CVE 2026 document archive · 27
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 27 / 264
- CVE-2026-98960kernel: btrfs: don't stash io_uring encoded data across -EAGAIN
- CVE-2026-98958kernel: wifi: mt76: account non-AQL frames per peer rather than per link
- CVE-2026-98957kernel: wifi: mt76: mt7915: disable rx napi when removing device
- CVE-2026-98956kernel: ASoC: adau1372: allow sleepy powerdown GPIOs
- CVE-2026-98955kernel: flow_dissector: avoid u16 truncation of skb->len when computing thoff
- CVE-2026-98954kernel: net: always dissect GSO packets in __virtio_net_hdr_to_skb()
- CVE-2026-98953kernel: devlink: fix devlink_rel reference leak when notify work is pending
- CVE-2026-98952kernel: pfcp: make sure the SEID is linear before reading it
- CVE-2026-98951kernel: riscv: ptrace: Zero-initialize regset buffers before copyin
- CVE-2026-98950kernel: flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()
- CVE-2026-98949kernel: kernel: drm/imagination: Denial of Service via improper virtual memory remapping
- CVE-2026-98948kernel: kernel: mlxsw: Denial of Service via port range register leak in flower template creation
- CVE-2026-98947kernel: kernel: Denial of Service via memory leak in vsock VMCI datagram handling
- CVE-2026-98946kernel: kernel: Denial of Service via improper interrupt handling in drm/vc4
- CVE-2026-98945kernel: kernel: Denial of service via use-after-free in Steam HID driver teardown
- CVE-2026-98944kernel: kernel: Denial of Service via improper cleanup during Steam controller registration
- CVE-2026-98942kernel: kernel: Information disclosure via race condition in sched_ext
- CVE-2026-98941kernel: kernel: Denial of Service via large folios on encrypted ext4 files
- CVE-2026-98940kernel: kernel: Denial of service via out-of-bounds write in Qualcomm LPASS driver
- CVE-2026-98939kernel: kernel: Denial of Service via circular locking dependency during page freeing
- CVE-2026-98938kernel: kernel: Denial of Service via uninitialized memory read in Rust IRQ registration
- CVE-2026-98937kernel: kernel: information disclosure via unprivileged perf kernel callchain capture
- CVE-2026-98936kernel: kernel: ath11k: Denial of Service via unreset station counter during hardware restart
- CVE-2026-98935kernel: kernel: Information disclosure via uninitialized stack memory in RTC driver
- CVE-2026-98934kernel: kernel: Denial of Service via missing network context in IPv6 segment routing
- CVE-2026-98933kernel: usb: hub: use shorter 120ms post resume hold for SS root hubs
- CVE-2026-98932kernel: EDAC/altera: Fix use-after-free in error paths
- CVE-2026-98931kernel: mtd: spinand: fix NULL pointer dereference with no ECC engine
- CVE-2026-98930kernel: KVM: s390: Fix IRQ injection with SIGP Stop and Store Status
- CVE-2026-98929kernel: macsec: initialize SecY before registering the netdevice
- CVE-2026-98928kernel: KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2
- CVE-2026-98927kernel: KVM: arm64: nv: Fix life cycle of the nested_mmus array
- CVE-2026-98926kernel: drm/amd/display: Remove sink usage from DPMS
- CVE-2026-98925kernel: bpf, sockmap: Fix self-redirect copied_seq double-counting
- CVE-2026-98924kernel: fs: avoid repeated scans in evict_inodes()
- CVE-2026-98923kernel: arm64: io: Reject non-user protection in ioremap_prot()
- CVE-2026-98922kernel: net: emac: move setting of netops to fix crash
- CVE-2026-98921kernel: ovl: fix UAF in ovl_do_mkdir() debug print
- CVE-2026-98920kernel: netfs: Fix missing alloc tagging of direct mempool allocations
- CVE-2026-98919kernel: drm/xe: harden adjust_idledly() against divide-by-zero and overflow
- CVE-2026-98918kernel: mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()
- CVE-2026-98917kernel: parisc: Increase kernel stack size to 32kb
- CVE-2026-98916kernel: wifi: nl80211: check link is beaconing for color change
- CVE-2026-98914kernel: drm/amdgpu: cap ATOM command table nesting depth
- CVE-2026-98913kernel: net: thunderx: fix PTP device ref leak in nicvf_probe()
- CVE-2026-98912kernel: ALSA: seq: oss: Reject reads that cannot fit the next event
- CVE-2026-98911kernel: dpaa2-switch: fix the error path in dpaa2_switch_rx()
- CVE-2026-98910kernel: drm/amdkfd: Unwind debug trap enable on copy_to_user failure
- CVE-2026-98909kernel: net: cpsw_new: unregister devlink on port registration failure
- CVE-2026-98908kernel: net: microchip: sparx5: clean up PSFP resources on flower setup failure