CVE-2026-43414 is a medium severity vulnerability related to a double free issue in the fcport component of the qla2xxx SCSI driver. The vulnerability affects Microsoft products including Azure Linux kernel version 3.0. No detailed technical information or exploitation details are provided. There is no CVSS score assigned to this vulnerability. No patch or remediation information is currently available.
CVE-2026-43029 is a medium severity vulnerability related to a soft lockup issue in the mptcp_recvmsg() function of the Microsoft Azure Linux kernel version 3.0. The vulnerability is categorized under CWE-667, which involves improper locking leading to potential deadlocks or soft lockups. No CVSS score is provided, and no known exploits are reported in the wild. There is no explicit patch or remediation information available in the provided data.
CVE-2026-28389 is a vulnerability in Microsoft products, including Azure Linux versions 2.0 and 3.0, involving a possible NULL pointer dereference when processing CMS KeyAgreeRecipientInfo. This flaw can cause application crashes or denial of service. There is no CVSS score or detailed vendor advisory available, and no known exploits in the wild. No specific geographic targeting is indicated.
Multiple vulnerabilities including NULL pointer dereference, heap buffer overflows, out-of-bounds reads, and use-after-free conditions were identified in OpenSSL 1.0.0 and related components. These issues affect ASN.1 parsing, CMS decryption, PKCS7 verification, and OCSP response processing, potentially causing crashes or memory corruption. The vulnerabilities are addressed in a security update for SUSE's openssl-1_0_0 packages and include fixes for CVE-2026-28388 among others.
Multiple vulnerabilities including use-after-free, NULL pointer dereferences, heap buffer overflow, and incorrect failure handling were identified in OpenSSL 3 components such as DANE client code and cryptographic operations. These issues affect OpenSSL 3 versions distributed by SUSE and have been assigned CVE identifiers CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-31789, and CVE-2026-31790. The severity is rated high. A security update addressing these vulnerabilities has been released.
A heap buffer overflow vulnerability exists in OpenSSL on 32-bit platforms during hexadecimal conversion of large OCTET STRING values in X.509 certificates. This is caused by integer overflow in buffer size calculation when processing crafted certificates with large extensions like Subject Key Identifier or Authority Key Identifier. Exploitation could cause crashes or potentially allow attacker-controlled code execution, but requires certificates larger than 1 GB, making exploitation unlikely. The vulnerability does not affect OpenSSL FIPS modules. Fixes are available in updated OpenSSL packages for Ubuntu releases.
CVE-2026-31579 is a vulnerability related to the WireGuard device driver, specifically involving the use of an exit routine callback instead of manual locking in the pre-exit function. The advisory references Microsoft products version 2.0 and 3.0 as affected. No detailed technical impact, exploitation methods, or patch information is provided.
CVE-2026-31592 is a vulnerability related to the KVM SEV (Secure Encrypted Virtualization) feature where the function sev_mem_enc_register_region() is not fully protected by the kvm->lock. This could potentially lead to concurrency issues in the management of encrypted memory regions. The vulnerability affects Microsoft products with versions 2.0 and 3.0. No CVSS score is provided, and there is no indication of known exploits in the wild or available patches.
CVE-2026-31677 is a vulnerability related to the crypto subsystem, specifically the af_alg component, involving the limitation of RX scatter-gather (SG) extraction by the receive buffer budget. The vulnerability affects Microsoft product version 3.0. No detailed technical or impact information is provided beyond this. There is no CVSS score or known exploits in the wild at this time.
CVE-2026-31499 is a vulnerability in Microsoft Bluetooth L2CAP component involving a deadlock issue in the l2cap_conn_del() function. This deadlock could potentially affect the stability of the Bluetooth connection handling. The affected version explicitly identified is version 3.0. No CVSS score is provided for this vulnerability.
CVE-2026-31487 is a vulnerability related to the use of generic driver_override infrastructure in Microsoft software versions 2.0 and 3.0. The provided information does not include technical details about the nature of the vulnerability or its exploitation. No CVSS score is available, and no known exploits in the wild have been reported.
CVE-2026-31516 is a vulnerability related to the xfrm subsystem where a race condition occurs between policy_hthresh.work and network namespace teardown. The issue affects specific Microsoft product versions 2.0 and 3.0. No CVSS score or detailed technical impact is provided.
CVE-2026-31506 is a vulnerability in Microsoft software identified as a double free issue related to the Wake-on-LAN (WoL) interrupt in the bcmasp network component. The vulnerability affects version 3.0 of the product. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
CVE-2026-31462 is a vulnerability related to the drm/amdgpu component involving the prevention of immediate PASID reuse. The provided information is minimal and does not include technical details or impact specifics beyond the title. The affected version is exactly 3.0. No patch or remediation details are provided.
CVE-2026-31493 is a vulnerability in Microsoft software related to RDMA/efa where a completion context is used after it has been freed. This use-after-free flaw can lead to undefined behavior or potential security issues. The affected versions explicitly include 2.0 and 3.0. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
CVE-2026-31531 is a vulnerability related to the IPv4 nexthop allocation process in Microsoft software versions 2.0 and 3.0. The issue involves dynamically allocating socket buffers (skb) in the rtm_get_nexthop() function. No detailed technical or impact information is provided, and no CVSS score is assigned.
CVE-2026-31557 is a vulnerability related to the 'nvmet' component involving asynchronous event work handling. The provided information lacks technical details about the nature of the vulnerability or its exploitation. The affected versions are specifically version 2.0 and 3.0 of the Microsoft product referenced. No patch or remediation information is provided, and no known exploits are reported in the wild.
CVE-2026-31663 is a vulnerability identified in Microsoft products, specifically versions 2.0 and 3.0. The vulnerability is titled 'xfrm: hold dev ref until after transport_finish NF_HOOK'. No detailed technical description or impact information is provided beyond the title and affected versions. There is no CVSS score available for this vulnerability.