CVE 2026 document archive · 23
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 23 / 264
- CVE-2026-99160kernel: kernel: Denial of Service via null pointer dereference in ring buffer metadata
- CVE-2026-99159kernel: kernel: Denial of Service via null pointer dereference in persistent ring buffer
- CVE-2026-99158kernel: kernel: Denial of Service via false warning in memory-mapped ring buffer
- CVE-2026-99157kernel: kernel: Denial of Service via out-of-bounds write in UFS BSG request handling
- CVE-2026-99156kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver
- CVE-2026-99155kernel: kernel: xen-scsifront: Denial of Service via NULL pointer dereference
- CVE-2026-99154kernel: kernel: Denial of Service via out-of-bounds read in libiscsi
- CVE-2026-99153kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
- CVE-2026-99152kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses
- CVE-2026-99151kernel: kernel: Denial of Service via NULL pointer dereference in AMD display driver
- CVE-2026-99150kernel: kernel: Denial of Service via double reference count drop in amdgpu debugfs
- CVE-2026-99149kernel: kernel: amdgpu: Denial of Service via resource leak in amdgpu_gem_userptr_ioctl
- CVE-2026-99148kernel: kernel: amdgpu: memory corruption via premature eviction fence detachment
- CVE-2026-99147kernel: kernel: Denial of Service via improper locked object handling in drm_exec
- CVE-2026-99146kernel: kernel: Denial of Service via unvalidated DMC firmware load address in i915 driver
- CVE-2026-99145kernel: kernel: Denial of Service via improper page accounting in drm/xe
- CVE-2026-99144kernel: kernel: Denial of service via use-after-free in sched_ext
- CVE-2026-99143kernel: kernel: Denial of Service via out-of-bounds access in tracing predicate parsing
- CVE-2026-99142kernel: kernel: Denial of Service via out-of-bounds write in tracing subsystem
- CVE-2026-99141kernel: kernel: Denial of Service via NULL pointer dereference in tracing subsystem
- CVE-2026-99140kernel: kernel: Denial of Service via race condition in tracing subsystem
- CVE-2026-99139kernel: kernel: privilege escalation via use-after-free in do_tcp_getsockopt
- CVE-2026-99138kernel: kernel: Privilege escalation via use-after-free in TCP socket options
- CVE-2026-99137kernel: cifs: don't update i_size in cifs_do_truncate without a cached handle
- CVE-2026-99136kernel: kernel: Data corruption via race condition in dm-crypt
- CVE-2026-99135kernel: kernel: Denial of Service via infinite loop in dm-integrity discard handling
- CVE-2026-99134kernel: kernel: Denial of Service via race condition in mac802154
- CVE-2026-99133kernel: kernel: Denial of Service via improper receive window handling in af_iucv
- CVE-2026-99132kernel: kernel: Denial of Service via deadlock in XFS superblock buffer synchronization
- CVE-2026-99131kernel: kernel: xfs: Disk quota bypass via improper capability check
- CVE-2026-99130kernel: kernel: Denial of service via infinite loop during io_uring cancellation
- CVE-2026-99129kernel: kernel: Security bypass via race condition in SELinux BPF token validation
- CVE-2026-99128kernel: kernel: Denial of Service via improper SCTP chunk length validation
- CVE-2026-99127kernel: kernel: Denial of Service via misaligned memory fragment allocations in page_pool
- CVE-2026-99126kernel: kernel: Denial of service via null pointer dereference in s390/ctcm
- CVE-2026-99125kernel: kernel: Denial of Service via multiple PMU stop callback invocations on s390
- CVE-2026-99124kernel: kernel: Information disclosure via out-of-bounds read in s390 PCI error reporting
- CVE-2026-99123kernel: kernel: connection hijacking via missing packet source validation in virtio vsock
- CVE-2026-99122kernel: kernel: Denial of Service via unvalidated packet source in VMCI sockets
- CVE-2026-99121kernel: kernel: Denial of Service via division by zero during IPv4 route rebalancing
- CVE-2026-99120kernel: KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
- CVE-2026-99119kernel: drm/amdgpu/userq: actually validate userq BOs
- CVE-2026-99118kernel: drm/i915/dmc: Harden DMC firmware payload parsing
- CVE-2026-99117kernel: net: bridge: mcast: don't truncate the port group walk on teardown
- CVE-2026-99116kernel: net: psp: do not inherit the Rx association on clone
- CVE-2026-99115kernel: ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
- CVE-2026-99114kernel: ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
- CVE-2026-99113kernel: ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
- CVE-2026-99112kernel: net/sched: cls_flower: validate mask pointer after nla_next()
- CVE-2026-99111kernel: smb: client: fix data corruption with concurrent writes and O_TRUNC