CVE 2026 document archive · 45
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 45 / 264
- CVE-2026-98019kernel: bpf: mark a NULL call argument precise
- CVE-2026-98018kernel: net: mctp: i3c: serialize probe with bus removal
- CVE-2026-98017kernel: net/sched: defer qdisc freeing after failed creation
- CVE-2026-98016kernel: net/mlx5e: Fix use-after-free race in sample_restore_put()
- CVE-2026-98015kernel: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put
- CVE-2026-98014kernel: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable
- CVE-2026-98013kernel: net/sched: fq_pie: clamp quantum in change path
- CVE-2026-98012kernel: net/sched: sfq: clamp quantum in change path
- CVE-2026-98011kernel: net/sched: hhf: clamp quantum in change and init paths
- CVE-2026-98010kernel: net/sched: drr: clamp quantum in change class
- CVE-2026-98009kernel: net/sched: ets: clamp quantum in parse and fallback paths
- CVE-2026-98008kernel: net: macb: fix NULL pointer dereference on unbind with fixed-link
- CVE-2026-98007kernel: bpf: Reject non-scalar bpf_loop iteration counts
- CVE-2026-98006kernel: ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev
- CVE-2026-98005kernel: erofs: delimit inode_share cache key components
- CVE-2026-98004kernel: iommu/riscv: Serialize command queue publishing
- CVE-2026-98003kernel: iommu/amd: Do not reallocate GA log buffers on resume
- CVE-2026-98002kernel: iommu/amd: Fix ineffective error check in nested domain allocation
- CVE-2026-98001kernel: hwmon: (ltc4282) Make sure clk_init_data is fully initialized
- CVE-2026-98000kernel: hwmon: Fix potential UAF in pec_store
- CVE-2026-97998kernel: netfilter: nfnetlink_log: cope with concurrent instance destruction
- CVE-2026-97997kernel: virtio_ring: fix stale descriptor flags after a failed packed add
- CVE-2026-97996kernel: virtio: fix use-after-free in unregister_virtio_device()
- CVE-2026-97995kernel: virtio_console: do not free control-out buffers on remove
- CVE-2026-97994kernel: vhost/vdpa: reject VRING_NUM larger than device max
- CVE-2026-97993kernel: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx
- CVE-2026-97992kernel: vhost-vdpa: protect config_ctx from being freed under the config callback
- CVE-2026-97991kernel: vdpa_sim_blk: reject out-of-range sector starts
- CVE-2026-97990kernel: vdpa_sim_net: check TX pull result before RX copy
- CVE-2026-97989kernel: vduse: validate virtqueue alignment
- CVE-2026-97988kernel: vhost: invalidate vring access on IOTLB transitions
- CVE-2026-97987kernel: virtio_input: reset device if input_register_device() fails
- CVE-2026-97986kernel: virtio_input: stop callbacks before unregistering input device
- CVE-2026-97985kernel: af_unix: Update last skb marker in manage_oob()
- CVE-2026-97984kernel: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU
- CVE-2026-97983kernel: vduse: return compat ioctl results directly
- CVE-2026-97982kernel: net: ethernet: cortina: Fix budget accounting
- CVE-2026-97981kernel: net: ethernet: cortina: Count dropped frames as NAPI work
- CVE-2026-97980kernel: s390/debug: Fix NULL pointer dereference in debug_set_level()
- CVE-2026-97979kernel: ice: add missing xa_destroy for sched_node_ids
- CVE-2026-97978kernel: eth: ice: don't dereference pointers from TP_printk()
- CVE-2026-97977kernel: Bluetooth: btusb: Fix UAF of btusb_data by rx_work
- CVE-2026-97976kernel: Bluetooth: btintel_pcie: validate packet_len before skb_put_data
- CVE-2026-97975kernel: Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
- CVE-2026-97974kernel: ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()
- CVE-2026-97973kernel: net: macb: destroy the phylink instance on the probe error path
- CVE-2026-97972kernel: net: macb: put the "mdio" child node reference on success
- CVE-2026-97971kernel: nstree: check listing permission before taking a namespace reference
- CVE-2026-97970kernel: watchdog: msc313e: Avoid division by zero
- CVE-2026-97969kernel: watchdog: msc313e: Fix clock leak and spurious timer in settimeout()