CVE 2026 document archive · 200
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 200 / 264
- CVE-2026-43103kernel: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
- CVE-2026-43102kernel: net: airoha: Fix memory leak in airoha_qdma_rx_process()
- CVE-2026-43101kernel: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
- CVE-2026-43100kernel: bridge: guard local VLAN-0 FDB helpers against NULL vlan group
- CVE-2026-43099kernel: ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
- CVE-2026-43098kernel: nfc: s3fwrn5: allocate rx skb before consuming bytes
- CVE-2026-43097kernel: PCI: hv: Fix double ida_free in hv_pci_probe error path
- CVE-2026-43096kernel: mshv: Fix infinite fault loop on permission-denied GPA intercepts
- CVE-2026-43095kernel: ASoC: SDCA: Fix errors in IRQ cleanup
- CVE-2026-43094kernel: ixgbevf: add missing negotiate_features op to Hyper-V ops table
- CVE-2026-43093kernel: xsk: tighten UMEM headroom validation to account for tailroom and min frame
- CVE-2026-43092kernel: xsk: validate MTU against usable frame size on bind
- CVE-2026-43091kernel: xfrm: Wait for RCU readers during policy netns exit
- CVE-2026-43090kernel: xfrm: fix refcount leak in xfrm_migrate_policy_find
- CVE-2026-43089kernel: xfrm_user: fix info leak in build_mapping()
- CVE-2026-43088kernel: net: af_key: zero aligned sockaddr tail in PF_KEY exports
- CVE-2026-43087kernel: pinctrl: mcp23s08: Disable all pin interrupts during probe
- CVE-2026-43086kernel: Linux kernel (IPVS): Denial of Service due to NULL pointer dereference in ip_vs_add_service error path
- CVE-2026-43085kernel: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
- CVE-2026-43084kernel: netfilter: nfnetlink_queue: make hash table per queue
- CVE-2026-43083kernel: net: ioam6: fix OOB and missing lock
- CVE-2026-43082kernel: net: txgbe: leave space for null terminators on property_entry
- CVE-2026-43081kernel: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
- CVE-2026-43080kernel: l2tp: Drop large packets with UDP encap
- CVE-2026-43079kernel: perf/x86/intel/uncore: Skip discovery table for offline dies
- CVE-2026-43078kernel: crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
- CVE-2026-43077kernel: crypto: algif_aead - Fix minimum RX size check for decryption
- CVE-2026-43076kernel: ocfs2: validate inline data i_size during inode read
- CVE-2026-43075kernel: ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
- CVE-2026-43074kernel: eventpoll: defer struct eventpoll free to RCU grace period
- CVE-2026-43073kernel: x86-64: rename misleadingly named '__copy_user_nocache()' function
- CVE-2026-43072kernel: drm/vc4: platform_get_irq_byname() returns an int
- CVE-2026-43071kernel: dcache: Limit the minimal number of bucket to two
- CVE-2026-43070kernel: bpf: Reset register ID for BPF_END value tracking
- CVE-2026-43069kernel: Bluetooth: hci_ll: Fix firmware leak on error path
- CVE-2026-43068kernel: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()
- CVE-2026-43067kernel: ext4: handle wraparound when searching for blocks for indirect mapped blocks
- CVE-2026-43066kernel: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
- CVE-2026-43065kernel: ext4: always drain queued discard work in ext4_mb_release()
- CVE-2026-43064kernel: dmaengine: idxd: Fix not releasing workqueue on .release()
- CVE-2026-43063kernel: xfs: don't irele after failing to iget in xfs_attri_recover_work
- CVE-2026-43062kernel: Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
- CVE-2026-43061kernel: serial: 8250: Fix TX deadlock when using DMA
- CVE-2026-43060kernel: netfilter: nft_ct: drop pending enqueued packets on removal
- CVE-2026-43059kernel: Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
- CVE-2026-43058kernel: media: vidtv: fix pass-by-value structs causing MSAN warnings
- CVE-2026-43057kernel: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
- CVE-2026-43056kernel: net: mana: fix use-after-free in add_adev() error path
- CVE-2026-43055kernel: scsi: target: file: Use kzalloc_flex for aio_cmd
- CVE-2026-43054kernel: scsi: target: tcm_loop: Drain commands in target_reset handler