CVE 2026 document archive · 29
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 29 / 264
- CVE-2026-98853kernel: net: gso: limit recursive IP-in-IP segmentation
- CVE-2026-98852kernel: net: extend IPv6 exthdr detection of tunneled packets
- CVE-2026-98851kernel: netfilter: nft_flow_offload: drop flowtable reference on init error path
- CVE-2026-98850kernel: net/packet: prevent TX_RING byte count overflow
- CVE-2026-98849kernel: pfcp: fix socket lifetime on netdevice registration failure
- CVE-2026-98848kernel: rtc: ac100: Assign .num before accessing .hws
- CVE-2026-98847kernel: rtc: spear: initialize IRQ state before requesting alarm IRQ
- CVE-2026-98846kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait
- CVE-2026-98845kernel: tpm: Disable TPM on null key name mismatch
- CVE-2026-98844kernel: netfs: clear post-EOF pagecache when extending a file via write
- CVE-2026-98843kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale data
- CVE-2026-98842kernel: module: fix lost error code from codetag_load_module()
- CVE-2026-98841kernel: virt: vmgenid: set driver_data before registering notification handlers
- CVE-2026-98839kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()
- CVE-2026-98838kernel: vt: skip screen update for DEC alignment test on backgroup consoles
- CVE-2026-98837kernel: ALSA: caiaq: unregister the input device when probe fails
- CVE-2026-98836kernel: ALSA: line6: reject oversized playback packets
- CVE-2026-98835kernel: iio: accel: kionix-kx022a: Fix array boundary check
- CVE-2026-98834kernel: mtd: core: avoid double-free of OTP NVMEM device
- CVE-2026-98833kernel: mtd: core: call _get_device() with the master MTD
- CVE-2026-98832kernel: blk-cgroup: save IRQ state in blkg_tryget_closest()
- CVE-2026-98831kernel: of/overlay: don't leak fragment references when changeset init fails
- CVE-2026-98829kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow
- CVE-2026-98828kernel: wifi: ath9k: reject short WMI command responses
- CVE-2026-98827kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE
- CVE-2026-98825kernel: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()
- CVE-2026-98824kernel: wifi: mac80211: validate TX status rate metadata
- CVE-2026-98823kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership
- CVE-2026-98822kernel: wifi: mac80211: prevent AP VLAN tx from other interfaces
- CVE-2026-98821kernel: block: reject polled dio with user integrity metadata
- CVE-2026-98820kernel: blk-mq: set RQF_USE_SCHED when the operation is known
- CVE-2026-98819kernel: Bluetooth: btintel: validate DDC record lengths
- CVE-2026-98818kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()
- CVE-2026-98816kernel: bpf: Fix overflow of jump offset in constant blinding
- CVE-2026-98815kernel: nvme: fix cdev lifetime
- CVE-2026-98814kernel: nvme: fix command effects log lifetime for multipath heads
- CVE-2026-98813kernel: bpf: Hold map BTF for the memory allocator destructor record
- CVE-2026-98812kernel: net/mctp: publish the mctp_dev only after it is initialised
- CVE-2026-98811kernel: net/sched: cls_api: reclaim an empty proto on the error path
- CVE-2026-98810kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()
- CVE-2026-98809kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister
- CVE-2026-98808kernel: net: systemport: Fix buffer overflow in bcm_sysport_get_stats()
- CVE-2026-98807kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events
- CVE-2026-98806kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
- CVE-2026-98805kernel: tipc: prevent GCM nonce reuse on peer key changes
- CVE-2026-98804kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()
- CVE-2026-98803kernel: net: stmmac: fix rx Scatter-Gather support
- CVE-2026-98802kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA
- CVE-2026-98799kernel: bpf: Skip detached progs in trampoline images that are still in use
- CVE-2026-98798kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open