CVE 2026 document archive · 44
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 44 / 264
- CVE-2026-98069kernel: net/rds: acquire the fastpath locks in rds_conn_shutdown()
- CVE-2026-98068kernel: net/rds: don't let rds_conn_shutdown() consume a concurrent drop
- CVE-2026-98067kernel: erofs: disable LZ4 rolling decompression for now
- CVE-2026-98066kernel: ALSA: caiaq: Fix potential double-free at error path
- CVE-2026-98065kernel: bpf: Reject key-less BTF for hash maps
- CVE-2026-98064kernel: bpf: Fix NULL-ptr-deref when showing a void BTF type
- CVE-2026-98063kernel: bpf: Fix NULL-ptr-deref in btf_var_show()
- CVE-2026-98062kernel: bpf: Mark signal tracepoint siginfo arguments as scalar
- CVE-2026-98061kernel: bpf: Reject tail calls directly from callback frames
- CVE-2026-98060kernel: bpf: Reject resilient lock operations in rbtree callbacks
- CVE-2026-98059kernel: bpf: Mark sched_process_wait argument as nullable
- CVE-2026-98058kernel: bpf: Mark syscall helpers as sleepable
- CVE-2026-98057kernel: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation
- CVE-2026-98056kernel: nvme: remove stale namespaces by NSID range during scan
- CVE-2026-98055kernel: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
- CVE-2026-98054kernel: ASoC: Intel: avs: Fix unbalanced module reference count
- CVE-2026-98053kernel: ASoC: Intel: avs: Refactor and fix init_config access
- CVE-2026-98052kernel: net: bcmasp: clear txcb->last before writing each descriptor
- CVE-2026-98051kernel: net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times
- CVE-2026-98050kernel: mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context
- CVE-2026-98049kernel: bpf: zero extend the result of an arena 32-bit cmpxchg
- CVE-2026-98048kernel: bpf: don't rewrite bpf_fastcall patterns entered by a jump
- CVE-2026-98047kernel: bpf: Check ancestor frames for rbtree callbacks
- CVE-2026-98046kernel: bpf: Mark bpf_btf_find_by_name_kind() as sleepable
- CVE-2026-98045kernel: bpf: Mark faultable stack helpers as sleepable
- CVE-2026-98044kernel: bpf: Reject legacy packet loads from callbacks
- CVE-2026-98043kernel: bpf: Don't infer non-NULL from a pointer with an unbounded offset
- CVE-2026-98042kernel: bpf: Don't resurrect a scalar id dropped by collect_linked_regs()
- CVE-2026-98041kernel: bpf: Don't predict JMP32 pointer vs zero comparisons
- CVE-2026-98040kernel: bpf: Mark the zero register precise for a register-form NULL check
- CVE-2026-98039kernel: bpf: Require MEM_PERCPU for percpu kptr stores
- CVE-2026-98038kernel: bpf: Keep refcount_acquire nullable for borrowed RCU kptrs
- CVE-2026-98037kernel: bpf: Reject untrusted allocated-object pointers
- CVE-2026-98036kernel: bpf: Preserve special fields in recycled rhtab elements
- CVE-2026-98035kernel: bpf: Cancel special fields when recycling rhtab elements
- CVE-2026-98034kernel: bpf: Mark NULL kptr stores precise
- CVE-2026-98033kernel: bpf: Preserve inner map identity in callback frames
- CVE-2026-98032kernel: tracing: Fix subbuf resize races with trace_pipe_raw readers
- CVE-2026-98031kernel: nexthop: Initialize extack in remove_nh_grp_entry()
- CVE-2026-98030kernel: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size
- CVE-2026-98029kernel: eth: nfp: bound the ntuple rule dump by the caller's buffer size
- CVE-2026-98028kernel: eth: nfp: drop the replaced rule from the list when reprogramming fails
- CVE-2026-98027kernel: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
- CVE-2026-98026kernel: net: bridge: mcast: properly convert mglist to rcu
- CVE-2026-98025kernel: net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow
- CVE-2026-98024kernel: s390/ism: folio_put() after error
- CVE-2026-98023kernel: vxlan: reject dynamic fdb entries that reference a nexthop id
- CVE-2026-98022kernel: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations
- CVE-2026-98021kernel: net: reject oversized tx_queue_len at netlink parse time
- CVE-2026-98020kernel: pds_core: fix cmd_regs access racing BAR unmap on reset