CVE 2026 document archive · 31

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 31 / 264

  1. CVE-2026-98739kernel: Bluetooth: RFCOMM: Fix initial port reference race
  2. CVE-2026-98736kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup
  3. CVE-2026-98735kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion
  4. CVE-2026-98732kernel: Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
  5. CVE-2026-98731kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()
  6. CVE-2026-98730kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()
  7. CVE-2026-98729kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h
  8. CVE-2026-98728kernel: tpm: fix off-by-four bounds check in tpm2_get_random()
  9. CVE-2026-98727kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known
  10. CVE-2026-98726kernel: nvme-multipath: fix underflow in ANA log bounds checks
  11. CVE-2026-98725kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()
  12. CVE-2026-98724kernel: nvmet: pci-epf: reject too-short SGL segments
  13. CVE-2026-98723kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refs
  14. CVE-2026-98722kernel: mtd: block2mtd: Fix divide error when erase_size is zero
  15. CVE-2026-98721kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
  16. CVE-2026-98720kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified
  17. CVE-2026-98719kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it
  18. CVE-2026-98718kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state
  19. CVE-2026-98717kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy
  20. CVE-2026-98716kernel: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted
  21. CVE-2026-98715kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN
  22. CVE-2026-98714kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded
  23. CVE-2026-98713kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT
  24. CVE-2026-98712kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq
  25. CVE-2026-98710kernel: wifi: iwlegacy: 3945: free EEPROM data on remove
  26. CVE-2026-98707kernel: wifi: mac80211: shut down RX BA session timer on teardown
  27. CVE-2026-98706kernel: wifi: mac80211: drain PS delivery work during station teardown
  28. CVE-2026-98705kernel: wifi: mac80211: account proxy paths against the mesh path limit
  29. CVE-2026-98704kernel: wifi: mac80211: keep fallback association elements alive
  30. CVE-2026-98703kernel: wifi: mac80211: minstrel_ht: validate fixed rate index
  31. CVE-2026-98701kernel: wifi: mac80211: release mesh path quota on failed additions
  32. CVE-2026-98700kernel: wifi: mac80211: set info->band for 802.3 encap offload frames
  33. CVE-2026-98699kernel: wifi: mac80211: fix mesh fast xmit path deletion UAF
  34. CVE-2026-98698kernel: wifi: mac80211: handle empty FILS association request payload
  35. CVE-2026-98697kernel: USB: serial: fix dynamic id driver deregistration race
  36. CVE-2026-98696kernel: USB: serial: fix driver deregistration order
  37. CVE-2026-98695kernel: USB: serial: fix ioctl hangup race
  38. CVE-2026-98694kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceled
  39. CVE-2026-98693kernel: thunderbolt: Hold a router reference for each allocated HopID
  40. CVE-2026-98692kernel: thunderbolt: Make the DP tunnel activation callback mandatory
  41. CVE-2026-98691kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stopped
  42. CVE-2026-98690kernel: thunderbolt: Fix domain reference leak when DPRX read is canceled
  43. CVE-2026-98689kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled
  44. CVE-2026-98688kernel: thunderbolt: Fix NULL dereference in tb_remove_work()
  45. CVE-2026-98687kernel: thunderbolt: Reject oversized XDomain properties responses
  46. CVE-2026-98686kernel: smb: client: discard post-EOF pagecache when extending a file via zero range
  47. CVE-2026-98685kernel: smb: client: discard post-EOF pagecache when extending a file via clone range
  48. CVE-2026-98684kernel: smb: client: flush and commit data before querying allocated ranges
  49. CVE-2026-98683kernel: smb: client: flush dirty data before zeroing a range
  50. CVE-2026-98682kernel: smb: client: drain and invalidate before server-side copy/clone
CVE 2026 document archive — Page 31 | PulseLinux