SS
Product
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
On CISA KEVExploited in the wild
951
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 386Medium 93Low 0
Watch
Add SIMATIC S7-1500 TM MFP - GNU/Linux subsystem to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43502 | 7.8 | May 21 | net/rds: handle zerocopy send cleanup before the message is queued Affected: 0 |
| CVE-2026-43499 | 7.8 | May 21 | rtmutex: Use waiter::task instead of current in remove_waiter() Affected: 0 |
| CVE-2026-43303 | 7.8 | May 8 | mm/page_alloc: clear page->private in free_pages_prepare() Affected: 0 |
| CVE-2026-43116 | 7.8 | May 6 | netfilter: ctnetlink: ensure safe access to master conntrack Affected: 0 |
| CVE-2026-43111 | 7.8 | May 6 | HID: roccat: fix use-after-free in roccat_report_event Affected: 0 |
| CVE-2026-43093 | 7.8 | May 6 | xsk: tighten UMEM headroom validation to account for tailroom and min frame Affected: 0 |
| CVE-2026-43074 | 7.8 | May 6 | eventpoll: defer struct eventpoll free to RCU grace period Affected: 0 |
| CVE-2026-31700 | 7.8 | May 1 | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() Affected: 0 |
| CVE-2026-31696 | 7.8 | May 1 | rxrpc: Fix missing validation of ticket length in non-XDR key preparsing Affected: 0 |
| CVE-2026-31694 | 7.8 | May 1 | fuse: reject oversized dirents in page cache Affected: 0 |
| CVE-2026-31673 | 7.8 | Apr 25 | af_unix: read UNIX_DIAG_VFS data under unix_state_lock Affected: 0 |
| CVE-2026-31630 | 7.8 | Apr 24 | rxrpc: proc: size address buffers for %pISpc output Affected: 0 |
| CVE-2026-31586 | 7.8 | Apr 24 | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Affected: 0 |
| CVE-2026-31583 | 7.8 | Apr 24 | media: em28xx: fix use-after-free in em28xx_v4l2_open() Affected: 0 |
| CVE-2026-31580 | 7.8 | Apr 24 | bcache: fix cached_dev.sb_bio use-after-free and crash Affected: 0 |
| CVE-2026-31532 | 7.8 | Apr 23 | can: raw: fix ro->uniq use-after-free in raw_rcv() Affected: 0 |
| CVE-2026-31500 | 7.8 | Apr 22 | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Affected: 0 |
| CVE-2026-31488 | 7.8 | Apr 22 | drm/amd/display: Do not skip unrelated mode changes in DSC validation Affected: 0 |
| CVE-2026-31449 | 7.8 | Apr 22 | ext4: validate p_idx bounds in ext4_ext_correct_indexes Affected: 0 |
| CVE-2026-23392 | 7.8 | Mar 25 | netfilter: nf_tables: release flowtable after rcu grace period on error Affected: 0 |
| CVE-2026-23391 | 7.8 | Mar 25 | netfilter: xt_CT: drop pending enqueued packets on template removal Affected: 0 |
| CVE-2026-23378 | 7.8 | Mar 25 | net/sched: act_ife: Fix metalist update behavior Affected: 0 |
| CVE-2026-23372 | 7.8 | Mar 25 | nfc: rawsock: cancel tx_work before socket teardown Affected: 0 |
| CVE-2026-23359 | 7.8 | Mar 25 | bpf: Fix stack-out-of-bounds write in devmap Affected: 0 |
| CVE-2026-23351 | 7.8 | Mar 25 | netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Affected: 0 |
| CVE-2026-23343 | 7.8 | Mar 25 | xdp: produce a warning when calculated tailroom is negative Affected: 0 |
| CVE-2026-23340 | 7.8 | Mar 25 | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Affected: 0 |
| CVE-2026-23336 | 7.8 | Mar 25 | wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Affected: 0 |
| CVE-2026-23319 | 7.8 | Mar 25 | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Affected: 0 |
| CVE-2026-23317 | 7.8 | Mar 25 | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Affected: 0 |
| CVE-2026-23281 | 7.8 | Mar 25 | wifi: libertas: fix use-after-free in lbs_free_adapter() Affected: 0 |
| CVE-2026-23278 | 7.8 | Mar 20 | netfilter: nf_tables: always walk all pending catchall elements Affected: 0 |
| CVE-2026-23274 | 7.8 | Mar 20 | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Affected: 0 |
| CVE-2026-23273 | 7.8 | Mar 20 | macvlan: observe an RCU grace period in macvlan_common_newlink() error path Affected: 0 |
| CVE-2026-23272 | 7.8 | Mar 20 | netfilter: nf_tables: unconditionally bump set->nelems before insertion Affected: 0 |
| CVE-2026-23271 | 7.8 | Mar 20 | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Affected: 0 |
| CVE-2026-23270 | 7.8 | Mar 18 | net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Affected: 0 |
| CVE-2026-23253 | 7.8 | Mar 18 | media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Affected: 0 |
| CVE-2026-23245 | 7.8 | Mar 18 | net/sched: act_gate: snapshot parameters with RCU on replace Affected: 0 |
| CVE-2026-23231 | 7.8 | Mar 4 | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() Affected: 0 |
| CVE-2025-68265 | 7.8 | Dec 16 | nvme: fix admin request_queue lifetime Affected: 0 |
| CVE-2025-39863 | 7.8 | Sep 19 | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work Affected: 0 |
| CVE-2025-38704 | 7.8 | Sep 4 | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Affected: 0 |
| CVE-2025-38584 | 7.8 | Aug 19 | padata: Fix pd UAF once and for all Affected: 0 |
| CVE-2025-7546 | 7.8 | Jul 13 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write Affected: before V1.1.1 |
| CVE-2025-7545 | 7.8 | Jul 13 | GNU Binutils objcopy.c copy_section heap-based overflow Affected: before V1.1.1 |
| CVE-2025-7425 | 7.8 | Jul 10 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected: before V1.1.1 |
| CVE-2025-38250 | 7.8 | Jul 9 | Bluetooth: hci_core: Fix use-after-free in vhci_flush() Affected: 0 |
| CVE-2025-5245 | 7.8 | May 27 | GNU Binutils objdump debug.c debug_type_samep memory corruption Affected: before V1.1.1 |
| CVE-2025-5244 | 7.8 | May 27 | GNU Binutils ld elflink.c elf_gc_sweep memory corruption Affected: before V1.1.1 |
The 500 most important CVEs for this product (exploited first, then by severity)