CVE 2026 document archive · 30
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 30 / 264
- CVE-2026-98797kernel: net: cap skb->queue_mapping when the tx queue is picked
- CVE-2026-98796kernel: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner
- CVE-2026-98795kernel: net: sparx5: skip ptp deinit if init was skipped
- CVE-2026-98794kernel: ipvs: filter some flags received in the backup server
- CVE-2026-98793kernel: netfilter: bpf: reject invalid NAT manipulation types
- CVE-2026-98792kernel: netfilter: flowtable: generalize pending status bit
- CVE-2026-98791kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
- CVE-2026-98790kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task()
- CVE-2026-98789kernel: bpf: Fix objects stuck in free_by_rcu_ttrace
- CVE-2026-98787kernel: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()
- CVE-2026-98786kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation
- CVE-2026-98785kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend
- CVE-2026-98784kernel: drm/amdgpu/gfx6: fix firmware leak on teardown
- CVE-2026-98783kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device
- CVE-2026-98782kernel: drm/mediatek: Fix ovl adaptor platform device leak
- CVE-2026-98781kernel: drm/mediatek: Fix pdev reference leak in mtk_drm_bind()
- CVE-2026-98780kernel: drm/amdgpu: fix IP instance memory leak on kobject add failure
- CVE-2026-98779kernel: drm/amdgpu: fix ACP MFD device leak on init failure
- CVE-2026-98778kernel: binder: fix is_failure flag for superseded transaction cleanup
- CVE-2026-98777kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede
- CVE-2026-98775kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure
- CVE-2026-98774kernel: rust_binder: cancel deferred work items in thread exit
- CVE-2026-98773kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnected
- CVE-2026-98772kernel: USB: serial: fix port tear down use-after-free
- CVE-2026-98771kernel: usb: storage: sierra_ms: reject short SWoC info transfers
- CVE-2026-98770kernel: usb: gadget: midi2: Fix the jack descriptor array sizes
- CVE-2026-98769kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
- CVE-2026-98767kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count
- CVE-2026-98766kernel: usb: gadget: aspeed-vhub: cancel wake work on device removal
- CVE-2026-98765kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completions
- CVE-2026-98764kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC
- CVE-2026-98763kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints
- CVE-2026-98761kernel: usb: typec: tcpm: recover after failure to start the frs ams
- CVE-2026-98760kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()
- CVE-2026-98759kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()
- CVE-2026-98758kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove
- CVE-2026-98757kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit()
- CVE-2026-98756kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe
- CVE-2026-98755kernel: tty: vcc: zero-initialize control packet in vcc_send_ctl()
- CVE-2026-98754kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup
- CVE-2026-98753kernel: tty: tty_port: restore TTY_IO_ERROR on activation failure
- CVE-2026-98752kernel: tty: port: fix tty_port_tty_vhangup() race
- CVE-2026-98751kernel: tty: abort break signalling on hangup
- CVE-2026-98747kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port()
- CVE-2026-98746kernel: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()
- CVE-2026-98745kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems
- CVE-2026-98744kernel: ASoC: codecs: max98363: fix uninitialized stream_config->type
- CVE-2026-98743kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type
- CVE-2026-98741kernel: ALSA: ua101: reject mismatched capture/playback packet sizes
- CVE-2026-98740kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safety