SS
Product
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
On CISA KEVExploited in the wild
951
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 386Medium 93Low 0
Watch
Add SIMATIC S7-1500 TM MFP - GNU/Linux subsystem to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23372 | 7.8 | Mar 25 | nfc: rawsock: cancel tx_work before socket teardown Affected: 0 |
| CVE-2026-23359 | 7.8 | Mar 25 | bpf: Fix stack-out-of-bounds write in devmap Affected: 0 |
| CVE-2026-23351 | 7.8 | Mar 25 | netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Affected: 0 |
| CVE-2026-23343 | 7.8 | Mar 25 | xdp: produce a warning when calculated tailroom is negative Affected: 0 |
| CVE-2026-23340 | 7.8 | Mar 25 | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Affected: 0 |
| CVE-2026-23336 | 7.8 | Mar 25 | wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Affected: 0 |
| CVE-2026-23319 | 7.8 | Mar 25 | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Affected: 0 |
| CVE-2026-23317 | 7.8 | Mar 25 | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Affected: 0 |
| CVE-2026-23281 | 7.8 | Mar 25 | wifi: libertas: fix use-after-free in lbs_free_adapter() Affected: 0 |
| CVE-2026-23278 | 7.8 | Mar 20 | netfilter: nf_tables: always walk all pending catchall elements Affected: 0 |
| CVE-2026-23274 | 7.8 | Mar 20 | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Affected: 0 |
| CVE-2026-23273 | 7.8 | Mar 20 | macvlan: observe an RCU grace period in macvlan_common_newlink() error path Affected: 0 |
| CVE-2026-23272 | 7.8 | Mar 20 | netfilter: nf_tables: unconditionally bump set->nelems before insertion Affected: 0 |
| CVE-2026-23271 | 7.8 | Mar 20 | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Affected: 0 |
| CVE-2026-23270 | 7.8 | Mar 18 | net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Affected: 0 |
| CVE-2026-23253 | 7.8 | Mar 18 | media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Affected: 0 |
| CVE-2026-23245 | 7.8 | Mar 18 | net/sched: act_gate: snapshot parameters with RCU on replace Affected: 0 |
| CVE-2026-23231 | 7.8 | Mar 4 | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() Affected: 0 |
| CVE-2025-68265 | 7.8 | Dec 16 | nvme: fix admin request_queue lifetime Affected: 0 |
| CVE-2025-39863 | 7.8 | Sep 19 | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work Affected: 0 |
| CVE-2025-38704 | 7.8 | Sep 4 | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Affected: 0 |
| CVE-2025-38584 | 7.8 | Aug 19 | padata: Fix pd UAF once and for all Affected: 0 |
| CVE-2025-7546 | 7.8 | Jul 13 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write Affected: before V1.1.1 |
| CVE-2025-7545 | 7.8 | Jul 13 | GNU Binutils objcopy.c copy_section heap-based overflow Affected: before V1.1.1 |
| CVE-2025-7425 | 7.8 | Jul 10 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected: before V1.1.1 |
| CVE-2025-38250 | 7.8 | Jul 9 | Bluetooth: hci_core: Fix use-after-free in vhci_flush() Affected: 0 |
| CVE-2025-5245 | 7.8 | May 27 | GNU Binutils objdump debug.c debug_type_samep memory corruption Affected: before V1.1.1 |
| CVE-2025-5244 | 7.8 | May 27 | GNU Binutils ld elflink.c elf_gc_sweep memory corruption Affected: before V1.1.1 |
| CVE-2023-52927 | 7.8 | Mar 14 | netfilter: allow exp not to be removed in nf_ct_find_expectation Affected: 0 |
| CVE-2025-21863 | 7.8 | Mar 12 | io_uring: prevent opcode speculation Affected: 0 |
| CVE-2025-21858 | 7.8 | Mar 12 | geneve: Fix use-after-free in geneve_find_dev(). Affected: 0; 0 |
| CVE-2024-58083 | 7.8 | Mar 6 | KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Affected: 0 |
| CVE-2024-58072 | 7.8 | Mar 6 | wifi: rtlwifi: remove unused check_buddy_priv Affected: 0; 0 |
| CVE-2025-21791 | 7.8 | Feb 27 | vrf: use RCU protection in l3mdev_l3_out() Affected: 0 |
| CVE-2025-21772 | 7.8 | Feb 27 | partitions: mac: fix handling of bogus partition table Affected: 0 |
| CVE-2025-21764 | 7.8 | Feb 27 | ndisc: use RCU protection in ndisc_alloc_skb() Affected: 0; 0 |
| CVE-2025-21763 | 7.8 | Feb 27 | neighbour: use RCU protection in __neigh_notify() Affected: 0; 0 |
| CVE-2025-21761 | 7.8 | Feb 27 | openvswitch: use RCU protection in ovs_vport_cmd_fill_info() Affected: 0; 0 |
| CVE-2025-21756 | 7.8 | Feb 27 | vsock: Keep the binding until socket destruction Affected: 0; 0 |
| CVE-2025-21753 | 7.8 | Feb 27 | btrfs: fix use-after-free when attempting to join an aborted transaction Affected: 0; 0 |
| CVE-2025-21735 | 7.8 | Feb 27 | NFC: nci: Add bounds checking in nci_hci_create_pipe() Affected: 0; 0 |
| CVE-2024-58013 | 7.8 | Feb 27 | Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync Affected: 0 |
| CVE-2024-58002 | 7.8 | Feb 27 | media: uvcvideo: Remove dangling pointers Affected: 0 |
| CVE-2025-21731 | 7.8 | Feb 27 | nbd: don't allow reconnect after disconnect Affected: 0 |
| CVE-2025-21727 | 7.8 | Feb 27 | padata: fix UAF in padata_reorder Affected: 0; 0 |
| CVE-2025-21726 | 7.8 | Feb 27 | padata: avoid UAF for reorder_work Affected: 0; 0 |
| CVE-2025-21724 | 7.8 | Feb 27 | iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() Affected: 0 |
| CVE-2024-57980 | 7.8 | Feb 27 | media: uvcvideo: Fix double free in error path Affected: 0 |
| CVE-2024-57979 | 7.8 | Feb 27 | pps: Fix a use-after-free Affected: 0; 0 |
| CVE-2025-21704 | 7.8 | Feb 22 | usb: cdc-acm: Check control transfer buffer size before access Affected: 0; 0 |
The 500 most important CVEs for this product (exploited first, then by severity)
