CVE 2026 document archive · 48
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 48 / 264
- CVE-2026-97597kernel: ipv6: flowlabel: cap duplicate leases per socket
- CVE-2026-97596kernel: ipvs: reject invalid states in connection template sync records
- CVE-2026-97595kernel: mac802154: fix use-after-free of sdata via queued RX frames
- CVE-2026-97594kernel: landlock: Fix use-after-free of the source's parent directory
- CVE-2026-97593kernel: iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX
- CVE-2026-97592kernel: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
- CVE-2026-97591kernel: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine
- CVE-2026-97590kernel: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm
- CVE-2026-97589kernel: s390/crypto: Fix wrong return code to engine in asynch callbacks
- CVE-2026-97588kernel: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
- CVE-2026-97587kernel: perf: RISC-V: store available counter mask as bitmap
- CVE-2026-97586kernel: afs: Fix missing kunmap in afs_dir_search_bucket()
- CVE-2026-97585kernel: afs: Fix double-unmap of directory block
- CVE-2026-97584kernel: afs: Fix incorrect free in candidate cleanup in afs_lookup_server()
- CVE-2026-97583kernel: afs: Clear stale peer app data after address list changes
- CVE-2026-97582kernel: hwmon: (gpio-fan) Fix use-after-free in alarm work
- CVE-2026-97581kernel: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
- CVE-2026-97580kernel: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity
- CVE-2026-97579kernel: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity
- CVE-2026-97578kernel: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer
- CVE-2026-97577kernel: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity
- CVE-2026-97576kernel: media: v4l2-ctrls: validate HEVC tile counts
- CVE-2026-97575kernel: media: v4l2-ctrls: validate AV1 tile counts
- CVE-2026-97574kernel: bnxt_en: Don't free the live ring's TPA state on queue restart failure
- CVE-2026-97573kernel: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
- CVE-2026-97572kernel: bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
- CVE-2026-97571kernel: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()
- CVE-2026-97570kernel: bnxt_en: Bound SW TPA IDs to prevent crashes
- CVE-2026-97569kernel: bnxt_en: Prevent queue stop with deferred completions
- CVE-2026-97568kernel: mptcp: syncookies: remember the request backup flag
- CVE-2026-97567kernel: mptcp: prevent race between disconnect() and rtx
- CVE-2026-97566kernel: mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0
- CVE-2026-97565kernel: smb: client: reject short READ responses in CIFSSMBRead()
- CVE-2026-97564kernel: smb: client: reject userspace cifs.idmap descriptions
- CVE-2026-97563kernel: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()
- CVE-2026-97562kernel: smb: client: pin DFS superblock in iterator callback
- CVE-2026-97561kernel: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
- CVE-2026-97560kernel: smb: client: fix one-byte OOB read in smb2_parse_native_symlink()
- CVE-2026-97559kernel: smb: client: fail DACL rewrite when the new DACL exceeds 64K
- CVE-2026-97558kernel: smb: client: fix cifsFileInfo reference leak in deferred close
- CVE-2026-97557kernel: smb: client: avoid leaking refcount in cifs_queue_oplock_break()
- CVE-2026-97556kernel: smb: client: avoid leaking refcount when cifs_sb_tlink() fails
- CVE-2026-97555kernel: smb: client: fix heap overflow in DACL owner/group rewrite
- CVE-2026-97554kernel: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
- CVE-2026-97553kernel: xfs: lock the healthmon when inserting unmount event
- CVE-2026-97552kernel: xfs: initialise error in xfs_defer_finish_one()
- CVE-2026-97551kernel: xfs: initialise args->total for parent pointer updates
- CVE-2026-97549kernel: xfs: fix under-reservation of blocks when repairing sf directories
- CVE-2026-97548kernel: xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions
- CVE-2026-97547kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN