CVE 2026 document archive · 232
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 232 / 264
- CVE-2026-23160kernel: octeon_ep: Fix memory leak in octep_device_setup()
- CVE-2026-23159kernel: perf: sched: Fix perf crash with new is_user_task() helper
- CVE-2026-23158kernel: gpio: virtuser: fix UAF in configfs release path
- CVE-2026-23157kernel: btrfs: do not strictly require dirty metadata threshold for metadata writepages
- CVE-2026-23156kernel: Linux kernel: Information disclosure in efivarfs via incorrect error propagation
- CVE-2026-23155kernel: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
- CVE-2026-23154kernel: net: fix segmentation of forwarding fraglist GRO
- CVE-2026-23153kernel: firewire: core: fix race condition against transaction list
- CVE-2026-23152kernel: wifi: mac80211: correctly decode TTLM with default link map
- CVE-2026-23151kernel: Linux kernel: Memory leak in Bluetooth MGMT can lead to denial of service
- CVE-2026-23150kernel: nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame()
- CVE-2026-23149kernel: drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()
- CVE-2026-23148kernel: nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
- CVE-2026-23147kernel: btrfs: zlib: fix the folio leak on S390 hardware acceleration
- CVE-2026-23146kernel: Linux kernel: Denial of Service in Bluetooth HCI UART driver via null pointer dereference
- CVE-2026-23145kernel: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
- CVE-2026-23144kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure
- CVE-2026-23143kernel: virtio_net: Fix misalignment bug in struct virtnet_info
- CVE-2026-23142kernel: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
- CVE-2026-23141kernel: btrfs: send: check for inline extents in range_is_hole_in_parent()
- CVE-2026-23140kernel: bpf, test_run: Subtract size of xdp_frame from allowed metadata size
- CVE-2026-23139kernel: netfilter: nf_conncount: update last_gc only when GC has been performed
- CVE-2026-23138kernel: tracing: Add recursion protection in kernel stack trace recording
- CVE-2026-23137kernel: of: unittest: Fix memory leak in unittest_data_add()
- CVE-2026-23136kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state
- CVE-2026-23135kernel: Kernel: Denial of Service in ath12k wifi driver due to incorrect dma_free_coherent() pointer
- CVE-2026-23134kernel: slab: fix kmalloc_nolock() context check for PREEMPT_RT
- CVE-2026-23133kernel: Linux kernel: Memory management flaw in ath10k Wi-Fi driver can lead to denial of service
- CVE-2026-23132kernel: drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind
- CVE-2026-23131kernel: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
- CVE-2026-23130kernel: wifi: ath12k: fix dead lock while flushing management frames
- CVE-2026-23129kernel: Linux kernel: Denial of Service in DPLL framework due to duplicate pin registrations
- CVE-2026-23128kernel: arm64: Set __nocfi on swsusp_arch_resume()
- CVE-2026-23127kernel: Linux kernel: Privilege escalation or denial of service in perf subsystem
- CVE-2026-23126kernel: Linux kernel: Denial of Service in netdevsim due to race condition in BPF program list operations
- CVE-2026-23125kernel: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
- CVE-2026-23124kernel: Linux kernel: Data race in IPv6 neighbor discovery leads to limited availability
- CVE-2026-23123kernel: Linux kernel: Local denial of service in interconnect debugfs due to uninitialized pointers
- CVE-2026-23122kernel: igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue
- CVE-2026-23121kernel: Linux kernel mISDN: Denial of Service via data race
- CVE-2026-23120kernel: Linux kernel: Denial of Service in L2TP due to data-race during tunnel deletion
- CVE-2026-23119kernel: bonding: provide a net pointer to __skb_flow_dissect()
- CVE-2026-23118kernel: rxrpc: Fix data-race warning and potential load/store tearing
- CVE-2026-23117kernel: ice: add missing ice_deinit_hw() in devlink reinit path
- CVE-2026-23116kernel: Kernel: Local denial of service via incorrect VPU power management on i.MX8MQ
- CVE-2026-23115kernel: serial: Fix not set tty->port race condition
- CVE-2026-23114kernel: arm64/fpsimd: ptrace: Fix SVE writes on !SME systems
- CVE-2026-23113kernel: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
- CVE-2026-23112kernel: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
- CVE-2026-23111kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check