PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 212

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 212 / 264

  1. CVE-2026-31911libpcap: libpcap: Denial of Service via crafted BPF opcode
  2. CVE-2026-31897freerdp: FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`
  3. CVE-2026-31885freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks
  4. CVE-2026-31884freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0
  5. CVE-2026-31883freerdp: FreeRDP: Denial of Service via crafted audio data in RDP
  6. CVE-2026-31853imagemagick: ImageMagick: Denial of Service via overflow in SFW decoder when processing large images on 32-bit systems
  7. CVE-2026-31812quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet
  8. CVE-2026-31806freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages
  9. CVE-2026-31802tar: tar: File overwrite via drive-relative symlink traversal
  10. CVE-2026-31790openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
  11. CVE-2026-31789openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing
  12. CVE-2026-31788kernel: xen/privcmd: restrict usage in unprivileged domU
  13. CVE-2026-31787kernel: xen/privcmd: fix double free via VMA splitting
  14. CVE-2026-31786kernel: Buffer overflow in drivers/xen/sys-hypervisor.c
  15. CVE-2026-31785kernel: drm/xe/xe_pagefault: Disallow writes to read-only VMAs
  16. CVE-2026-31784kernel: drm/xe/pxp: Clear restart flag in pxp_start after jumping back
  17. CVE-2026-31783kernel: spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback
  18. CVE-2026-31782kernel: perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  19. CVE-2026-31781kernel: drm/ioc32: stop speculation on the drm_compat_ioctl path
  20. CVE-2026-31780kernel: wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
  21. CVE-2026-31779kernel: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
  22. CVE-2026-31778kernel: ALSA: caiaq: fix stack out-of-bounds read in init_card
  23. CVE-2026-31777kernel: ALSA: ctxfi: Check the error for index mapping
  24. CVE-2026-31776kernel: ALSA: ctxfi: Fix missing SPDIFI1 index handling
  25. CVE-2026-31775kernel: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization
  26. CVE-2026-31774kernel: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
  27. CVE-2026-31773kernel: Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  28. CVE-2026-31772kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
  29. CVE-2026-31771kernel: Bluetooth: hci_event: move wake reason storage into validated event handlers
  30. CVE-2026-31770kernel: hwmon: (occ) Fix division by zero in occ_show_power_1()
  31. CVE-2026-31769kernel: gpib: fix use-after-free in IO ioctl handlers
  32. CVE-2026-31768kernel: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
  33. CVE-2026-31767kernel: drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode
  34. CVE-2026-31766kernel: drm/amdgpu: validate doorbell_offset in user queue creation
  35. CVE-2026-31765kernel: drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
  36. CVE-2026-31764kernel: iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only
  37. CVE-2026-31763kernel: iio: gyro: mpu3050: Fix incorrect free_irq() variable
  38. CVE-2026-31762kernel: iio: gyro: mpu3050: Fix irq resource leak
  39. CVE-2026-31761kernel: iio: gyro: mpu3050: Move iio_device_register() to correct location
  40. CVE-2026-31760kernel: gpib: lpvo_usb: fix memory leak on disconnect
  41. CVE-2026-31759kernel: usb: ulpi: fix double free in ulpi_register_interface() error path
  42. CVE-2026-31758kernel: usb: usbtmc: Flush anchored URBs in usbtmc_release
  43. CVE-2026-31757kernel: usb: misc: usbio: Fix URB memory leak on submit failure
  44. CVE-2026-31756kernel: usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
  45. CVE-2026-31755kernel: usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  46. CVE-2026-31754kernel: usb: cdns3: gadget: fix state inconsistency on gadget init failure
  47. CVE-2026-31753kernel: auxdisplay: line-display: fix NULL dereference in linedisp_release
  48. CVE-2026-31752kernel: bridge: br_nd_send: validate ND option lengths
  49. CVE-2026-31751kernel: comedi: dt2815: add hardware detection to prevent crash
  50. CVE-2026-31750kernel: comedi: runflags cannot determine whether to reclaim chanlist
CVE 2026 document archive — Page 212 | PulseLinux