CVE 2026 document archive · 213

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 213 / 264

  1. CVE-2026-31749kernel: comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  2. CVE-2026-31748kernel: comedi: me_daq: Fix potential overrun of firmware buffer
  3. CVE-2026-31747kernel: comedi: me4000: Fix potential overrun of firmware buffer
  4. CVE-2026-31746kernel: s390/zcrypt: Fix memory leak with CCA cards used as accelerator
  5. CVE-2026-31745kernel: reset: gpio: fix double free in reset_add_gpio_aux_device() error path
  6. CVE-2026-31744kernel: PM: EM: Fix NULL pointer dereference when perf domain ID is not found
  7. CVE-2026-31743kernel: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy
  8. CVE-2026-31742kernel: vt: discard stale unicode buffer on alt screen exit after resize
  9. CVE-2026-31741kernel: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
  10. CVE-2026-31740kernel: counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
  11. CVE-2026-31739kernel: crypto: tegra - Add missing CRYPTO_ALG_ASYNC
  12. CVE-2026-31738kernel: vxlan: validate ND option lengths in vxlan_na_create
  13. CVE-2026-31737kernel: net: ftgmac100: fix ring allocation unwind on open failure
  14. CVE-2026-31736kernel: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
  15. CVE-2026-31735kernel: iommupt: Fix short gather if the unmap goes into a large mapping
  16. CVE-2026-31734kernel: sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU
  17. CVE-2026-31733kernel: sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
  18. CVE-2026-31732kernel: gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()
  19. CVE-2026-31731kernel: thermal: core: Address thermal zone removal races with resume
  20. CVE-2026-31730kernel: misc: fastrpc: possible double-free of cctx->remote_heap
  21. CVE-2026-31729kernel: usb: typec: ucsi: validate connector number in ucsi_notify_common()
  22. CVE-2026-31728kernel: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
  23. CVE-2026-31727kernel: usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
  24. CVE-2026-31726kernel: usb: gadget: uvc: fix NULL pointer dereference during unbind race
  25. CVE-2026-31725kernel: usb: gadget: f_ecm: Fix net_device lifecycle with device_move
  26. CVE-2026-31724kernel: usb: gadget: f_eem: Fix net_device lifecycle with device_move
  27. CVE-2026-31723kernel: usb: gadget: f_subset: Fix net_device lifecycle with device_move
  28. CVE-2026-31722kernel: usb: gadget: f_rndis: Fix net_device lifecycle with device_move
  29. CVE-2026-31721kernel: usb: gadget: f_hid: move list and spinlock inits from bind to alloc
  30. CVE-2026-31720kernel: usb: gadget: f_uac1_legacy: validate control request size
  31. CVE-2026-31719kernel: crypto: krb5enc - fix async decrypt skipping hash verification
  32. CVE-2026-31718kernel: ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
  33. CVE-2026-31717kernel: ksmbd: validate owner of durable handle on reconnect
  34. CVE-2026-31716kernel: fs/ntfs3: validate rec->used in journal-replay file record check
  35. CVE-2026-31715kernel: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
  36. CVE-2026-31714kernel: f2fs: fix to avoid memory leak in f2fs_rename()
  37. CVE-2026-31713kernel: fuse: abort on fatal signal during sync init
  38. CVE-2026-31712kernel: ksmbd: require minimum ACE size in smb_check_perm_dacl()
  39. CVE-2026-31711kernel: smb: server: fix active_num_conn leak on transport allocation failure
  40. CVE-2026-31710kernel: smb: client: fix dir separator in SMB1 UNIX mounts
  41. CVE-2026-31709kernel: smb: client: validate the whole DACL before rewriting it in cifsacl
  42. CVE-2026-31708kernel: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  43. CVE-2026-31707kernel: ksmbd: validate response sizes in ipc_validate_msg()
  44. CVE-2026-31706kernel: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()
  45. CVE-2026-31705kernel: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
  46. CVE-2026-31704kernel: ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
  47. CVE-2026-31703kernel: writeback: Fix use after free in inode_switch_wbs_work_fn()
  48. CVE-2026-31702kernel: f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
  49. CVE-2026-31701kernel: ALSA: caiaq: take a reference on the USB device in create_card()
  50. CVE-2026-31700kernel: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
CVE 2026 document archive — Page 213 | PulseLinux