CVE 2026 document archive · 40
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 40 / 264
- CVE-2026-98275kernel: kernel: Denial of Service via improper interrupt acknowledgment in Cortina Ethernet driver
- CVE-2026-98274kernel: net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()
- CVE-2026-98273kernel: x86/kprobes: Fix crash when probing CS CALL instructions
- CVE-2026-98272kernel: net: mvpp2: prevent buffer overflow in page_pool allocation
- CVE-2026-98271kernel: net: skbuff: do not leave stale header offsets after pskb_carve()
- CVE-2026-98270kernel: drm/amdgpu: check ras and obj before dereference
- CVE-2026-98269kernel: btrfs: abort transaction on failure to update inode for hole punching and reflinking
- CVE-2026-98268kernel: perf: Fix null pointer access in is_include_guest_event()
- CVE-2026-98267kernel: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size
- CVE-2026-98266kernel: ALSA: core: Fix potential UAF after asynchronous card release
- CVE-2026-98265kernel: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity
- CVE-2026-98264kernel: ALSA: virtio: reset device before deleting virtqueues
- CVE-2026-98263kernel: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type
- CVE-2026-98262kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY
- CVE-2026-98261kernel: cifs: Fix server use-after-free in cifs_chan_skip_or_disable()
- CVE-2026-98260kernel: exec: Cleanup POSIX timers right after de_thread()
- CVE-2026-98259kernel: fs/dax: check zero or empty entry before converting xarray entry
- CVE-2026-98258kernel: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list
- CVE-2026-98257kernel: rds: ib: use rds_conn_drop() on protocol version mismatch
- CVE-2026-98256kernel: signal: Prevent exec() race
- CVE-2026-98255kernel: tcp: exclude old ACKs from tcp fast path
- CVE-2026-98254kernel: swiotlb: use the adjusted address for the highmem page lookup
- CVE-2026-98253kernel: RDMA/ucma: Serialize join and leave on copy_to_user failure
- CVE-2026-98252kernel: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()
- CVE-2026-98251kernel: openvswitch: avoid reallocating confirmed conntrack labels
- CVE-2026-98250kernel: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath
- CVE-2026-98249kernel: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc
- CVE-2026-98248kernel: arm64: percpu: Fix LSE operations on {8,16}-bit types
- CVE-2026-98247kernel: Bluetooth: hci_codec: validate vendor codec count length
- CVE-2026-98246kernel: Bluetooth: hci_sync: Serialize local codec list cleanup
- CVE-2026-98245kernel: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()
- CVE-2026-98244kernel: btrfs: clear free space tree creation state on rebuild failure
- CVE-2026-98243kernel: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3
- CVE-2026-98242kernel: dma-buf: Fix silent overflow for phys vec to sgt
- CVE-2026-98241kernel: ipv6: xfrm: use full sockets in local error paths
- CVE-2026-98240kernel: net: ip_tunnel: initialize `options_len` before referencing options
- CVE-2026-98239kernel: net: lan743x: fix RX checksum use-after-free
- CVE-2026-98238kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()
- CVE-2026-98237kernel: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain
- CVE-2026-98236kernel: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value
- CVE-2026-98235kernel: net/sched: act_api: release tail references on DELACTION failure
- CVE-2026-98234kernel: net/sched: hhf: cap hh_flows_limit at change time
- CVE-2026-98233kernel: net/packet: clear RX owner on VNET header error
- CVE-2026-98232kernel: kernel: arbitrary code execution via out-of-bounds stack access in scsi_cdl_enable()
- CVE-2026-98231kernel: xfrm: serialize state GC with device state flush
- CVE-2026-98230kernel: xfrm: use hlist_del_init_rcu for state_cache and state_cache_input
- CVE-2026-98229kernel: xfrm: save input state data before secpath resets
- CVE-2026-98228kernel: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ
- CVE-2026-98227kernel: memstick: ms_block: destroy io_queue workqueue on removal
- CVE-2026-98226kernel: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count