CVE 2026 document archive · 24
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 24 / 264
- CVE-2026-99110kernel: smb: client: fix heap overflow in cifs_do_set_acl()
- CVE-2026-99109kernel: smb: client: reject SetEA requests that do not fit the request buffer
- CVE-2026-99108kernel: ntfs: fix FITRIM range alignment
- CVE-2026-99107kernel: ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
- CVE-2026-99106kernel: drm/amdgpu: free the userptr ranges when a CS fails after parser_bos
- CVE-2026-99105kernel: sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ
- CVE-2026-99104kernel: sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor
- CVE-2026-99103kernel: workqueue: Fix unbound pool lifetime for pending pwqs
- CVE-2026-99102kernel: ntfs: take invalidate_lock in ntfs_setattr_size()
- CVE-2026-99101kernel: ntfs: move attribute payload before shrinking its record
- CVE-2026-99100kernel: wifi: p54: validate firmware record lengths
- CVE-2026-99099kernel: x86/CPU/AMD: Fix AMD TLBI Erratum #1718
- CVE-2026-99098kernel: dm-integrity: fix buffer overflow in inline mode with large tag size
- CVE-2026-99097kernel: tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()
- CVE-2026-99096kernel: io_uring/register: don't exempt disabled rings from task restrictions
- CVE-2026-99095kernel: drm/vc4: drain the hangcheck timer and works on V3D unbind
- CVE-2026-99094kernel: Bluetooth: btintel_pcie: fix TX descriptor bounds check
- CVE-2026-99093kernel: mm: don't schedule deferred kernel page table freeing while booting
- CVE-2026-99092kernel: riscv: patch: fix handling of bpf-jit execmem addresses
- CVE-2026-99091kernel: Bluetooth: MGMT: Fix status of pending commands flushed on power off
- CVE-2026-99090kernel: drm/amdgpu: serialize vblank counter reads against GPU reset
- CVE-2026-99089kernel: ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM
- CVE-2026-99088kernel: net: openvswitch: validate transport header presence in set_ipv6_addr
- CVE-2026-99087kernel: dm-integrity: fix NULL pointer dereference when the 'R' flag is used
- CVE-2026-99086kernel: dm-integrity: validate the superblock on resume
- CVE-2026-99085kernel: sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler
- CVE-2026-99084kernel: readdir: take no inode lock on an immutable directory
- CVE-2026-99083kernel: ksmbd: fix heap out-of-bounds write in krb5_authenticate()
- CVE-2026-99082kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cache
- CVE-2026-99081kernel: bnxt_en: fix DMA mapping length for padded small packets
- CVE-2026-99080kernel: fs: Free any excess xarray nodes in clear_inode()
- CVE-2026-99079kernel: net/mlx5e: Prevent stale XSK buffer release on refill retry
- CVE-2026-99078kernel: kernel: Denial of service via stale buffer release in mlx5e driver
- CVE-2026-99077kernel: kernel: Information disclosure via routing exception cache side channel in IPv4 UDP
- CVE-2026-99076kernel: kernel: Information disclosure via IPv6 UDP route exception cache side channel
- CVE-2026-99075kernel: kernel: Denial of Service via memory leak in Rust Binder
- CVE-2026-99074kernel: ipv4: stop PMTU walk when nexthop group shrinks
- CVE-2026-99073kernel: ipv4: stop exception dump when nexthop group shrinks
- CVE-2026-99072kernel: kernel: Denial of Service via NULL pointer dereference in IPv4 route notification sizing
- CVE-2026-99071kernel: kernel: Denial of Service via route notification sizing race in IPv4
- CVE-2026-99070kernel: ipv6: do not warn on route notification size race
- CVE-2026-99069kernel: kernel: Denial of Service via type confusion in ati_remote2 driver attribute handlers
- CVE-2026-99068kernel: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
- CVE-2026-99067kernel: btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
- CVE-2026-99066kernel: can: dev: init_can_skb(): restore skb header initialization
- CVE-2026-99065kernel: cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()
- CVE-2026-99064kernel: cipso: adjust cached option offsets when removing CIPSO
- CVE-2026-99063kernel: dm ioctl: don't let data_start run past the buffer
- CVE-2026-99062kernel: vsock/virtio: account only unread bytes in read_skb()
- CVE-2026-99061kernel: wifi: brcmfmac: fix P2P device removal race in brcmf_detach()