CVE 2026 document archive · 217
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 217 / 264
- CVE-2026-31548kernel: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
- CVE-2026-31547kernel: drm/xe: Fix missing runtime PM reference in ccs_mode_store
- CVE-2026-31546kernel: net: bonding: fix NULL deref in bond_debug_rlb_hash_show
- CVE-2026-31545kernel: NFC: nxp-nci: allow GPIOs to sleep
- CVE-2026-31544kernel: firmware: arm_scmi: Fix NULL dereference on notify error path
- CVE-2026-31543kernel: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying
- CVE-2026-31542kernel: x86/platform/uv: Handle deconfigured sockets
- CVE-2026-31541kernel: tracing: Fix trace_marker copy link list updates
- CVE-2026-31540kernel: drm/i915/gt: Check set_default_submission() before deferencing
- CVE-2026-31539kernel: smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
- CVE-2026-31538kernel: smb: server: make use of smbdirect_socket.recv_io.credits.available
- CVE-2026-31537kernel: smb: server: make use of smbdirect_socket.send_io.bcredits
- CVE-2026-31536kernel: smb: server: let send_done handle a completion without IB_SEND_SIGNALED
- CVE-2026-31535kernel: smb: client: make use of smbdirect_socket.recv_io.credits.available
- CVE-2026-31533kernel: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
- CVE-2026-31532kernel: can: raw: fix ro->uniq use-after-free in raw_rcv()
- CVE-2026-31531kernel: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
- CVE-2026-31530kernel: cxl/port: Fix use after free of parent_port in cxl_detach_ep()
- CVE-2026-31529kernel: cxl/region: Fix leakage in __construct_region()
- CVE-2026-31528kernel: perf: Make sure to use pmu_ctx->pmu for groups
- CVE-2026-31527kernel: driver core: platform: use generic driver_override infrastructure
- CVE-2026-31526kernel: bpf: Fix exception exit lock checking for subprogs
- CVE-2026-31525kernel: bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
- CVE-2026-31524kernel: HID: asus: avoid memory leak in asus_report_fixup()
- CVE-2026-31523kernel: nvme-pci: ensure we're polling a polled queue
- CVE-2026-31522kernel: HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
- CVE-2026-31521kernel: module: Fix kernel panic when a symbol st_shndx is out of bounds
- CVE-2026-31520kernel: HID: apple: avoid memory leak in apple_report_fixup()
- CVE-2026-31519kernel: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
- CVE-2026-31518kernel: esp: fix skb leak with espintcp and async crypto
- CVE-2026-31517kernel: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly
- CVE-2026-31516kernel: xfrm: prevent policy_hthresh.work from racing with netns teardown
- CVE-2026-31515kernel: af_key: validate families in pfkey_send_migrate()
- CVE-2026-31514kernel: erofs: set fileio bio failed in short read case
- CVE-2026-31513kernel: Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
- CVE-2026-31512kernel: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
- CVE-2026-31511kernel: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
- CVE-2026-31510kernel: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
- CVE-2026-31509kernel: nfc: nci: fix circular locking dependency in nci_close_device
- CVE-2026-31508kernel: net: openvswitch: Avoid releasing netdev before teardown completes
- CVE-2026-31507kernel: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
- CVE-2026-31506kernel: net: bcmasp: fix double free of WoL irq
- CVE-2026-31505kernel: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
- CVE-2026-31504kernel: net: fix fanout UAF in packet_release() via NETDEV_UP race
- CVE-2026-31503kernel: udp: Fix wildcard bind conflict check when using hash2
- CVE-2026-31502kernel: team: fix header_ops type confusion with non-Ethernet ports
- CVE-2026-31501kernel: net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path
- CVE-2026-31500kernel: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
- CVE-2026-31499kernel: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
- CVE-2026-31498kernel: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop