CVE 2026 document archive · 194
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 194 / 264
- CVE-2026-43403kernel: nsfs: tighten permission checks for ns iteration ioctls
- CVE-2026-43402kernel: kthread: consolidate kthread exit paths to prevent use-after-free
- CVE-2026-43401kernel: cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request()
- CVE-2026-43400kernel: drm/amdgpu: add upper bound check on user inputs in signal ioctl
- CVE-2026-43399kernel: drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl
- CVE-2026-43398kernel: drm/amdgpu: add upper bound check on user inputs in wait ioctl
- CVE-2026-43397kernel: drm/bridge: samsung-dsim: Fix memory leak in error path
- CVE-2026-43396kernel: drm/xe/sync: Fix user fence leak on alloc failure
- CVE-2026-43395kernel: drm/xe/sync: Cleanup partially initialized sync on parse failure
- CVE-2026-43394kernel: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit()
- CVE-2026-43393kernel: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies()
- CVE-2026-43392kernel: sched_ext: Fix starvation of scx_enable() under fair-class saturation
- CVE-2026-43391kernel: nsfs: tighten permission checks for handle opening
- CVE-2026-43390kernel: nstree: tighten permission checks for listing
- CVE-2026-43389kernel: mm: memfd_luo: always dirty all folios
- CVE-2026-43388kernel: mm/damon/core: clear walk_control on inactive context in damos_walk()
- CVE-2026-43387kernel: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
- CVE-2026-43386kernel: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
- CVE-2026-43385kernel: net: Fix rcu_tasks stall in threaded busypoll
- CVE-2026-43384kernel: net/tcp-ao: Fix MAC comparison to be constant-time
- CVE-2026-43383kernel: net/tcp-md5: Fix MAC comparison to be constant-time
- CVE-2026-43382kernel: batman-adv: Avoid double-rtnl_lock ELP metric worker
- CVE-2026-43381kernel: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
- CVE-2026-43380kernel: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
- CVE-2026-43379kernel: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
- CVE-2026-43378kernel: smb: server: fix use-after-free in smb2_open()
- CVE-2026-43377kernel: ksmbd: Don't log keys in SMB3 signing and encryption key generation
- CVE-2026-43376kernel: ksmbd: fix use-after-free by using call_rcu() for oplock_info
- CVE-2026-43375kernel: net: mctp: fix device leak on probe failure
- CVE-2026-43374kernel: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
- CVE-2026-43373kernel: net: ncsi: fix skb leak in error paths
- CVE-2026-43372kernel: net: dsa: microchip: Fix error path in PTP IRQ setup
- CVE-2026-43371kernel: net: macb: Shuffle the tx ring before enabling tx
- CVE-2026-43370kernel: drm/amdgpu: Fix use-after-free race in VM acquire
- CVE-2026-43369kernel: drm/amd: Fix NULL pointer dereference in device cleanup
- CVE-2026-43368kernel: drm/i915: Fix potential overflow of shmem scatterlist length
- CVE-2026-43367kernel: drm/amd: Fix a few more NULL pointer dereference in device cleanup
- CVE-2026-43366kernel: io_uring/kbuf: check if target buffer list is still legacy on recycle
- CVE-2026-43365kernel: xfs: fix undersized l_iclog_roundoff values
- CVE-2026-43364kernel: ublk: fix NULL pointer dereference in ublk_ctrl_set_size()
- CVE-2026-43363kernel: x86/apic: Disable x2apic on resume if the kernel expects so
- CVE-2026-43362kernel: smb: client: fix in-place encryption corruption in SMB2_write()
- CVE-2026-43361kernel: btrfs: fix transaction abort when snapshotting received subvolumes
- CVE-2026-43360kernel: btrfs: fix transaction abort on file creation due to name hash collision
- CVE-2026-43359kernel: btrfs: fix transaction abort on set received ioctl due to item overflow
- CVE-2026-43358kernel: btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()
- CVE-2026-43357kernel: iio: gyro: mpu3050-core: fix pm_runtime error handling
- CVE-2026-43356kernel: iio: imu: adis: Fix NULL pointer dereference in adis_init
- CVE-2026-43355kernel: iio: light: bh1780: fix PM runtime leak on error path
- CVE-2026-43354kernel: iio: proximity: hx9023s: Protect against division by zero in set_samp_freq