CVE 2026 document archive · 226
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 226 / 264
- CVE-2026-23461kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
- CVE-2026-23460kernel: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
- CVE-2026-23459kernel: ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
- CVE-2026-23458kernel: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
- CVE-2026-23457kernel: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
- CVE-2026-23456kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
- CVE-2026-23455kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
- CVE-2026-23454kernel: net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
- CVE-2026-23453kernel: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode
- CVE-2026-23452kernel: PM: runtime: Fix a race condition related to device removal
- CVE-2026-23451kernel: bonding: prevent potential infinite loop in bond_header_parse()
- CVE-2026-23450kernel: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
- CVE-2026-23449kernel: net/sched: teql: Fix double-free in teql_master_xmit
- CVE-2026-23448kernel: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
- CVE-2026-23447kernel: net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
- CVE-2026-23446kernel: net: usb: aqc111: Do not perform PM inside suspend callback
- CVE-2026-23445kernel: igc: fix page fault in XDP TX timestamps handling
- CVE-2026-23444kernel: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
- CVE-2026-23443kernel: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
- CVE-2026-23442kernel: ipv6: add NULL checks for idev in SRv6 paths
- CVE-2026-23441kernel: net/mlx5e: Prevent concurrent access to IPSec ASO context
- CVE-2026-23440kernel: net/mlx5e: Fix race condition during IPSec ESN update
- CVE-2026-23439kernel: udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
- CVE-2026-23438kernel: net: mvpp2: guard flow control update with global_tx_fc in buffer switching
- CVE-2026-23437kernel: net: shaper: protect late read accesses to the hierarchy
- CVE-2026-23436kernel: net: shaper: protect from late creation of hierarchy
- CVE-2026-23435kernel: perf/x86: Move event pointer setup earlier in x86_pmu_enable()
- CVE-2026-23434kernel: mtd: rawnand: serialize lock/unlock against other NAND operations
- CVE-2026-23433kernel: arm_mpam: Fix null pointer dereference when restoring bandwidth counters
- CVE-2026-23432kernel: mshv: Fix use-after-free in mshv_map_user_memory error path
- CVE-2026-23431kernel: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
- CVE-2026-23430kernel: drm/vmwgfx: Don't overwrite KMS surface dirty tracker
- CVE-2026-23429kernel: iommu/sva: Fix crash in iommu_sva_unbind_device()
- CVE-2026-23428kernel: ksmbd: fix use-after-free of share_conf in compound request
- CVE-2026-23427kernel: ksmbd: fix use-after-free in durable v2 replay of active file handles
- CVE-2026-23426kernel: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
- CVE-2026-23425kernel: KVM: arm64: Fix ID register initialization for non-protected pKVM guests
- CVE-2026-23424kernel: accel/amdxdna: Validate command buffer payload count
- CVE-2026-23423kernel: btrfs: free pages on error in btrfs_uring_read_extent()
- CVE-2026-23422kernel: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
- CVE-2026-23421kernel: drm/xe/configfs: Free ctx_restore_mid_bb in release
- CVE-2026-23420kernel: wifi: wlcore: Fix a locking bug
- CVE-2026-23419kernel: net/rds: Fix circular locking dependency in rds_tcp_tune
- CVE-2026-23418kernel: drm/xe/reg_sr: Fix leak on xa_store failure
- CVE-2026-23417kernel: bpf: Fix constant blinding for PROBE_MEM32 stores
- CVE-2026-23416kernel: mm/mseal: update VMA end correctly on merge
- CVE-2026-23415kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()
- CVE-2026-23414kernel: tls: Purge async_hold in tls_decrypt_async_wait()
- CVE-2026-23413kernel: clsact: Fix use-after-free in init/destroy rollback asymmetry
- CVE-2026-23412kernel: netfilter: bpf: defer hook memory release until rcu readers are done