe() may return…
CVE-2026-46149 - CVSS 7.1 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()…
CVE-2026-46146 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3()…
CVE-2026-46151 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblp_ctrl_msg()…
CVE-2026-46137 - CVSS 9.8 (critical), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is…
CVE-2026-46136 - CVSS 7.8 (high), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buf_len is used to…
CVE-2026-46128 - CVSS 5.5 (medium), 2026-05-28: In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response…