CVE 2026 document archive · 218

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 218 / 264

  1. CVE-2026-31497kernel: Bluetooth: btusb: clamp SCO altsetting table indices
  2. CVE-2026-31496kernel: netfilter: nf_conntrack_expect: skip expectations in other netns via proc
  3. CVE-2026-31495kernel: netfilter: ctnetlink: use netlink policy range checks
  4. CVE-2026-31494kernel: net: macb: use the current queue number for stats
  5. CVE-2026-31493kernel: RDMA/efa: Fix use of completion ctx after free
  6. CVE-2026-31492kernel: RDMA/irdma: Initialize free_qp completion before using it
  7. CVE-2026-31491kernel: RDMA/irdma: Harden depth calculation functions
  8. CVE-2026-31490kernel: drm/xe/pf: Fix use-after-free in migration restore
  9. CVE-2026-31489kernel: spi: meson-spicc: Fix double-put in remove path
  10. CVE-2026-31488kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation
  11. CVE-2026-31487kernel: spi: use generic driver_override infrastructure
  12. CVE-2026-31486kernel: hwmon: (pmbus/core) Protect regulator operations with mutex
  13. CVE-2026-31485kernel: spi: spi-fsl-lpspi: fix teardown order issue (UAF)
  14. CVE-2026-31484kernel: io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check
  15. CVE-2026-31483kernel: s390/syscalls: Add spectre boundary for syscall dispatch table
  16. CVE-2026-31482kernel: s390/entry: Scrub r12 register on kernel entry
  17. CVE-2026-31481kernel: tracing: Drain deferred trigger frees if kthread creation fails
  18. CVE-2026-31480kernel: tracing: Fix potential deadlock in cpu hotplug with osnoise
  19. CVE-2026-31479kernel: drm/xe: always keep track of remap prev/next
  20. CVE-2026-31478kernel: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
  21. CVE-2026-31477kernel: ksmbd: fix memory leaks and NULL deref in smb2_lock()
  22. CVE-2026-31476kernel: ksmbd: do not expire session on binding failure
  23. CVE-2026-31475kernel: ASoC: sma1307: fix double free of devm_kzalloc() memory
  24. CVE-2026-31474kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
  25. CVE-2026-31473kernel: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
  26. CVE-2026-31472kernel: xfrm: iptfs: validate inner IPv4 header length in IPTFS payload
  27. CVE-2026-31471kernel: xfrm: iptfs: only publish mode_data after clone setup
  28. CVE-2026-31470kernel: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length
  29. CVE-2026-31469kernel: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  30. CVE-2026-31468kernel: vfio/pci: Fix double free in dma-buf feature
  31. CVE-2026-31467kernel: Linux kernel: Denial of Service in erofs filesystem
  32. CVE-2026-31466kernel: mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
  33. CVE-2026-31465kernel: writeback: don't block sync for filesystems with no data integrity guarantees
  34. CVE-2026-31464kernel: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  35. CVE-2026-31463kernel: iomap: fix invalid folio access when i_blkbits differs from I/O granularity
  36. CVE-2026-31462kernel: drm/amdgpu: prevent immediate PASID reuse case
  37. CVE-2026-31461kernel: drm/amd/display: Fix drm_edid leak in amdgpu_dm
  38. CVE-2026-31460kernel: drm/amd/display: check if ext_caps is valid in BL setup
  39. CVE-2026-31459kernel: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure
  40. CVE-2026-31458kernel: mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]
  41. CVE-2026-31457kernel: mm/damon/sysfs: check contexts->nr in repeat_call_fn
  42. CVE-2026-31456kernel: mm/pagewalk: fix race between concurrent split and refault
  43. CVE-2026-31455kernel: xfs: stop reclaim before pushing AIL during unmount
  44. CVE-2026-31454kernel: xfs: save ailp before dropping the AIL lock in push callbacks
  45. CVE-2026-31453kernel: xfs: avoid dereferencing log items after push callbacks
  46. CVE-2026-31452kernel: ext4: convert inline data to extents when truncate exceeds inline size
  47. CVE-2026-31451kernel: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
  48. CVE-2026-31450kernel: ext4: publish jinode after initialization
  49. CVE-2026-31449kernel: ext4: validate p_idx bounds in ext4_ext_correct_indexes
  50. CVE-2026-31448kernel: ext4: avoid infinite loops caused by residual data
CVE 2026 document archive — Page 218 | PulseLinux