CVE 2026 document archive · 39
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 39 / 264
- CVE-2026-98327kernel: wifi: mac80211: mesh: reset the CSA state when leaving
- CVE-2026-98326kernel: wifi: mac80211: mesh: release the channel if start fails
- CVE-2026-98325kernel: wifi: mac80211: set up the TX info early to fix failure paths
- CVE-2026-98324kernel: dmaengine: pxa: fix double counting of the hw descriptors
- CVE-2026-98323kernel: RDMA/siw: Bound fragmented header copies by the remaining length
- CVE-2026-98322kernel: netfilter: nft_nat: fully initialise new_addr in netmap setup
- CVE-2026-98321kernel: netfilter: nf_nat: unregister and release hooks on error
- CVE-2026-98320kernel: netfilter: flowtable: hold reference on ct until flow is released
- CVE-2026-98319kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr
- CVE-2026-98318kernel: smb: client: validate absolute native symlink targets before NT fixups
- CVE-2026-98317kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS
- CVE-2026-98314kernel: ALSA: pcm: set timer->private_data before registering the PCM timer
- CVE-2026-98313kernel: drm/msm/dp: skip PUSH_IDLE when the link was never enabled
- CVE-2026-98312kernel: ALSA: 6fire: fix OOB write from device-reported iso length
- CVE-2026-98311kernel: wifi: virt_wifi: don't transfer operstate before register
- CVE-2026-98310kernel: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory
- CVE-2026-98309kernel: drm/vc4: Use managed KMS polling to fix UAF on unbind
- CVE-2026-98308kernel: ALSA: hda: trace PCM open only after assigning a stream
- CVE-2026-98307kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()
- CVE-2026-98306kernel: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation
- CVE-2026-98305kernel: net: dsa: mxl862xx: disable the stats poll on teardown
- CVE-2026-98304kernel: net: bcmgenet: restore the hardware filters on open
- CVE-2026-98303kernel: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup
- CVE-2026-98302kernel: net: fddi: skfp: fix NULL deref when setting the MAC address while down
- CVE-2026-98301kernel: net: bridge: mst: move switchdev call outside rcu
- CVE-2026-98300kernel: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv()
- CVE-2026-98299kernel: tcp: do not let tcp_rmem be set below 4096
- CVE-2026-98298kernel: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()
- CVE-2026-98297kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained
- CVE-2026-98296kernel: Bluetooth: btintel_pcie: validate TX skb length in send_sync
- CVE-2026-98295kernel: Bluetooth: coredump: Quiesce dump work on unregister
- CVE-2026-98294kernel: Bluetooth: hci_qca: Do not write to the serial port after it is closed
- CVE-2026-98293kernel: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()
- CVE-2026-98292kernel: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access
- CVE-2026-98291kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
- CVE-2026-98290kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup
- CVE-2026-98289kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc()
- CVE-2026-98288kernel: net: stmmac: fix TSO header length truncation
- CVE-2026-98287kernel: pppoatm: ensure a writable skb header and linear data
- CVE-2026-98286kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown
- CVE-2026-98285kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errors
- CVE-2026-98284kernel: netlink: do not free nlk->groups while lockless readers can use it
- CVE-2026-98283kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
- CVE-2026-98282kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
- CVE-2026-98281kernel: futex: Also allocate private hash on vfork()
- CVE-2026-98280kernel: drm/xe/i2c: Disable IRQ on unbind
- CVE-2026-98279kernel: btrfs: handle lack of space when cleaning up verity items
- CVE-2026-98278kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check
- CVE-2026-98277kernel: eth: fbnic: ring the doorbell if a burst ends in a drop
- CVE-2026-98276kernel: net: lock the socket in sock_gettstamp()