SS
Product
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
On CISA KEVExploited in the wild
951
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 386Medium 93Low 0
Watch
Add SIMATIC S7-1500 TM MFP - GNU/Linux subsystem to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53192 | 7.8 | Jun 25 | ALSA: timer: Fix UAF at snd_timer_user_params() Affected: 0 |
| CVE-2026-53148 | 7.8 | Jun 25 | thunderbolt: Clamp XDomain response data copy to allocation size Affected: 0 |
| CVE-2026-52947 | 7.8 | Jun 24 | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove Affected: 0 |
| CVE-2026-52943 | 7.8 | Jun 24 | net: skbuff: fix missing zerocopy reference in pskb_carve helpers Affected: 0 |
| CVE-2026-52923 | 7.8 | Jun 24 | ipc: limit next_id allocation to the valid ID range Affected: 0 |
| CVE-2026-52910 | 7.8 | Jun 19 | bpf: Free reuseport cBPF prog after RCU grace period. Affected: 0 |
| CVE-2026-52909 | 7.8 | Jun 19 | ip6_vti: set netns_immutable on the fallback device. Affected: 0 |
| CVE-2026-46331 | 7.8 | Jun 16 | net/sched: fix pedit partial COW leading to page cache corruption Affected: 0 |
| CVE-2026-46323 | 7.8 | Jun 9 | net: gro: don't merge zcopy skbs Affected: 0 |
| CVE-2026-46294 | 7.8 | Jun 8 | dm: fix a buffer overflow in ioctl processing Affected: 0 |
| CVE-2026-46275 | 7.8 | Jun 8 | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Affected: 0 |
| CVE-2026-46234 | 7.8 | May 28 | vsock: fix buffer size clamping order Affected: 0 |
| CVE-2026-46227 | 7.8 | May 28 | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL Affected: 0 |
| CVE-2026-46209 | 7.8 | May 28 | drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() Affected: 0 |
| CVE-2026-46180 | 7.8 | May 28 | wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Affected: 0 |
| CVE-2026-46173 | 7.8 | May 28 | exit: prevent preemption of oopsing TASK_DEAD task Affected: 0 |
| CVE-2026-46163 | 7.8 | May 28 | wifi: b43legacy: enforce bounds check on firmware key index in RX path Affected: 0 |
| CVE-2026-46136 | 7.8 | May 28 | wifi: mt76: mt7921: fix a potential clc buffer length underflow Affected: 0 |
| CVE-2026-46122 | 7.8 | May 28 | wifi: b43: enforce bounds check on firmware key index in b43_rx() Affected: 0 |
| CVE-2026-46120 | 7.8 | May 28 | ip6_gre: Use cached t->net in ip6erspan_changelink(). Affected: 0 |
| CVE-2026-46116 | 7.8 | May 28 | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete Affected: 0 |
| CVE-2026-46107 | 7.8 | May 28 | dm-thin: fix metadata refcount underflow Affected: 0 |
| CVE-2026-46069 | 7.8 | May 27 | wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() Affected: 0 |
| CVE-2026-46065 | 7.8 | May 27 | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info Affected: 0 |
| CVE-2026-46047 | 7.8 | May 27 | net: qrtr: ns: Fix use-after-free in driver remove() Affected: 0 |
| CVE-2026-46015 | 7.8 | May 27 | tcp: call sk_data_ready() after listener migration Affected: 0 |
| CVE-2026-45991 | 7.8 | May 27 | udf: fix partition descriptor append bookkeeping Affected: 0 |
| CVE-2026-45839 | 7.8 | May 27 | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() Affected: 0 |
| CVE-2026-43502 | 7.8 | May 21 | net/rds: handle zerocopy send cleanup before the message is queued Affected: 0 |
| CVE-2026-43499 | 7.8 | May 21 | rtmutex: Use waiter::task instead of current in remove_waiter() Affected: 0 |
| CVE-2026-43303 | 7.8 | May 8 | mm/page_alloc: clear page->private in free_pages_prepare() Affected: 0 |
| CVE-2026-43116 | 7.8 | May 6 | netfilter: ctnetlink: ensure safe access to master conntrack Affected: 0 |
| CVE-2026-43111 | 7.8 | May 6 | HID: roccat: fix use-after-free in roccat_report_event Affected: 0 |
| CVE-2026-43093 | 7.8 | May 6 | xsk: tighten UMEM headroom validation to account for tailroom and min frame Affected: 0 |
| CVE-2026-43074 | 7.8 | May 6 | eventpoll: defer struct eventpoll free to RCU grace period Affected: 0 |
| CVE-2026-31700 | 7.8 | May 1 | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() Affected: 0 |
| CVE-2026-31696 | 7.8 | May 1 | rxrpc: Fix missing validation of ticket length in non-XDR key preparsing Affected: 0 |
| CVE-2026-31694 | 7.8 | May 1 | fuse: reject oversized dirents in page cache Affected: 0 |
| CVE-2026-31673 | 7.8 | Apr 25 | af_unix: read UNIX_DIAG_VFS data under unix_state_lock Affected: 0 |
| CVE-2026-31630 | 7.8 | Apr 24 | rxrpc: proc: size address buffers for %pISpc output Affected: 0 |
| CVE-2026-31586 | 7.8 | Apr 24 | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Affected: 0 |
| CVE-2026-31583 | 7.8 | Apr 24 | media: em28xx: fix use-after-free in em28xx_v4l2_open() Affected: 0 |
| CVE-2026-31580 | 7.8 | Apr 24 | bcache: fix cached_dev.sb_bio use-after-free and crash Affected: 0 |
| CVE-2026-31532 | 7.8 | Apr 23 | can: raw: fix ro->uniq use-after-free in raw_rcv() Affected: 0 |
| CVE-2026-31500 | 7.8 | Apr 22 | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Affected: 0 |
| CVE-2026-31488 | 7.8 | Apr 22 | drm/amd/display: Do not skip unrelated mode changes in DSC validation Affected: 0 |
| CVE-2026-31449 | 7.8 | Apr 22 | ext4: validate p_idx bounds in ext4_ext_correct_indexes Affected: 0 |
| CVE-2026-23392 | 7.8 | Mar 25 | netfilter: nf_tables: release flowtable after rcu grace period on error Affected: 0 |
| CVE-2026-23391 | 7.8 | Mar 25 | netfilter: xt_CT: drop pending enqueued packets on template removal Affected: 0 |
| CVE-2026-23378 | 7.8 | Mar 25 | net/sched: act_ife: Fix metalist update behavior Affected: 0 |
The 500 most important CVEs for this product (exploited first, then by severity)