CVE 2026 document archive · 38
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 38 / 264
- CVE-2026-98377kernel: vlan: require the MAC header to be present in __vlan_insert_inner_tag()
- CVE-2026-98376kernel: bpf: Use array_map_meta_equal for percpu array inner map replacement
- CVE-2026-98375kernel: xen/netfront: drop RX packets with a short Ethernet header
- CVE-2026-98374kernel: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
- CVE-2026-98373kernel: mm/hugetlb: preserve mremap address delta when skipping page tables
- CVE-2026-98372kernel: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()
- CVE-2026-98371kernel: xfrm: iptfs: fix runt reassembly panic from short inner tot_len
- CVE-2026-98370kernel: xfrm: fix compat ALLOCSPI request use-after-free
- CVE-2026-98369kernel: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()
- CVE-2026-98368kernel: esp: downgrade zerocopy managed frags before mutating skb frags
- CVE-2026-98367kernel: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept
- CVE-2026-98366kernel: RDMA/rxe: validate access flags before swapping the MR's PD
- CVE-2026-98365kernel: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
- CVE-2026-98364kernel: xfrm: hold net_device reference under RCU in bundle creation
- CVE-2026-98363kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS
- CVE-2026-98362kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate
- CVE-2026-98361kernel: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths
- CVE-2026-98360kernel: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds
- CVE-2026-98359kernel: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed
- CVE-2026-98358kernel: IB/iser: reject a remote invalidation of an unregistered direction
- CVE-2026-98357kernel: IB/isert: wait for deferred control PDU completions before releasing the connection
- CVE-2026-98356kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup
- CVE-2026-98355kernel: RDMA/rtrs: guard against null kobj name
- CVE-2026-98354kernel: RDMA/mad: Fix receive buffer leak when PKey enforcement fails
- CVE-2026-98353kernel: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables
- CVE-2026-98352kernel: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted
- CVE-2026-98351kernel: wifi: virt_wifi: free skb when disconnected
- CVE-2026-98350kernel: wifi: brcmfmac: cyw: pass PMKID to firmware if present
- CVE-2026-98349kernel: wifi: libipw: reject too-short beacon and probe responses
- CVE-2026-98348kernel: wifi: libipw: reject too-short association responses
- CVE-2026-98347kernel: IB/IPoIB: Avoid restoring OPER_UP after multicast flush
- CVE-2026-98346kernel: wifi: cfg80211: don't get the radio mask for netdev-less wdevs
- CVE-2026-98345kernel: wifi: cfg80211: check IP header size in cfg80211_classify8021d()
- CVE-2026-98344kernel: dmaengine: Fix device kref underflow in dma_chan_put()
- CVE-2026-98343kernel: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()
- CVE-2026-98342kernel: dmaengine: wait for RCU readers before releasing dma_device
- CVE-2026-98341kernel: wifi: cfg80211: don't free driver-owned scan requests
- CVE-2026-98340kernel: wifi: cfg80211: only group hidden BSSes with beacon entries
- CVE-2026-98339kernel: wifi: cfg80211: don't filter by BSS type when removing stale entries
- CVE-2026-98338kernel: wifi: cfg80211: ibss: ref BSS entry for joined event
- CVE-2026-98337kernel: wifi: mac80211: don't start a ROC while scanning
- CVE-2026-98336kernel: wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
- CVE-2026-98335kernel: wifi: mac80211: abort chanswitch when leaving a mesh
- CVE-2026-98334kernel: wifi: mac80211: reset state when starting AP fails
- CVE-2026-98333kernel: wifi: mac80211: reset the LED state when ifup fails
- CVE-2026-98332kernel: wifi: mac80211: only operate on TDLS peers in the TDLS code
- CVE-2026-98331kernel: wifi: mac80211: unlist vifs when their netdev is unregistered
- CVE-2026-98330kernel: wifi: cfg80211: get the wiphy out of a dying network namespace
- CVE-2026-98329kernel: wifi: mac80211: don't allow injecting frames wider than the chanctx
- CVE-2026-98328kernel: wifi: mac80211: add HE 6 GHz capability in the scan elems len