CVE 2026 document archive · 35
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 35 / 264
- CVE-2026-98528kernel: gpio: cdev: fix kernel stack leak to user-space in error path
- CVE-2026-98527kernel: gpio: zynq: fix runtime PM leak on request error path
- CVE-2026-98526kernel: llc: reserve device headroom for allocated frames
- CVE-2026-98525kernel: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()
- CVE-2026-98524kernel: rds: ib: Clear the sg list when mapping an MR fails
- CVE-2026-98523kernel: drm/client: fix restore of partially initialized client
- CVE-2026-98522kernel: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()
- CVE-2026-98521kernel: drm/i915: fix incorrect RCU teardown order
- CVE-2026-98520kernel: drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping
- CVE-2026-98519kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()
- CVE-2026-98518kernel: drm/nouveau/dmem: pin VRAM for the whole registered range
- CVE-2026-98517kernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM
- CVE-2026-98516kernel: drm/nouveau: Fix bridge reference leak in nv1a_ram_new()
- CVE-2026-98515kernel: drm/nouveau: fix double-free in nvif_vmm_dtor
- CVE-2026-98514kernel: drm/nouveau: Fix gem reference leak in validate_init()
- CVE-2026-98513kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
- CVE-2026-98512kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_sched
- CVE-2026-98511kernel: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
- CVE-2026-98510kernel: drm/xe/vm: nuke PTs only after unlinking contested VMAs
- CVE-2026-98509kernel: drm/virtio: fix memory leak of fence event on execbuffer failure
- CVE-2026-98508kernel: drm/virtio: fix NULL pointer dereference on fence allocation failure
- CVE-2026-98507kernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
- CVE-2026-98506kernel: mm/hugetlb: do not dissolve gigantic pages without runtime support
- CVE-2026-98505kernel: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()
- CVE-2026-98504kernel: PCI: of_property: Omit bus properties without a subordinate bus
- CVE-2026-98503kernel: packet: use ubuf_info completion for TX_RING packets
- CVE-2026-98502kernel: HID: alps: unregister DualPoint Stick input device on remove
- CVE-2026-98501kernel: HID: alps: fix use-after-free on input2 registration failure
- CVE-2026-98500kernel: HID: hid-oxp: use cancel_delayed_work_sync() in remove
- CVE-2026-98499kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
- CVE-2026-98498kernel: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()
- CVE-2026-98497kernel: net/mlx5e: fix swapped IPv6 IPsec policy masks
- CVE-2026-98496kernel: net: airoha: npu: cancel wdt_work after releasing the WDT IRQ
- CVE-2026-98495kernel: net: arp: terminate device name before lookup
- CVE-2026-98494kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
- CVE-2026-98493kernel: net: ipconfig: bound DHCP option construction
- CVE-2026-98492kernel: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
- CVE-2026-98491kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry
- CVE-2026-98490kernel: net: openvswitch: conntrack: fix helper UAF due to extensions realloc
- CVE-2026-98489kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons read
- CVE-2026-98488kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
- CVE-2026-98487kernel: net: bridge: mdb: restart port group walk after deletion
- CVE-2026-98486kernel: net: ena: fix MMIO read buffer leak on probe failure
- CVE-2026-98485kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read
- CVE-2026-98484kernel: netfilter: nf_tables: skip expired catchall elements on insert and delete
- CVE-2026-98483kernel: nfc: fix use-after-free in nfc_get_local_general_bytes
- CVE-2026-98482kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()
- CVE-2026-98481kernel: nfc: port100: reject frames whose declared length exceeds the received data
- CVE-2026-98480kernel: nfc: trf7970a: power down on startup RX gain failure
- CVE-2026-98479kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU