CVE 2026 document archive · 41
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 41 / 264
- CVE-2026-98225kernel: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem
- CVE-2026-98224kernel: mm/vma: correctly unaccount on mmap_prepare() failure
- CVE-2026-98223kernel: mm: filemap: retain mapped dropbehind folios
- CVE-2026-98222kernel: KEYS: encrypted: fix integer overflow of datablob_len
- CVE-2026-98221kernel: KEYS: trusted: Fix tpm2_load_cmd() boundary check
- CVE-2026-98220kernel: sched_ext: Fix NULL sched deref in kfunc sub-sched error paths
- CVE-2026-98219kernel: sched_ext: Close the pre-enable ops error claim window
- CVE-2026-98218kernel: i2c: atr: fix dangling adapter pointer on add failure
- CVE-2026-98217kernel: IB/mlx4: Fix use-after-free on pkey sysfs registration failure
- CVE-2026-98216kernel: IB/hfi1: Fix the PIO_CRED credit-return mmap
- CVE-2026-98215kernel: selinux: preserve user SID across nested backing files
- CVE-2026-98214kernel: selinux: recheck intermediate backing files on mprotect()
- CVE-2026-98213kernel: mmc: core: Cancel SDIO IRQ work before freeing host
- CVE-2026-98212kernel: mmc: hsq: Fix use-after-free in retry work
- CVE-2026-98211kernel: mmc: mmci: Fix use-after-free in busy-timeout work
- CVE-2026-98210kernel: mmc: mxcmmc: cancel data work and watchdog on remove
- CVE-2026-98209kernel: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
- CVE-2026-98208kernel: mmc: sdio_uart: fix xmit_fifo leak when the port table is full
- CVE-2026-98207kernel: mmc: spi: reset bytes_xfered before retrying CRC failures
- CVE-2026-98206kernel: Input: cyttsp5 - clamp the HID report size before memcpy
- CVE-2026-98205kernel: Input: evdev - zero absinfo before partial copy in EVIOCSABS
- CVE-2026-98204kernel: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()
- CVE-2026-98203kernel: Input: soc_button_array - check btns_desc->package.count
- CVE-2026-98202kernel: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound
- CVE-2026-98201kernel: Input: zero ff_effect before compat copy in input_ff_effect_from_user
- CVE-2026-98200kernel: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()
- CVE-2026-98199kernel: hwmon: (pmbus/core) increase number of phases and add new mask
- CVE-2026-98198kernel: hwmon: (pwm-fan) Stop RPM timer before freeing tach data
- CVE-2026-98197kernel: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove
- CVE-2026-98196kernel: wifi: brcmsmac: fix UAF in brcms_free_timer()
- CVE-2026-98195kernel: wifi: iwlegacy: fix broadcast stations deallocation
- CVE-2026-98194kernel: wifi: libertas_tf: fix UAF in lbtf_free_adapter()
- CVE-2026-98193kernel: wifi: libipw: reject TKIP frames without a full MIC
- CVE-2026-98192kernel: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown
- CVE-2026-98191kernel: wifi: wlcore: release runtime PM ref on regdomain config failure
- CVE-2026-98190kernel: wifi: wilc1000: fix out-of-bounds read in P2P public action frames
- CVE-2026-98189kernel: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
- CVE-2026-98188kernel: wifi: p54: validate curve data length in the calibration curve converters
- CVE-2026-98187kernel: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
- CVE-2026-98186kernel: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
- CVE-2026-98185kernel: wifi: mwifiex: validate scan response extents
- CVE-2026-98184kernel: wifi: mwifiex: prevent authentication frame length truncation
- CVE-2026-98183kernel: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements
- CVE-2026-98182kernel: wifi: mac80211: refuse to make a monitor active when it has no queue
- CVE-2026-98181kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
- CVE-2026-98180kernel: drm/msm: RCU-free the scheduler-containing ring and VM objects
- CVE-2026-98179kernel: drm/amdgpu: fix rmmio iounmap skipped on device removal
- CVE-2026-98178kernel: drm/amdgpu: Skip KFD mapping clear before initialization
- CVE-2026-98177kernel: drm/amdkfd: Avoid integer underflow in EOP ring size calculation
- CVE-2026-98176kernel: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc