Skip to content
OpenAdvisories
Medium WID-SEC-2026-1088 15 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Apr 13, 2026 · Updated Nov 9, 2026 · Revision 69 · de

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: Google Vendor: Microsoft Vendor: Oracle Vendor: Proxmox Vendor: Red Hat Vendor: RESF Vendor: Siemens Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Azure Linux Product: Container-Optimized OS Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: openSUSE Product: Rocky Linux Product: SIMATIC S7 Product: Virtual Environment Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, darunter möglicherweise DoS-Angriffe, die Manipulation oder Offenlegung von Daten sowie die Umgehung von Sicherheitsmaßnahmen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 15

  • Critical 9.8
    CVE-2026-31414

    netfilter: nf_conntrack_expect: use expect->helper

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use expect->helper Use expect->helper in ctnetlink and /proc to dump the helper name. Using nfct_help() without holding a reference to the master conntrack is …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-31419

    net: bonding: fix use-after-free in bond_xmit_broadcast()

    In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free in bond_xmit_broadcast() bond_xmit_broadcast() reuses the original skb for the last slave (determined by bond_is_last_slave()) and clones it for others. Concu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2026-31417

    net/x25: Fix overflow when accumulating packets

    In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Add a check to ensure that `x25_sock.fraglen` does not overflow. The `fraglen` also needs to be resetted when purging `fragment_queue` in `x25_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.0
    CVE-2026-31426

    ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()

    In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() When ec_install_handlers() returns -EPROBE_DEFER on reduced-hardware platforms, it has already started the EC and installed the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31415

    ipv6: avoid overflows in ip6_datagram_send_ctl()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl() Yiming Qian reported : <quote> I believe I found a locally triggerable kernel bug in the IPv6 sendmsg ancillary-data path that can panic the k…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-31416

    netfilter: nfnetlink_log: account for netlink header size

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: account for netlink header size This is a followup to an old bug fix: NLMSG_DONE needs to account for the netlink header size, not just the attribute size. This can …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31418

    netfilter: ipset: drop logically empty buckets in mtype_del

    In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts empty slots below n->pos in k, but it only drops the bucket when both n->pos and k are zero. This misses buckets…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31420

    bridge: mrp: reject zero test interval to avoid OOM panic

    In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test() accept the user-supplied interval value from netlink without validation. When interval…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-31421

    net/sched: cls_fw: fix NULL pointer dereference on shared blocks

    In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on shared blocks The old-method path in fw_classify() calls tcf_block_q() and dereferences q->handle. Shared blocks leave block->q NULL, causin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31422

    net/sched: cls_flow: fix NULL pointer dereference on shared blocks

    In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference on shared blocks flow_change() calls tcf_block_q() and dereferences q->handle to derive a default baseclass. Shared blocks leave block->q NUL…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31423

    net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

    In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() m2sm() converts a u32 slope to a u64 scaled value. For large inputs (e.g. m1=4000000000), the result can reach 2^32. rtsc_min() stores th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31424

    netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

    In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Weiming Shi says: xt_match and xt_target structs registered with NFPROTO_UNSPEC can be loaded by any pr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31425

    rds: ib: reject FRMR registration before IB connection is established

    In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the rds_ib_connection from conn->c_transport_data and passes it to rds_ib_reg_frmr() for FRWR me…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2026-31427

    netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp process_sdp() declares union nf_inet_addr rtp_addr on the stack and passes it to the nf_nat_sip sdp_session hook …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2026-31428

    netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message() manually constructs the NFULA_PAYLOAD netlink attribute using skb_put() and skb_copy_bits(),…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #69

    Neue Updates von Ubuntu aufgenommen

  2. #68

    PoC aufgenommen CVE-2026-31419

  3. #67

    Neue Updates von Debian aufgenommen

  4. #66

    Neue Updates von SUSE aufgenommen

  5. #65

    Neue Updates von Ubuntu aufgenommen

  6. #64

    Neue Updates von Ubuntu aufgenommen

  7. #63

    Neue Updates von openSUSE aufgenommen

  8. #62

    Neue Updates von Ubuntu aufgenommen

  9. #61

    Neue Updates von Ubuntu aufgenommen

  10. #60

    Neue Updates von SUSE aufgenommen

  11. #59

    Neue Updates von SUSE aufgenommen

  12. #58

    Neue Updates von SUSE aufgenommen

  13. #57

    Neue Updates von SUSE aufgenommen

  14. #56

    Neue Updates von Debian aufgenommen

  15. #55

    Neue Updates von Oracle Linux aufgenommen

  16. #54

    Neue Updates von Dell aufgenommen

  17. #53

    Neue Updates von Ubuntu aufgenommen

  18. #52

    Neue Updates von Ubuntu aufgenommen

  19. #51

    Neue Updates von Ubuntu aufgenommen

  20. #50

    Neue Updates von Ubuntu aufgenommen

  21. #49

    Neue Updates von Ubuntu aufgenommen

  22. #48

    Neue Updates von Ubuntu aufgenommen

  23. #47

    Neue Updates von Ubuntu aufgenommen

  24. #46

    Neue Updates von Oracle Linux aufgenommen

  25. #45

    Neue Updates von Ubuntu aufgenommen

References