CVE 2026 document archive · 31
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 31 / 264
- CVE-2026-98739kernel: Bluetooth: RFCOMM: Fix initial port reference race
- CVE-2026-98736kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup
- CVE-2026-98735kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion
- CVE-2026-98732kernel: Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
- CVE-2026-98731kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()
- CVE-2026-98730kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()
- CVE-2026-98729kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
- CVE-2026-98728kernel: tpm: fix off-by-four bounds check in tpm2_get_random()
- CVE-2026-98727kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
- CVE-2026-98726kernel: nvme-multipath: fix underflow in ANA log bounds checks
- CVE-2026-98725kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
- CVE-2026-98724kernel: nvmet: pci-epf: reject too-short SGL segments
- CVE-2026-98723kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refs
- CVE-2026-98722kernel: mtd: block2mtd: Fix divide error when erase_size is zero
- CVE-2026-98721kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
- CVE-2026-98720kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified
- CVE-2026-98719kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it
- CVE-2026-98718kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state
- CVE-2026-98717kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy
- CVE-2026-98716kernel: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
- CVE-2026-98715kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
- CVE-2026-98714kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded
- CVE-2026-98713kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
- CVE-2026-98712kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq
- CVE-2026-98710kernel: wifi: iwlegacy: 3945: free EEPROM data on remove
- CVE-2026-98707kernel: wifi: mac80211: shut down RX BA session timer on teardown
- CVE-2026-98706kernel: wifi: mac80211: drain PS delivery work during station teardown
- CVE-2026-98705kernel: wifi: mac80211: account proxy paths against the mesh path limit
- CVE-2026-98704kernel: wifi: mac80211: keep fallback association elements alive
- CVE-2026-98703kernel: wifi: mac80211: minstrel_ht: validate fixed rate index
- CVE-2026-98701kernel: wifi: mac80211: release mesh path quota on failed additions
- CVE-2026-98700kernel: wifi: mac80211: set info->band for 802.3 encap offload frames
- CVE-2026-98699kernel: wifi: mac80211: fix mesh fast xmit path deletion UAF
- CVE-2026-98698kernel: wifi: mac80211: handle empty FILS association request payload
- CVE-2026-98697kernel: USB: serial: fix dynamic id driver deregistration race
- CVE-2026-98696kernel: USB: serial: fix driver deregistration order
- CVE-2026-98695kernel: USB: serial: fix ioctl hangup race
- CVE-2026-98694kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceled
- CVE-2026-98693kernel: thunderbolt: Hold a router reference for each allocated HopID
- CVE-2026-98692kernel: thunderbolt: Make the DP tunnel activation callback mandatory
- CVE-2026-98691kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stopped
- CVE-2026-98690kernel: thunderbolt: Fix domain reference leak when DPRX read is canceled
- CVE-2026-98689kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled
- CVE-2026-98688kernel: thunderbolt: Fix NULL dereference in tb_remove_work()
- CVE-2026-98687kernel: thunderbolt: Reject oversized XDomain properties responses
- CVE-2026-98686kernel: smb: client: discard post-EOF pagecache when extending a file via zero range
- CVE-2026-98685kernel: smb: client: discard post-EOF pagecache when extending a file via clone range
- CVE-2026-98684kernel: smb: client: flush and commit data before querying allocated ranges
- CVE-2026-98683kernel: smb: client: flush dirty data before zeroing a range
- CVE-2026-98682kernel: smb: client: drain and invalidate before server-side copy/clone