CVE 2026 document archive · 217

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 217 / 264

  1. CVE-2026-31548kernel: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
  2. CVE-2026-31547kernel: drm/xe: Fix missing runtime PM reference in ccs_mode_store
  3. CVE-2026-31546kernel: net: bonding: fix NULL deref in bond_debug_rlb_hash_show
  4. CVE-2026-31545kernel: NFC: nxp-nci: allow GPIOs to sleep
  5. CVE-2026-31544kernel: firmware: arm_scmi: Fix NULL dereference on notify error path
  6. CVE-2026-31543kernel: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying
  7. CVE-2026-31542kernel: x86/platform/uv: Handle deconfigured sockets
  8. CVE-2026-31541kernel: tracing: Fix trace_marker copy link list updates
  9. CVE-2026-31540kernel: drm/i915/gt: Check set_default_submission() before deferencing
  10. CVE-2026-31539kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
  11. CVE-2026-31538kernel: smb: server: make use of smbdirect_socket.recv_io.credits.available
  12. CVE-2026-31537kernel: smb: server: make use of smbdirect_socket.send_io.bcredits
  13. CVE-2026-31536kernel: smb: server: let send_done handle a completion without IB_SEND_SIGNALED
  14. CVE-2026-31535kernel: smb: client: make use of smbdirect_socket.recv_io.credits.available
  15. CVE-2026-31533kernel: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  16. CVE-2026-31532kernel: can: raw: fix ro->uniq use-after-free in raw_rcv()
  17. CVE-2026-31531kernel: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
  18. CVE-2026-31530kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep()
  19. CVE-2026-31529kernel: cxl/region: Fix leakage in __construct_region()
  20. CVE-2026-31528kernel: perf: Make sure to use pmu_ctx->pmu for groups
  21. CVE-2026-31527kernel: driver core: platform: use generic driver_override infrastructure
  22. CVE-2026-31526kernel: bpf: Fix exception exit lock checking for subprogs
  23. CVE-2026-31525kernel: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
  24. CVE-2026-31524kernel: HID: asus: avoid memory leak in asus_report_fixup()
  25. CVE-2026-31523kernel: nvme-pci: ensure we're polling a polled queue
  26. CVE-2026-31522kernel: HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  27. CVE-2026-31521kernel: module: Fix kernel panic when a symbol st_shndx is out of bounds
  28. CVE-2026-31520kernel: HID: apple: avoid memory leak in apple_report_fixup()
  29. CVE-2026-31519kernel: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
  30. CVE-2026-31518kernel: esp: fix skb leak with espintcp and async crypto
  31. CVE-2026-31517kernel: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly
  32. CVE-2026-31516kernel: xfrm: prevent policy_hthresh.work from racing with netns teardown
  33. CVE-2026-31515kernel: af_key: validate families in pfkey_send_migrate()
  34. CVE-2026-31514kernel: erofs: set fileio bio failed in short read case
  35. CVE-2026-31513kernel: Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
  36. CVE-2026-31512kernel: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
  37. CVE-2026-31511kernel: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
  38. CVE-2026-31510kernel: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
  39. CVE-2026-31509kernel: nfc: nci: fix circular locking dependency in nci_close_device
  40. CVE-2026-31508kernel: net: openvswitch: Avoid releasing netdev before teardown completes
  41. CVE-2026-31507kernel: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  42. CVE-2026-31506kernel: net: bcmasp: fix double free of WoL irq
  43. CVE-2026-31505kernel: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  44. CVE-2026-31504kernel: net: fix fanout UAF in packet_release() via NETDEV_UP race
  45. CVE-2026-31503kernel: udp: Fix wildcard bind conflict check when using hash2
  46. CVE-2026-31502kernel: team: fix header_ops type confusion with non-Ethernet ports
  47. CVE-2026-31501kernel: net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path
  48. CVE-2026-31500kernel: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
  49. CVE-2026-31499kernel: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  50. CVE-2026-31498kernel: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
CVE 2026 document archive — Page 217 | PulseLinux