CVE 2026 document archive · 194

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 194 / 264

  1. CVE-2026-43403kernel: nsfs: tighten permission checks for ns iteration ioctls
  2. CVE-2026-43402kernel: kthread: consolidate kthread exit paths to prevent use-after-free
  3. CVE-2026-43401kernel: cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request()
  4. CVE-2026-43400kernel: drm/amdgpu: add upper bound check on user inputs in signal ioctl
  5. CVE-2026-43399kernel: drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl
  6. CVE-2026-43398kernel: drm/amdgpu: add upper bound check on user inputs in wait ioctl
  7. CVE-2026-43397kernel: drm/bridge: samsung-dsim: Fix memory leak in error path
  8. CVE-2026-43396kernel: drm/xe/sync: Fix user fence leak on alloc failure
  9. CVE-2026-43395kernel: drm/xe/sync: Cleanup partially initialized sync on parse failure
  10. CVE-2026-43394kernel: nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit()
  11. CVE-2026-43393kernel: btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies()
  12. CVE-2026-43392kernel: sched_ext: Fix starvation of scx_enable() under fair-class saturation
  13. CVE-2026-43391kernel: nsfs: tighten permission checks for handle opening
  14. CVE-2026-43390kernel: nstree: tighten permission checks for listing
  15. CVE-2026-43389kernel: mm: memfd_luo: always dirty all folios
  16. CVE-2026-43388kernel: mm/damon/core: clear walk_control on inactive context in damos_walk()
  17. CVE-2026-43387kernel: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
  18. CVE-2026-43386kernel: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
  19. CVE-2026-43385kernel: net: Fix rcu_tasks stall in threaded busypoll
  20. CVE-2026-43384kernel: net/tcp-ao: Fix MAC comparison to be constant-time
  21. CVE-2026-43383kernel: net/tcp-md5: Fix MAC comparison to be constant-time
  22. CVE-2026-43382kernel: batman-adv: Avoid double-rtnl_lock ELP metric worker
  23. CVE-2026-43381kernel: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  24. CVE-2026-43380kernel: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  25. CVE-2026-43379kernel: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
  26. CVE-2026-43378kernel: smb: server: fix use-after-free in smb2_open()
  27. CVE-2026-43377kernel: ksmbd: Don't log keys in SMB3 signing and encryption key generation
  28. CVE-2026-43376kernel: ksmbd: fix use-after-free by using call_rcu() for oplock_info
  29. CVE-2026-43375kernel: net: mctp: fix device leak on probe failure
  30. CVE-2026-43374kernel: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
  31. CVE-2026-43373kernel: net: ncsi: fix skb leak in error paths
  32. CVE-2026-43372kernel: net: dsa: microchip: Fix error path in PTP IRQ setup
  33. CVE-2026-43371kernel: net: macb: Shuffle the tx ring before enabling tx
  34. CVE-2026-43370kernel: drm/amdgpu: Fix use-after-free race in VM acquire
  35. CVE-2026-43369kernel: drm/amd: Fix NULL pointer dereference in device cleanup
  36. CVE-2026-43368kernel: drm/i915: Fix potential overflow of shmem scatterlist length
  37. CVE-2026-43367kernel: drm/amd: Fix a few more NULL pointer dereference in device cleanup
  38. CVE-2026-43366kernel: io_uring/kbuf: check if target buffer list is still legacy on recycle
  39. CVE-2026-43365kernel: xfs: fix undersized l_iclog_roundoff values
  40. CVE-2026-43364kernel: ublk: fix NULL pointer dereference in ublk_ctrl_set_size()
  41. CVE-2026-43363kernel: x86/apic: Disable x2apic on resume if the kernel expects so
  42. CVE-2026-43362kernel: smb: client: fix in-place encryption corruption in SMB2_write()
  43. CVE-2026-43361kernel: btrfs: fix transaction abort when snapshotting received subvolumes
  44. CVE-2026-43360kernel: btrfs: fix transaction abort on file creation due to name hash collision
  45. CVE-2026-43359kernel: btrfs: fix transaction abort on set received ioctl due to item overflow
  46. CVE-2026-43358kernel: btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer()
  47. CVE-2026-43357kernel: iio: gyro: mpu3050-core: fix pm_runtime error handling
  48. CVE-2026-43356kernel: iio: imu: adis: Fix NULL pointer dereference in adis_init
  49. CVE-2026-43355kernel: iio: light: bh1780: fix PM runtime leak on error path
  50. CVE-2026-43354kernel: iio: proximity: hx9023s: Protect against division by zero in set_samp_freq
CVE 2026 document archive — Page 194 | PulseLinux