CVE 2026 document archive · 28
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 28 / 264
- CVE-2026-98907kernel: btrfs: protect sb_write_pointer() with invalidate lock
- CVE-2026-98906kernel: net: lan966x: restore RX state on reload failure
- CVE-2026-98905kernel: drm/amdkfd: Properly acquire queue buffers in CRIU restore
- CVE-2026-98904kernel: mailbox: imx: Use devm_pm_runtime_enable()
- CVE-2026-98903kernel: mailbox: imx: Add a channel shutdown field
- CVE-2026-98902kernel: md/raid5: let stripe batch bm_seq comparison wrap-safe
- CVE-2026-98900kernel: xen/gntalloc: validate grant count before allocation
- CVE-2026-98898kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized
- CVE-2026-98897kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ack
- CVE-2026-98896kernel: thunderbolt: Keep the domain reference while processing hotplug
- CVE-2026-98895kernel: net/mlx5: HWS, Handle destroying table that has a miss table
- CVE-2026-98894kernel: drm/amd/ras: reset CPER ring on corrupt entry size
- CVE-2026-98893kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload size
- CVE-2026-98892kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
- CVE-2026-98891kernel: wifi: mac80211: validate deauth frame length before reason access
- CVE-2026-98890kernel: wifi: libertas: reject short monitor TX frames
- CVE-2026-98889kernel: wifi: iwlwifi: mvm: fix sched scan IE sizing
- CVE-2026-98888kernel: arm64: kprobes: Allow reentering kprobes while single-stepping
- CVE-2026-98887kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO
- CVE-2026-98886kernel: drm/gma500: return errors from Oaktrail HDMI I2C reads
- CVE-2026-98885kernel: ima: return error early if file xattr cannot be changed
- CVE-2026-98884kernel: mmc: core: Add validation for host-provided max_segs
- CVE-2026-98883kernel: serial: 8250_port: recognize UPIO_AU
- CVE-2026-98882kernel: media: chips-media: wave5: Add range checks for dec_output_info
- CVE-2026-98881kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()
- CVE-2026-98880kernel: ntfs3: handle set_blocksize failures
- CVE-2026-98879kernel: isofs: handle set_blocksize failures
- CVE-2026-98878kernel: irqchip/gic-v5: Immediately exec priority drop following activate
- CVE-2026-98877kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed
- CVE-2026-98876kernel: host1x: bus: Fix missing ops null check in error teardown
- CVE-2026-98875kernel: drm/nouveau/gsp: add SEC2 to GA100 chip table
- CVE-2026-98874kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
- CVE-2026-98873kernel: netfilter: nf_conntrack_expect: zero at allocation time
- CVE-2026-98872kernel: freevxfs: don't BUG() on unknown typed-extent type
- CVE-2026-98871kernel: crypto: ccp - Fix possible deadlock in SEV init failure path
- CVE-2026-98870kernel: ksmbd: remove stale channels from all sessions on teardown
- CVE-2026-98869kernel: bpf: Infer zext_dst based on static register liveness analysis
- CVE-2026-98868kernel: dm-pcache: reject a kset that overruns its segment
- CVE-2026-98867kernel: dm-pcache: bound the logical key offset from persistent memory
- CVE-2026-98866kernel: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF
- CVE-2026-98865kernel: sched_ext: Don't run ops.dequeue() with a DSQ lock held
- CVE-2026-98864kernel: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task
- CVE-2026-98863kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails
- CVE-2026-98862kernel: audit: fix exe mark UAF in kill_rules()
- CVE-2026-98860kernel: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request
- CVE-2026-98858kernel: io_uring: fix task_work add use-after-free with SQPOLL
- CVE-2026-98857kernel: ipvs: bound LBLCR and LBLC cache growth
- CVE-2026-98856kernel: kprobes: Skip disarmed probes when checking optkprobe overlap
- CVE-2026-98855kernel: of/overlay: put property on deadprops only after changeset add succeeds
- CVE-2026-98854kernel: of/overlay: only treat a positive changeset id as registered