SS
Product
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
On CISA KEVExploited in the wild
951
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 386Medium 93Low 0
Watch
Add SIMATIC S7-1500 TM MFP - GNU/Linux subsystem to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53362 In wildKEV | 7.8 | Jul 4 | ipv6: account for fraggap on the paged allocation path Affected: 0 |
| CVE-2022-2586 In wildKEV | 7.8 | Jan 8 | Linux Kernel Use-After-Free Vulnerability Affected: before V1.1 |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: before V1.1 |
| CVE-2024-50302 In wildKEV | 5.5 | Nov 19 | HID: core: zero-initialize the report buffer Affected: before V1.1.1 |
| CVE-2026-53228 | 9.8 | Jun 25 | ipv6: sit: reload inner IPv6 header after GSO offloads Affected: 0 |
| CVE-2026-53221 | 9.8 | Jun 25 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Affected: 0 |
| CVE-2026-46195 | 9.8 | May 28 | smb: client: validate dacloffset before building DACL pointers Affected: 0 |
| CVE-2026-46137 | 9.8 | May 28 | mptcp: pm: ADD_ADDR rtx: fix potential data-race Affected: 0 |
| CVE-2026-43493 | 9.8 | May 19 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests Affected: 0 |
| CVE-2026-31705 | 9.8 | May 1 | ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Affected: 0 |
| CVE-2026-31637 | 9.8 | Apr 24 | rxrpc: reject undecryptable rxkad response tickets Affected: 0 |
| CVE-2025-21796 | 9.8 | Feb 27 | nfsd: clear acl_access/acl_default after releasing them Affected: 0; 0 |
| CVE-2023-36660 | 9.8 | Jun 25 | The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption Affected: before V1.1 |
| CVE-2022-2274 | 9.8 | Jul 1 | RSA implementation bug in AVX512IFMA instructions Affected: before V1.1 |
| CVE-2026-53131 | 9.4 | Jun 25 | netfilter: require Ethernet MAC header before using eth_hdr() Affected: 0 |
| CVE-2026-43114 | 9.4 | May 6 | netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry Affected: 0 |
| CVE-2026-31685 | 9.4 | Apr 25 | netfilter: ip6t_eui64: reject invalid MAC header for all packets Affected: 0 |
| CVE-2026-53225 | 9.1 | Jun 25 | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() Affected: 0 |
| CVE-2026-46185 | 9.1 | May 28 | smb/client: fix out-of-bounds read in symlink_data() Affected: 0 |
| CVE-2026-43117 | 9.1 | May 6 | btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() Affected: 0 |
| CVE-2026-43071 | 9.1 | May 5 | dcache: Limit the minimal number of bucket to two Affected: 0 |
| CVE-2024-47685 | 9.1 | Oct 21 | netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() Affected: before V1.1.1 |
| CVE-2024-5535 | 9.1 | Jun 27 | SSL_select_next_proto buffer overread Affected: before V1.1.1 |
| CVE-2024-35960 | 9.1 | May 20 | net/mlx5: Properly link new fs rules into the tree Affected: before V1.1.1 |
| CVE-2024-35845 | 9.1 | May 17 | wifi: iwlwifi: dbg-tlv: ensure NUL termination Affected: before V1.1.1 |
| CVE-2026-53358 | 8.8 | Jul 2 | Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() Affected: 0 |
| CVE-2026-53275 | 8.8 | Jun 25 | ipv6: mcast: Fix use-after-free when processing MLD queries Affected: 0 |
| CVE-2026-53198 | 8.8 | Jun 25 | ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL Affected: 0 |
| CVE-2026-52918 | 8.8 | Jun 24 | Bluetooth: serialize accept_q access Affected: 0 |
| CVE-2026-46125 | 8.8 | May 28 | wifi: mac80211: remove station if connection prep fails Affected: 0 |
| CVE-2026-46113 | 8.8 | May 28 | KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Affected: 0 |
| CVE-2026-46056 | 8.8 | May 27 | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers Affected: 0 |
| CVE-2026-43503 | 8.8 | May 23 | net: skbuff: propagate shared-frag marker through frag-transfer helpers Affected: 0 |
| CVE-2026-43112 | 8.8 | May 6 | fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Affected: 0 |
| CVE-2026-43110 | 8.8 | May 6 | wifi: brcmfmac: validate bsscfg indices in IF events Affected: 0 |
| CVE-2026-31709 | 8.8 | May 1 | smb: client: validate the whole DACL before rewriting it in cifsacl Affected: 0 |
| CVE-2026-31629 | 8.8 | Apr 24 | nfc: llcp: add missing return after LLCP_CLOSED checks Affected: 0 |
| CVE-2026-31622 | 8.8 | Apr 24 | NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Affected: 0 |
| CVE-2026-23395 | 8.8 | Mar 25 | Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Affected: 0 |
| CVE-2024-35969 | 8.8 | May 20 | ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Affected: before V1.1.1 |
| CVE-2024-35955 | 8.8 | May 20 | kprobes: Fix possible use-after-free issue on kprobe registration Affected: before V1.1.1 |
| CVE-2024-27053 | 8.8 | May 1 | wifi: wilc1000: fix RCU usage in connect path Affected: before V1.1.1 |
| CVE-2023-5178 | 8.8 | Nov 1 | Kernel: use after free in nvmet_tcp_free_crypto in nvme Affected: before V1.1 |
| CVE-2022-42896 | 8.8 | Nov 23 | Info Leak in l2cap_core in the Linux Kernel Affected: before V1.1 |
| CVE-2022-42719 | 8.8 | Oct 13 | A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN… Affected: before V1.1 |
| CVE-2026-31611 | 8.6 | Apr 24 | ksmbd: require 3 sub-authorities before reading sub_auth[2] Affected: 0 |
| CVE-2026-46307 | 8.3 | Jun 8 | wifi: ath5k: do not access array OOB Affected: 0 |
| CVE-2026-31712 | 8.3 | May 1 | ksmbd: require minimum ACE size in smb_check_perm_dacl() Affected: 0 |
| CVE-2026-53268 | 8.2 | Jun 25 | netfilter: conntrack_irc: fix possible out-of-bounds read Affected: 0 |
| CVE-2026-46303 | 8.2 | Jun 8 | isofs: validate Rock Ridge CE continuation extent against volume size Affected: 0 |
The 500 most important CVEs for this product (exploited first, then by severity)