PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 215

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 215 / 264

  1. CVE-2026-31648kernel: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()
  2. CVE-2026-31647kernel: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling
  3. CVE-2026-31646kernel: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
  4. CVE-2026-31645kernel: net: lan966x: fix page pool leak in error paths
  5. CVE-2026-31644kernel: net: lan966x: fix use-after-free and leak in lan966x_fdma_reload()
  6. CVE-2026-31643kernel: rxrpc: Fix key parsing memleak
  7. CVE-2026-31642kernel: rxrpc: Fix call removal to use RCU safe deletion
  8. CVE-2026-31641kernel: rxrpc: Fix RxGK token loading to check bounds
  9. CVE-2026-31640kernel: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial
  10. CVE-2026-31639kernel: rxrpc: Fix key reference count leak from call->key
  11. CVE-2026-31638kernel: rxrpc: Only put the call ref if one was acquired
  12. CVE-2026-31637kernel: rxrpc: reject undecryptable rxkad response tickets
  13. CVE-2026-31636kernel: rxrpc: fix RESPONSE authenticator parser OOB read
  14. CVE-2026-31635kernel: rxrpc: fix oversized RESPONSE authenticator length check
  15. CVE-2026-31634kernel: rxrpc: fix reference count leak in rxrpc_server_keyring()
  16. CVE-2026-31633kernel: rxrpc: Fix integer overflow in rxgk_verify_response()
  17. CVE-2026-31632kernel: rxrpc: Fix leak of rxgk context in rxgk_verify_response()
  18. CVE-2026-31631kernel: rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
  19. CVE-2026-31630kernel: rxrpc: proc: size address buffers for %pISpc output
  20. CVE-2026-31629kernel: nfc: llcp: add missing return after LLCP_CLOSED checks
  21. CVE-2026-31628kernel: x86/CPU: Fix FPDSS on Zen1
  22. CVE-2026-31627kernel: Linux kernel: i2c s3c24xx driver arbitrary code execution via SMBUS message size validation flaw
  23. CVE-2026-31626kernel: staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
  24. CVE-2026-31625kernel: HID: alps: fix NULL pointer dereference in alps_raw_event()
  25. CVE-2026-31624kernel: HID: core: clamp report_size in s32ton() to avoid undefined shift
  26. CVE-2026-31623kernel: net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
  27. CVE-2026-31622kernel: NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  28. CVE-2026-31621kernel: bnge: return after auxiliary_device_uninit() in error path
  29. CVE-2026-31620kernel: ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0
  30. CVE-2026-31619kernel: ALSA: fireworks: bound device-supplied status before string array lookup
  31. CVE-2026-31618kernel: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  32. CVE-2026-31617kernel: usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
  33. CVE-2026-31616kernel: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
  34. CVE-2026-31615kernel: usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
  35. CVE-2026-31614kernel: smb: client: fix off-by-8 bounds check in check_wsl_eas()
  36. CVE-2026-31613kernel: smb: client: fix OOB reads parsing symlink error response
  37. CVE-2026-31612kernel: ksmbd: validate EaNameLength in smb2_get_ea()
  38. CVE-2026-31611kernel: ksmbd: require 3 sub-authorities before reading sub_auth[2]
  39. CVE-2026-31610kernel: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
  40. CVE-2026-31609kernel: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()
  41. CVE-2026-31608kernel: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()
  42. CVE-2026-31607kernel: usbip: validate number_of_packets in usbip_pack_ret_submit()
  43. CVE-2026-31606kernel: usb: gadget: f_hid: don't call cdev_init while cdev in use
  44. CVE-2026-31605kernel: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  45. CVE-2026-31604kernel: wifi: rtw88: fix device leak on probe failure
  46. CVE-2026-31603kernel: staging: sm750fb: fix division by zero in ps_to_hz()
  47. CVE-2026-31602kernel: ALSA: ctxfi: Limit PTP to a single page
  48. CVE-2026-31601kernel: vfio/xe: Reorganize the init to decouple migration from reset
  49. CVE-2026-31600kernel: arm64: mm: Handle invalid large leaf mappings correctly
  50. CVE-2026-31599kernel: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
CVE 2026 document archive — Page 215 | PulseLinux