CVE 2026 document archive · 37
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 37 / 264
- CVE-2026-98427kernel: net/sched: codel: bound the dropping loop per dequeue call
- CVE-2026-98426kernel: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
- CVE-2026-98425kernel: wifi: mac80211: don't warn when an IBSS has no channel to scan
- CVE-2026-98424kernel: wifi: cfg80211: undo netns switch if renaming the wiphy fails
- CVE-2026-98423kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
- CVE-2026-98422kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
- CVE-2026-98421kernel: wifi: mac80211: require a peer station for TDLS setup confirm
- CVE-2026-98420kernel: ksmbd: follow SMB2 session expiration semantics
- CVE-2026-98419kernel: drop_monitor: fix out-of-bounds write in reset_per_cpu_data()
- CVE-2026-98418kernel: sched/core: Avoid false migration warning for proxy donors
- CVE-2026-98417kernel: net: xfrm: reject unrepresentable espintcp transport headers
- CVE-2026-98416kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
- CVE-2026-98415kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
- CVE-2026-98414kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages()
- CVE-2026-98413kernel: selinux: always fill AVC decision in avc_has_perm_noaudit()
- CVE-2026-98412kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
- CVE-2026-98411kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
- CVE-2026-98410kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog
- CVE-2026-98409kernel: watchdog: rtd119x: Avoid division by zero
- CVE-2026-98408kernel: watchdog: rzv2h: Avoid division by zero
- CVE-2026-98407kernel: wifi: rsi: fix heap OOB write on key removal
- CVE-2026-98406kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
- CVE-2026-98405kernel: smb: client: fix missing iov bounds check in parse_posix_sids()
- CVE-2026-98404kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
- CVE-2026-98403kernel: s390/boot: Avoid IPL parameter append past command line
- CVE-2026-98402kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint
- CVE-2026-98401kernel: net: iptunnel: fix stale transport header during tunnel decapsulation
- CVE-2026-98400kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm block
- CVE-2026-98399kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block
- CVE-2026-98398kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes
- CVE-2026-98397kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown
- CVE-2026-98396kernel: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()
- CVE-2026-98395kernel: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit
- CVE-2026-98394kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer
- CVE-2026-98393kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU
- CVE-2026-98392kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
- CVE-2026-98391kernel: drm/xe: Guard page-fault worker with runtime PM check
- CVE-2026-98390kernel: x86/amd_node: Avoid divide by zero on virtualized systems
- CVE-2026-98389kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset
- CVE-2026-98388kernel: exec: do_close_on_exec() before taking exec_update_lock
- CVE-2026-98387kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s390
- CVE-2026-98386kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot
- CVE-2026-98385kernel: sched/cache: Decouple sched_cache_group from mm to fix UAF
- CVE-2026-98384kernel: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()
- CVE-2026-98383kernel: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL
- CVE-2026-98382kernel: bpf: Reject dev-bound-only programs on other devices
- CVE-2026-98381kernel: veth: manage XDP program pointers during channel resize
- CVE-2026-98380kernel: net/sched: reject IDR error pointers when deleting actions
- CVE-2026-98379kernel: netfilter: ip6t_rpfilter: reject routes without inet6_dev
- CVE-2026-98378kernel: bpf: Skip unsettled links in link iterator