CVE 2026 document archive · 235

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 235 / 264

  1. CVE-2026-23010kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service
  2. CVE-2026-23009kernel: xhci: sideband: don't dereference freed ring when removing sideband endpoint
  3. CVE-2026-23008kernel: drm/vmwgfx: Fix KMS with 3D on HW version 10
  4. CVE-2026-23007kernel: block: zero non-PI portion of auto integrity buffer
  5. CVE-2026-23006kernel: ASoC: tlv320adcx140: fix null pointer
  6. CVE-2026-23005kernel: x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
  7. CVE-2026-23004kernel: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
  8. CVE-2026-23003kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
  9. CVE-2026-23002kernel: lib/buildid: use __kernel_read() for sleepable context
  10. CVE-2026-23001kernel: macvlan: fix possible UAF in macvlan_forward_source()
  11. CVE-2026-23000kernel: Linux kernel (mlx5e): Denial of Service due to NULL pointer dereference during network profile change
  12. CVE-2026-22999kernel: net/sched: sch_qfq: do not free existing class in qfq_change_class()
  13. CVE-2026-22998kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
  14. CVE-2026-22997kernel: net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
  15. CVE-2026-22996kernel: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
  16. CVE-2026-22995kernel: ublk: fix use-after-free in ublk_partition_scan_work
  17. CVE-2026-22994kernel: Kernel: Resource leak in BPF via missing buffer conversion call
  18. CVE-2026-22993kernel: idpf: Fix RSS LUT NULL ptr issue after soft reset
  19. CVE-2026-22992kernel: libceph: return the handler error from mon_handle_auth_done()
  20. CVE-2026-22991kernel: libceph: make free_choose_arg_map() resilient to partial allocation
  21. CVE-2026-22990kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
  22. CVE-2026-22989kernel: nfsd: check that server is running in unlock_filesystem
  23. CVE-2026-22988kernel: arp: do not assume dev_hard_header() does not change skb->head
  24. CVE-2026-22987kernel: Linux kernel: Denial of Service due to invalid dereference in networking scheduler during netns teardown
  25. CVE-2026-22986kernel: Linux kernel: Denial of Service due to a race condition in gpiolib
  26. CVE-2026-22985kernel: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations
  27. CVE-2026-22984kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done()
  28. CVE-2026-22983kernel: net: do not write to msg_get_inq in callee
  29. CVE-2026-22982kernel: net: mscc: ocelot: Fix crash when adding interface under a lag
  30. CVE-2026-22981kernel: idpf: detach and close netdevs while handling a reset
  31. CVE-2026-22980kernel: nfsd: provide locking for v4_end_grace
  32. CVE-2026-22979kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling
  33. CVE-2026-22978kernel: Linux kernel (wifi): Information disclosure via uninitialized data in struct iw_point
  34. CVE-2026-22977kernel: Kernel: Denial of Service in network socket error handling
  35. CVE-2026-22976kernel: Linux kernel: Denial of Service in sch_qfq due to NULL pointer dereference
  36. CVE-2026-22860rubygem-rack: Rack Directory Traversal via Rack:Directory
  37. CVE-2026-22859freerdp: FreeRDP heap-buffer-overflow
  38. CVE-2026-22858freerdp: FreeRDP global-buffer-overflow
  39. CVE-2026-22857freerdp: FreeRDP heap-use-after-free
  40. CVE-2026-22856freerdp: FreeRDP heap-use-after-free
  41. CVE-2026-22855freerdp: FreeRDP heap-buffer-overflow
  42. CVE-2026-22854freerdp: FreeRDP heap-buffer-overflow
  43. CVE-2026-22853freerdp: FreeRDP heap-buffer-overflow
  44. CVE-2026-22852freerdp: FreeRDP heap-buffer-overflow
  45. CVE-2026-22851freerdp: FreeRDP RDPGFX ResetGraphics race
  46. CVE-2026-22801libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API
  47. CVE-2026-22796openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
  48. CVE-2026-22795openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing
  49. CVE-2026-22791openCryptoki: openCryptoki: Denial of Service and heap corruption via heap buffer overflow
  50. CVE-2026-22772fulcio: Fulcio: Server-Side Request Forgery (SSRF) via unanchored regex in MetaIssuer URL validation
CVE 2026 document archive — Page 235 | PulseLinux