SS
Product
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
by Siemens · last CVE Jul 29, 2026
On CISA KEVExploited in the wild
951
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 386Medium 93Low 0
Watch

Add SIMATIC S7-1500 TM MFP - GNU/Linux subsystem to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23372
7.8
0%
Mar 25
nfc: rawsock: cancel tx_work before socket teardown
Affected: 0
CVE-2026-23359
7.8
0%
Mar 25
bpf: Fix stack-out-of-bounds write in devmap
Affected: 0
CVE-2026-23351
7.8
0%
Mar 25
netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
Affected: 0
CVE-2026-23343
7.8
0%
Mar 25
xdp: produce a warning when calculated tailroom is negative
Affected: 0
CVE-2026-23340
7.8
0%
Mar 25
net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
Affected: 0
CVE-2026-23336
7.8
0%
Mar 25
wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
Affected: 0
CVE-2026-23319
7.8
0%
Mar 25
bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
Affected: 0
CVE-2026-23317
7.8
0%
Mar 25
drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
Affected: 0
CVE-2026-23281
7.8
0%
Mar 25
wifi: libertas: fix use-after-free in lbs_free_adapter()
Affected: 0
CVE-2026-23278
7.8
0%
Mar 20
netfilter: nf_tables: always walk all pending catchall elements
Affected: 0
CVE-2026-23274
7.8
0%
Mar 20
netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
Affected: 0
CVE-2026-23273
7.8
0%
Mar 20
macvlan: observe an RCU grace period in macvlan_common_newlink() error path
Affected: 0
CVE-2026-23272
7.8
0%
Mar 20
netfilter: nf_tables: unconditionally bump set->nelems before insertion
Affected: 0
CVE-2026-23271
7.8
0%
Mar 20
perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
Affected: 0
CVE-2026-23270
7.8
0%
Mar 18
net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
Affected: 0
CVE-2026-23253
7.8
0%
Mar 18
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
Affected: 0
CVE-2026-23245
7.8
0%
Mar 18
net/sched: act_gate: snapshot parameters with RCU on replace
Affected: 0
CVE-2026-23231
7.8
1%
Mar 4
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
Affected: 0
CVE-2025-68265
7.8
0%
Dec 16
nvme: fix admin request_queue lifetime
Affected: 0
CVE-2025-39863
7.8
0%
Sep 19
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
Affected: 0
CVE-2025-38704
7.8
0%
Sep 4
rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
Affected: 0
CVE-2025-38584
7.8
0%
Aug 19
padata: Fix pd UAF once and for all
Affected: 0
CVE-2025-7546
7.8
0%
Jul 13
GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write
Affected: before V1.1.1
CVE-2025-7545
7.8
0%
Jul 13
GNU Binutils objcopy.c copy_section heap-based overflow
Affected: before V1.1.1
CVE-2025-7425
7.8
0%
Jul 10
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Affected: before V1.1.1
CVE-2025-38250
7.8
0%
Jul 9
Bluetooth: hci_core: Fix use-after-free in vhci_flush()
Affected: 0
CVE-2025-5245
7.8
0%
May 27
GNU Binutils objdump debug.c debug_type_samep memory corruption
Affected: before V1.1.1
CVE-2025-5244
7.8
0%
May 27
GNU Binutils ld elflink.c elf_gc_sweep memory corruption
Affected: before V1.1.1
CVE-2023-52927
7.8
0%
Mar 14
netfilter: allow exp not to be removed in nf_ct_find_expectation
Affected: 0
CVE-2025-21863
7.8
0%
Mar 12
io_uring: prevent opcode speculation
Affected: 0
CVE-2025-21858
7.8
0%
Mar 12
geneve: Fix use-after-free in geneve_find_dev().
Affected: 0; 0
CVE-2024-58083
7.8
0%
Mar 6
KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
Affected: 0
CVE-2024-58072
7.8
0%
Mar 6
wifi: rtlwifi: remove unused check_buddy_priv
Affected: 0; 0
CVE-2025-21791
7.8
0%
Feb 27
vrf: use RCU protection in l3mdev_l3_out()
Affected: 0
CVE-2025-21772
7.8
0%
Feb 27
partitions: mac: fix handling of bogus partition table
Affected: 0
CVE-2025-21764
7.8
0%
Feb 27
ndisc: use RCU protection in ndisc_alloc_skb()
Affected: 0; 0
CVE-2025-21763
7.8
0%
Feb 27
neighbour: use RCU protection in __neigh_notify()
Affected: 0; 0
CVE-2025-21761
7.8
0%
Feb 27
openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
Affected: 0; 0
CVE-2025-21756
7.8
1%
Feb 27
vsock: Keep the binding until socket destruction
Affected: 0; 0
CVE-2025-21753
7.8
0%
Feb 27
btrfs: fix use-after-free when attempting to join an aborted transaction
Affected: 0; 0
CVE-2025-21735
7.8
0%
Feb 27
NFC: nci: Add bounds checking in nci_hci_create_pipe()
Affected: 0; 0
CVE-2024-58013
7.8
0%
Feb 27
Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
Affected: 0
CVE-2024-58002
7.8
0%
Feb 27
media: uvcvideo: Remove dangling pointers
Affected: 0
CVE-2025-21731
7.8
0%
Feb 27
nbd: don't allow reconnect after disconnect
Affected: 0
CVE-2025-21727
7.8
0%
Feb 27
padata: fix UAF in padata_reorder
Affected: 0; 0
CVE-2025-21726
7.8
0%
Feb 27
padata: avoid UAF for reorder_work
Affected: 0; 0
CVE-2025-21724
7.8
0%
Feb 27
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
Affected: 0
CVE-2024-57980
7.8
0%
Feb 27
media: uvcvideo: Fix double free in error path
Affected: 0
CVE-2024-57979
7.8
0%
Feb 27
pps: Fix a use-after-free
Affected: 0; 0
CVE-2025-21704
7.8
0%
Feb 22
usb: cdc-acm: Check control transfer buffer size before access
Affected: 0; 0
Page 3 of 8 · 386 total
The 500 most important CVEs for this product (exploited first, then by severity)