CVE 2026 document archive · 42
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 42 / 264
- CVE-2026-98175kernel: smb: client: cancel reconnect work in clean_demultiplex_info()
- CVE-2026-98174kernel: smb: client: fix rlist race and missing initialization
- CVE-2026-98173kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels()
- CVE-2026-98172kernel: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error
- CVE-2026-98171kernel: kernel: Use-after-free in SMB client via malformed compound encrypted frames
- CVE-2026-98170kernel: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
- CVE-2026-98169kernel: smb: client: fix potential OOB read in smb3_enum_snapshots()
- CVE-2026-98168kernel: smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
- CVE-2026-98167kernel: smb: client: fix server->total_read for compound encrypted PDUs
- CVE-2026-98166kernel: drm/ttm: fix swapped-out resources never leaving their bulk_move range
- CVE-2026-98164kernel: KVM: x86/mmu: Check write tracking in all address spaces
- CVE-2026-98163kernel: cgroup: Avoid iteration of dying tasks with zero refcount
- CVE-2026-98162kernel: smb/server: fix tree connection leak in smb2_tree_connect()
- CVE-2026-98161kernel: nvdimm: pmem: keep PREFLUSH before data writes
- CVE-2026-98160kernel: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
- CVE-2026-98159kernel: wifi: mt76: mt7921: validate CLC firmware records
- CVE-2026-98158kernel: ppp_async: drop the errored frame instead of resetting its headroom
- CVE-2026-98157kernel: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation
- CVE-2026-98156kernel: drm/virtio: use the DMA API for resource backing on Xen
- CVE-2026-98155kernel: accel/qaic: Address potential out-of-bounds read in resp_worker()
- CVE-2026-98154kernel: nvme-rdma: fix -EIO cleanup order in queue_rq
- CVE-2026-98153kernel: nvme: fix racy access to FDP placement id array
- CVE-2026-98152kernel: nvmet-rdma: fix queue leak when connect backlog is exceeded
- CVE-2026-98151kernel: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic
- CVE-2026-98150kernel: bpf: Fix BPF_F_CPU validation for sparse CPU IDs
- CVE-2026-98149kernel: bpf: Fix percpu map update indexing with sparse CPU IDs
- CVE-2026-98148kernel: drm/gud: validate GUD_ROTATION_0 is present in supported rotations
- CVE-2026-98147kernel: printk: Don't WARN on kthread_run failure
- CVE-2026-98146kernel: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain
- CVE-2026-98145kernel: accel/amdxdna: reject a command chain that carries no commands
- CVE-2026-98144kernel: accel/amdxdna: put the chained BO when its mapping fails
- CVE-2026-98143kernel: accel: ethosu: Don't read the U65 rounding mode as a storage mode
- CVE-2026-98142kernel: drm/cirrus-qemu: Validate BAR0 size during probe
- CVE-2026-98141kernel: ntfs: propagate reparse index insertion failure
- CVE-2026-98140kernel: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths
- CVE-2026-98139kernel: ntfs: only count successfully cleared runs when freeing clusters
- CVE-2026-98138kernel: ntfs: do not mark the volume clean in sync_fs when errors were recorded
- CVE-2026-98137kernel: ntfs: treat any nonzero dio zero-range return as an error
- CVE-2026-98136kernel: ntfs: bound $AttrDef table walk to the loaded table size
- CVE-2026-98135kernel: ntfs: reject invalid sectors_per_cluster in the boot sector
- CVE-2026-98134kernel: bpf: check_cond_jmp_op(): properly infer if register is null
- CVE-2026-98133kernel: ntfs: leave HasEA flag untouched on setxattr failure
- CVE-2026-98132kernel: bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO
- CVE-2026-98131kernel: net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
- CVE-2026-98130kernel: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START
- CVE-2026-98129kernel: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
- CVE-2026-98128kernel: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()
- CVE-2026-98127kernel: smb/client: validate new EOF for insert range
- CVE-2026-98126kernel: smb/client: validate new EOF for zero range
- CVE-2026-98125kernel: smb/client: fix stale page cache in insert/collapse range