CVE 2026 document archive · 196
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 196 / 264
- CVE-2026-43303kernel: mm/page_alloc: clear page->private in free_pages_prepare()
- CVE-2026-43302kernel: drm/v3d: Set DMA segment size to avoid debug warnings
- CVE-2026-43301kernel: media: chips-media: wave5: Fix PM runtime usage count underflow
- CVE-2026-43300kernel: drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()
- CVE-2026-43299kernel: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()
- CVE-2026-43298kernel: drm/amdgpu: Skip vcn poison irq release on VF
- CVE-2026-43297kernel: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()
- CVE-2026-43296kernel: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
- CVE-2026-43295kernel: rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
- CVE-2026-43294kernel: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels
- CVE-2026-43293kernel: media: chips-media: wave5: Fix kthread worker destruction in polling mode
- CVE-2026-43292kernel: mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
- CVE-2026-43291kernel: net: nfc: nci: Fix parameter validation for packet data
- CVE-2026-43290kernel: media: uvcvideo: Return queued buffers on start_streaming() failure
- CVE-2026-43289kernel: kexec: derive purgatory entry from symbol
- CVE-2026-43288kernel: ext4: move ext4_percpu_param_init() before ext4_mb_init()
- CVE-2026-43287kernel: drm: Account property blob allocations to memcg
- CVE-2026-43286kernel: mm/hugetlb: restore failed global reservations to subpool
- CVE-2026-43285kernel: mm/slab: do not access current->mems_allowed_seq if !allow_spin
- CVE-2026-43284kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel
- CVE-2026-43283kernel: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
- CVE-2026-43282kernel: RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port
- CVE-2026-43281kernel: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
- CVE-2026-43280kernel: drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise
- CVE-2026-43279kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing
- CVE-2026-43278kernel: dm: clear cloned request bio pointer when last clone bio completes
- CVE-2026-43277kernel: APEI/GHES: ensure that won't go past CPER allocated record
- CVE-2026-43276kernel: net: mana: Fix double destroy_workqueue on service rescan PCI path
- CVE-2026-43275kernel: scsi: ufs: core: Flush exception handling work when RPM level is zero
- CVE-2026-43274kernel: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()
- CVE-2026-43273kernel: ceph: supply snapshot context in ceph_zero_partial_object()
- CVE-2026-43272kernel: ring-buffer: Fix possible dereference of uninitialized pointer
- CVE-2026-43271kernel: md-cluster: fix NULL pointer dereference in process_metadata_update
- CVE-2026-43270kernel: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
- CVE-2026-43269kernel: drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
- CVE-2026-43268kernel: hfsplus: pretend special inodes as regular files
- CVE-2026-43267kernel: wifi: rtw89: fix potential zero beacon interval in beacon tracking
- CVE-2026-43266kernel: EFI/CPER: don't go past the ARM processor CPER record buffer
- CVE-2026-43265kernel: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
- CVE-2026-43264kernel: fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
- CVE-2026-43263kernel: media: chips-media: wave5: Fix Null reference while testing fluster
- CVE-2026-43262kernel: gfs2: fiemap page fault fix
- CVE-2026-43261kernel: arm64: Add support for TSV110 Spectre-BHB mitigation
- CVE-2026-43260kernel: bnxt_en: Fix RSS context delete logic
- CVE-2026-43259kernel: phy: fsl-imx8mq-usb: set platform driver data
- CVE-2026-43258kernel: alpha: fix user-space corruption during memory compaction
- CVE-2026-43257kernel: media: cx88: Add missing unmap in snd_cx88_hw_params()
- CVE-2026-43256kernel: media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
- CVE-2026-43255kernel: wifi: libertas: fix WARNING in usb_tx_block
- CVE-2026-43254kernel: ovpn: tcp - fix packet extraction from stream