CVE 2026 document archive · 39

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 39 / 264

  1. CVE-2026-98327kernel: wifi: mac80211: mesh: reset the CSA state when leaving
  2. CVE-2026-98326kernel: wifi: mac80211: mesh: release the channel if start fails
  3. CVE-2026-98325kernel: wifi: mac80211: set up the TX info early to fix failure paths
  4. CVE-2026-98324kernel: dmaengine: pxa: fix double counting of the hw descriptors
  5. CVE-2026-98323kernel: RDMA/siw: Bound fragmented header copies by the remaining length
  6. CVE-2026-98322kernel: netfilter: nft_nat: fully initialise new_addr in netmap setup
  7. CVE-2026-98321kernel: netfilter: nf_nat: unregister and release hooks on error
  8. CVE-2026-98320kernel: netfilter: flowtable: hold reference on ct until flow is released
  9. CVE-2026-98319kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr
  10. CVE-2026-98318kernel: smb: client: validate absolute native symlink targets before NT fixups
  11. CVE-2026-98317kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS
  12. CVE-2026-98314kernel: ALSA: pcm: set timer->private_data before registering the PCM timer
  13. CVE-2026-98313kernel: drm/msm/dp: skip PUSH_IDLE when the link was never enabled
  14. CVE-2026-98312kernel: ALSA: 6fire: fix OOB write from device-reported iso length
  15. CVE-2026-98311kernel: wifi: virt_wifi: don't transfer operstate before register
  16. CVE-2026-98310kernel: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory
  17. CVE-2026-98309kernel: drm/vc4: Use managed KMS polling to fix UAF on unbind
  18. CVE-2026-98308kernel: ALSA: hda: trace PCM open only after assigning a stream
  19. CVE-2026-98307kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
  20. CVE-2026-98306kernel: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation
  21. CVE-2026-98305kernel: net: dsa: mxl862xx: disable the stats poll on teardown
  22. CVE-2026-98304kernel: net: bcmgenet: restore the hardware filters on open
  23. CVE-2026-98303kernel: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
  24. CVE-2026-98302kernel: net: fddi: skfp: fix NULL deref when setting the MAC address while down
  25. CVE-2026-98301kernel: net: bridge: mst: move switchdev call outside rcu
  26. CVE-2026-98300kernel: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv()
  27. CVE-2026-98299kernel: tcp: do not let tcp_rmem be set below 4096
  28. CVE-2026-98298kernel: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()
  29. CVE-2026-98297kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained
  30. CVE-2026-98296kernel: Bluetooth: btintel_pcie: validate TX skb length in send_sync
  31. CVE-2026-98295kernel: Bluetooth: coredump: Quiesce dump work on unregister
  32. CVE-2026-98294kernel: Bluetooth: hci_qca: Do not write to the serial port after it is closed
  33. CVE-2026-98293kernel: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()
  34. CVE-2026-98292kernel: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access
  35. CVE-2026-98291kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
  36. CVE-2026-98290kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
  37. CVE-2026-98289kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()
  38. CVE-2026-98288kernel: net: stmmac: fix TSO header length truncation
  39. CVE-2026-98287kernel: pppoatm: ensure a writable skb header and linear data
  40. CVE-2026-98286kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown
  41. CVE-2026-98285kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errors
  42. CVE-2026-98284kernel: netlink: do not free nlk->groups while lockless readers can use it
  43. CVE-2026-98283kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
  44. CVE-2026-98282kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
  45. CVE-2026-98281kernel: futex: Also allocate private hash on vfork()
  46. CVE-2026-98280kernel: drm/xe/i2c: Disable IRQ on unbind
  47. CVE-2026-98279kernel: btrfs: handle lack of space when cleaning up verity items
  48. CVE-2026-98278kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check
  49. CVE-2026-98277kernel: eth: fbnic: ring the doorbell if a burst ends in a drop
  50. CVE-2026-98276kernel: net: lock the socket in sock_gettstamp()
CVE 2026 document archive — Page 39 | PulseLinux