CVE 2026 document archive · 43
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 43 / 264
- CVE-2026-98124kernel: smb/client: invalidate fscache for fallocate range operations
- CVE-2026-98123kernel: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration
- CVE-2026-98122kernel: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()
- CVE-2026-98121kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks
- CVE-2026-98120kernel: netfs: Fix subreq ref leak
- CVE-2026-98119kernel: netfs: break unbuffered write when netfs_alloc_subrequest() fails
- CVE-2026-98118kernel: netfs: Fix readahead synchronisation issues by loading all folios upfront
- CVE-2026-98117kernel: cachefiles: Fix potential UAF/KASAN warning
- CVE-2026-98116kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF
- CVE-2026-98115kernel: ksmbd: safely drain sessions during logoff
- CVE-2026-98114kernel: ksmbd: propagate DACL parsing errors
- CVE-2026-98113kernel: ksmbd: rate limit unmapped SID errors
- CVE-2026-98112kernel: ksmbd: fix listener task lifetime on netdev events
- CVE-2026-98111kernel: Bluetooth: btintel: validate version TLV value lengths
- CVE-2026-98110kernel: Bluetooth: btintel: bound firmware ID by TLV length
- CVE-2026-98109kernel: Bluetooth: hci_core: Fix race condition during device registration
- CVE-2026-98108kernel: Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan
- CVE-2026-98107kernel: Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect
- CVE-2026-98106kernel: drm/pagemap: Prevent double migration of device pages
- CVE-2026-98105kernel: net: ethernet: oa_tc6: Improve the error recovery
- CVE-2026-98104kernel: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted
- CVE-2026-98103kernel: igmp: convert struct ip_sf_list to RCU
- CVE-2026-98102kernel: ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()
- CVE-2026-98101kernel: ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()
- CVE-2026-98099kernel: ipv6: mcast: use rcu_assign_pointer() for __rcu list updates
- CVE-2026-98098kernel: tipc: fix NULL deref in tipc_named_node_up() on empty publication list
- CVE-2026-98097kernel: tipc: Dont send random pad bytes in RESET/ACTIVATE messages
- CVE-2026-98095kernel: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header()
- CVE-2026-98093kernel: ASoC: fsl_micfil: balance mclk enable/disable
- CVE-2026-98092kernel: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()
- CVE-2026-98091kernel: btrfs: detach failed sprout device from transaction update list
- CVE-2026-98090kernel: btrfs: restore active device pointers after failed sprout
- CVE-2026-98089kernel: bonding: alb: fix uninitialized transport header access in alb_determine_nd()
- CVE-2026-98088kernel: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()
- CVE-2026-98087kernel: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate
- CVE-2026-98086kernel: ALSA: ump: do not touch legacy_rmidi before it exists
- CVE-2026-98085kernel: bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge
- CVE-2026-98083kernel: btrfs: fix transaction use-after-free in raid stripe insertion
- CVE-2026-98082kernel: btrfs: fix the possible bioc_list memory leak during error
- CVE-2026-98081kernel: btrfs: zoned: finish active block group cleanup if call_zone_finish() fails
- CVE-2026-98080kernel: btrfs: do not force reloc root creation during qgroup_account_snapshot()
- CVE-2026-98079kernel: btrfs: zstd: fix lost wakeup when waiting for a workspace
- CVE-2026-98077kernel: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
- CVE-2026-98076kernel: tracing/probes: Fix use-after-free on field name/type of events with multiple probes
- CVE-2026-98075kernel: bpf: reject BPF_PSEUDO_FUNC reference to the main program
- CVE-2026-98074kernel: bonding: do not clear curr_active_slave prematurely when releasing all slaves
- CVE-2026-98073kernel: net: Remove conflicting altnames for dying netns in __dev_change_net_namespace()
- CVE-2026-98072kernel: net/rds: use wq_has_sleeper() in release_in_xmit()
- CVE-2026-98071kernel: net/rds: clear cp_flags bits individually in rds_conn_path_reset()
- CVE-2026-98070kernel: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()