CVE 2026 document archive · 193
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 193 / 264
- CVE-2026-43454kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks
- CVE-2026-43453kernel: netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
- CVE-2026-43452kernel: netfilter: x_tables: guard option walkers against 1-byte tail reads
- CVE-2026-43451kernel: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
- CVE-2026-43450kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
- CVE-2026-43449kernel: Linux kernel: NVMe PCI driver slab-out-of-bounds can lead to privilege escalation or denial of service
- CVE-2026-43448kernel: nvme-pci: Fix race bug in nvme_poll_irqdisable()
- CVE-2026-43447kernel: iavf: fix PTP use-after-free during reset
- CVE-2026-43446kernel: accel/amdxdna: Fix runtime suspend deadlock when there is pending job
- CVE-2026-43445kernel: e1000/e1000e: Fix leak in DMA error cleanup
- CVE-2026-43444kernel: drm/amdkfd: Unreserve bo if queue update failed
- CVE-2026-43443kernel: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
- CVE-2026-43442kernel: io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops
- CVE-2026-43441kernel: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
- CVE-2026-43440kernel: net/mana: Null service_wq on setup error to prevent double destroy
- CVE-2026-43439kernel: cgroup: fix race between task migration and iteration
- CVE-2026-43438kernel: sched_ext: Remove redundant css_put() in scx_cgroup_init()
- CVE-2026-43437kernel: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
- CVE-2026-43436kernel: ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
- CVE-2026-43435kernel: rust_binder: fix oneway spam detection
- CVE-2026-43434kernel: rust_binder: check ownership before using vma
- CVE-2026-43433kernel: rust_binder: avoid reading the written value in offsets array
- CVE-2026-43432kernel: usb: xhci: Fix memory leak in xhci_disable_slot()
- CVE-2026-43431kernel: xhci: Fix NULL pointer dereference when reading portli debugfs files
- CVE-2026-43430kernel: usb: yurex: fix race in probe
- CVE-2026-43429kernel: USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
- CVE-2026-43428kernel: USB: core: Limit the length of unkillable synchronous timeouts
- CVE-2026-43427kernel: usb: class: cdc-wdm: fix reordering issue in read code path
- CVE-2026-43426kernel: usb: renesas_usbhs: fix use-after-free in ISR during device removal
- CVE-2026-43425kernel: usb: image: mdc800: kill download URB on timeout
- CVE-2026-43424kernel: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
- CVE-2026-43422kernel: usb: legacy: ncm: Fix NPE in gncm_bind
- CVE-2026-43421kernel: usb: gadget: f_ncm: Fix net_device lifecycle with device_move
- CVE-2026-43420kernel: ceph: fix i_nlink underrun during async unlink
- CVE-2026-43419kernel: ceph: fix memory leaks in ceph_mdsc_build_path()
- CVE-2026-43418kernel: sched/mmcid: Prevent CID stalls due to concurrent forks
- CVE-2026-43417kernel: sched/mmcid: Handle vfork()/CLONE_VM correctly
- CVE-2026-43416kernel: powerpc, perf: Check that current->mm is alive before getting user callchain
- CVE-2026-43415kernel: scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
- CVE-2026-43414kernel: scsi: qla2xxx: Completely fix fcport double free
- CVE-2026-43413kernel: scsi: hisi_sas: Fix NULL pointer exception during user_scan()
- CVE-2026-43412kernel: ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
- CVE-2026-43411kernel: tipc: fix divide-by-zero in tipc_sk_filter_connect()
- CVE-2026-43410kernel: firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled
- CVE-2026-43409kernel: kprobes: avoid crash when rmmod/insmod after ftrace killed
- CVE-2026-43408kernel: ceph: add a bunch of missing ceph_path_info initializers
- CVE-2026-43407kernel: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
- CVE-2026-43406kernel: libceph: prevent potential out-of-bounds reads in process_message_header()
- CVE-2026-43405kernel: libceph: Use u32 for non-negative values in ceph_monmap_decode()
- CVE-2026-43404kernel: mm: Fix a hmm_range_fault() livelock / starvation problem