CVE 2026 document archive · 227
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 227 / 264
- CVE-2026-23411kernel: apparmor: fix race between freeing data and fs accessing it
- CVE-2026-23410kernel: apparmor: fix race on rawdata dereference
- CVE-2026-23409kernel: apparmor: fix differential encoding verification
- CVE-2026-23408kernel: apparmor: Fix double free of ns_name in aa_replace_profiles()
- CVE-2026-23407kernel: apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
- CVE-2026-23406kernel: apparmor: fix side-effect bug in match_char() macro usage
- CVE-2026-23405kernel: apparmor: fix: limit the number of levels of policy namespaces
- CVE-2026-23404kernel: apparmor: replace recursive profile removal with iterative approach
- CVE-2026-23403kernel: apparmor: fix memory leak in verify_header
- CVE-2026-23402kernel: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE
- CVE-2026-23401kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling
- CVE-2026-23400kernel: rust_binder: call set_notification_done() without proc lock
- CVE-2026-23399kernel: nf_tables: nft_dynset: fix possible stateful expression memleak in error path
- CVE-2026-23398kernel: icmp: fix NULL pointer dereference in icmp_tag_validation()
- CVE-2026-23397Linux kernel: nfnetlink_osf: Linux kernel: Denial of Service in nfnetlink_osf via crafted network packets
- CVE-2026-23396kernel: wifi: mac80211: fix NULL deref in mesh_matches_local()
- CVE-2026-23395kernel: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
- CVE-2026-23394kernel: af_unix: Give up GC if MSG_PEEK intervened
- CVE-2026-23393kernel: bridge: cfm: Fix race condition in peer_mep deletion
- CVE-2026-23392kernel: netfilter: nf_tables: release flowtable after rcu grace period on error
- CVE-2026-23391kernel: netfilter: xt_CT: drop pending enqueued packets on template removal
- CVE-2026-23390kernel: tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
- CVE-2026-23389kernel: ice: Fix memory leak in ice_set_ringparam()
- CVE-2026-23388kernel: Squashfs: check metadata block offset is within range
- CVE-2026-23387kernel: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
- CVE-2026-23386kernel: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
- CVE-2026-23385kernel: netfilter: nf_tables: clone set on flush only
- CVE-2026-23384kernel: RDMA/ionic: Fix kernel stack leak in ionic_create_cq()
- CVE-2026-23383kernel: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
- CVE-2026-23382kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
- CVE-2026-23381kernel: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
- CVE-2026-23380kernel: tracing: Fix WARN_ON in tracing_buffers_mmap_close
- CVE-2026-23379kernel: net/sched: ets: fix divide by zero in the offload path
- CVE-2026-23378kernel: net/sched: act_ife: Fix metalist update behavior
- CVE-2026-23377kernel: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
- CVE-2026-23376kernel: nvmet-fcloop: Check remoteport port_state before calling done callback
- CVE-2026-23375kernel: mm: thp: deny THP for files on anonymous inodes
- CVE-2026-23374kernel: blktrace: fix __this_cpu_read/write in preemptible context
- CVE-2026-23373kernel: wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config
- CVE-2026-23372kernel: nfc: rawsock: cancel tx_work before socket teardown
- CVE-2026-23371kernel: sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
- CVE-2026-23370kernel: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
- CVE-2026-23369kernel: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock"
- CVE-2026-23368kernel: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
- CVE-2026-23367kernel: wifi: radiotap: reject radiotap with unknown bits
- CVE-2026-23366kernel: drm/client: Do not destroy NULL modes
- CVE-2026-23365kernel: net: usb: kalmia: validate USB endpoints
- CVE-2026-23364kernel: ksmbd: Compare MACs in constant time
- CVE-2026-23363kernel: wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()
- CVE-2026-23362kernel: can: bcm: fix locking for bcm_op runtime updates