Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-43050 | SUSE CVE CVE-2026-43050 | HIGH | 7.0 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-43049 | kernel: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43047 | SUSE CVE CVE-2026-43047 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-43046 | kernel: btrfs: reject root items with drop_progress and zero drop_level | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43043 | SUSE CVE CVE-2026-43043 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-43041 | kernel: net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43040 | kernel: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak | MEDIUM | 4.7 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43038 | kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() | HIGH | 7.3 | N/A | cvelistv5 | 2026-08-20 |
| cve-2026-43037 | kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | HIGH | 8.8 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-43036 | kernel: net: use skb_header_pointer() for TCPv4 GSO frag_off check | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43035 | kernel: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43033 | kernel: crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-43030 | SUSE CVE CVE-2026-43030 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-43028 | SUSE CVE CVE-2026-43028 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-43027 | SUSE CVE CVE-2026-43027 | HIGH | 7.0 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-43026 | SUSE CVE CVE-2026-43026 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-43025 | kernel: netfilter: ctnetlink: ignore explicit helper on new expectations | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-43024 | SUSE CVE CVE-2026-43024 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-43023 | kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() | HIGH | 7.0 | N/A | cvelistv5 | 2026-09-02 |
| cve-2026-43020 | kernel: Bluetooth: MGMT: validate LTK enc_size on load | HIGH | 7.3 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43019 | SUSE CVE CVE-2026-43019 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-43018 | kernel: Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-43017 | SUSE CVE CVE-2026-43017 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-43016 | kernel: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-43015 | SUSE CVE CVE-2026-43015 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-09-21 |
| cve-2026-43014 | kernel: net: macb: properly unregister fixed rate clocks | UNKNOWN | N/A | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43013 | kernel: net/mlx5: lag: Check for LAG device before creating debugfs | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43012 | kernel: net/mlx5: Fix switchdev mode rollback in case of failure | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-43001 | OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation | HIGH | 8.0 | N/A | cvelistv5 | 2026-08-14 |
| cve-2026-42997 | OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import | HIGH | 7.7 | N/A | cvelistv5 | 2026-07-15 |