CVE 2026 document archive · 36
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 36 / 264
- CVE-2026-98478kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling
- CVE-2026-98477kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()
- CVE-2026-98476kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()
- CVE-2026-98475kernel: s390/cmf: Fix virtual vs physical address confusion
- CVE-2026-98474kernel: s390/pci: Fix missing device lock in zpci_report_status()
- CVE-2026-98473kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config
- CVE-2026-98472kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV
- CVE-2026-98471kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migration
- CVE-2026-98470kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode
- CVE-2026-98469kernel: KVM: arm64: Fix AArch32 DBGBXVR handling
- CVE-2026-98468kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown race
- CVE-2026-98467kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race
- CVE-2026-98466kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2
- CVE-2026-98465kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration
- CVE-2026-98464kernel: RISC-V: KVM: Synchronize hrtimer callback during teardown
- CVE-2026-98463kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags
- CVE-2026-98462kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuse
- CVE-2026-98461kernel: Bluetooth: hci_sock: validate event length before filtering
- CVE-2026-98460kernel: Bluetooth: hci_sock: reject out-of-range OCF values
- CVE-2026-98459kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis()
- CVE-2026-98458kernel: Bluetooth: ISO: release unused CIS holds after channel attach
- CVE-2026-98457kernel: Bluetooth: L2CAP: validate frame length before control and FCS access
- CVE-2026-98456kernel: Bluetooth: mgmt: fix race in read_unconf_index_list()
- CVE-2026-98455kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO
- CVE-2026-98454kernel: smb: client: fix create context out-of-bounds reads
- CVE-2026-98453kernel: smb: client: close handle after create-context parsing failure
- CVE-2026-98452kernel: smb: client: clean up failed cached directory opens
- CVE-2026-98451kernel: smb: client: use finish_no_open() for non-regular inodes
- CVE-2026-98450kernel: smb: client: close completed creates on compound wait errors
- CVE-2026-98449kernel: smb: client: delete compound mids on send failure before unlock
- CVE-2026-98448kernel: xfs: release orphanage dir inode if chown fails
- CVE-2026-98447kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots
- CVE-2026-98446kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_init
- CVE-2026-98445kernel: xfs: don't let memory failures leak blocks and kill repairs
- CVE-2026-98444kernel: xfs: drop dquot flush lock when we can't find a buffer to flush
- CVE-2026-98443kernel: xfs: fix cursor and pointer handling when recovering iunlink buckets
- CVE-2026-98442kernel: net/sched: act_ct: fix helper UAF due to extensions realloc
- CVE-2026-98441kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry
- CVE-2026-98440kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
- CVE-2026-98439kernel: smb/server: cancel async requests when closing connection
- CVE-2026-98438kernel: mptcp: options: fix uninit-value in mptcp_write_data_fin
- CVE-2026-98437kernel: media: qcom: iris: fix runtime PM reference leaks
- CVE-2026-98435kernel: EDAC/altera: Use parent device for devres in altr_portb_setup()
- CVE-2026-98434kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmax
- CVE-2026-98433kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure
- CVE-2026-98432kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period
- CVE-2026-98431kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
- CVE-2026-98430kernel: RDMA/efa: Keep admin queues alive while IRQ is registered
- CVE-2026-98429kernel: RDMA/efa: Keep EQ resources alive while IRQ is registered
- CVE-2026-98428kernel: ALSA: usb: 6fire: Avoid embedded URBs