CVE 2026 document archive · 195
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 195 / 264
- CVE-2026-43353kernel: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
- CVE-2026-43352kernel: i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue
- CVE-2026-43351kernel: KVM: arm64: Eagerly init vgic dist/redist on vgic creation
- CVE-2026-43350kernel: smb: client: require a full NFS mode SID before reading mode bits
- CVE-2026-43349kernel: f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer
- CVE-2026-43348kernel: mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER
- CVE-2026-43347kernel: arm64: dts: qcom: monaco: Reserve full Gunyah metadata region
- CVE-2026-43346kernel: ice: ptp: don't WARN when controlling PF is unavailable
- CVE-2026-43345kernel: net: ipa: fix event ring index not programmed for IPA v5.0+
- CVE-2026-43344kernel: perf/x86/intel/uncore: Fix die ID init and look up bugs
- CVE-2026-43343kernel: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
- CVE-2026-43342kernel: usb: gadget: f_rndis: Protect RNDIS options with mutex
- CVE-2026-43341kernel: net/ipv6: ioam6: prevent schema length wraparound in trace fill
- CVE-2026-43340kernel: comedi: Reinit dev->spinlock between attachments to low-level drivers
- CVE-2026-43339kernel: ipv6: prevent possible UaF in addrconf_permanent_addr()
- CVE-2026-43338kernel: btrfs: reserve enough transaction items for qgroup ioctls
- CVE-2026-43337kernel: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
- CVE-2026-43336kernel: lib/crypto: chacha: Zeroize permuted_state before it leaves scope
- CVE-2026-43335kernel: interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()
- CVE-2026-43334kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response
- CVE-2026-43333kernel: bpf: reject direct access to nullable PTR_TO_BUF pointers
- CVE-2026-43332kernel: thermal: core: Fix thermal zone device registration error path
- CVE-2026-43331kernel: x86/kexec: Disable KCOV instrumentation after load_segments()
- CVE-2026-43330kernel: crypto: caam - fix overflow on long hmac keys
- CVE-2026-43329kernel: netfilter: flowtable: strictly check for maximum number of actions
- CVE-2026-43328kernel: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
- CVE-2026-43327kernel: USB: dummy-hcd: Fix locking/synchronization error
- CVE-2026-43326kernel: sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback
- CVE-2026-43325kernel: wifi: iwlwifi: mvm: don't send a 6E related command when not supported
- CVE-2026-43324kernel: USB: dummy-hcd: Fix interrupt synchronization error
- CVE-2026-43323kernel: sched/fair: Fix zero_vruntime tracking fix
- CVE-2026-43322kernel: Bluetooth: hci_sync: Fix UAF in le_read_features_complete
- CVE-2026-43321kernel: bpf: Properly mark live registers for indirect jumps
- CVE-2026-43320kernel: drm/amd/display: Fix dsc eDP issue
- CVE-2026-43319kernel: spi: spidev: fix lock inversion between spi_lock and buf_lock
- CVE-2026-43318kernel: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify
- CVE-2026-43317kernel: most: core: fix leak on early registration failure
- CVE-2026-43316kernel: media: solo6x10: Check for out of bounds chip_id
- CVE-2026-43315kernel: KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
- CVE-2026-43314kernel: dm: remove fake timeout to avoid leak request
- CVE-2026-43313kernel: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
- CVE-2026-43312kernel: media: i2c: ov5647: Initialize subdev before controls
- CVE-2026-43311kernel: soc/tegra: pmc: Fix unsafe generic_handle_irq() call
- CVE-2026-43310kernel: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
- CVE-2026-43309kernel: md raid: fix hang when stopping arrays with metadata through dm-raid
- CVE-2026-43308kernel: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()
- CVE-2026-43307kernel: iio: accel: adxl380: Avoid reading more entries than present in FIFO
- CVE-2026-43306kernel: bpf: crypto: Use the correct destructor kfunc type
- CVE-2026-43305kernel: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path
- CVE-2026-43304kernel: libceph: define and enforce CEPH_MAX_KEY_LEN