PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 51

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 51 / 264

  1. CVE-2026-97426kernel: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error
  2. CVE-2026-97425kernel: drm/amdgpu: fix buffer overflow during vBIOS update
  3. CVE-2026-97424kernel: drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq
  4. CVE-2026-97423kernel: cxl/region: Validate partition index before array access
  5. CVE-2026-97422kernel: drm/amdkfd: fix SMI event cross-process information leak
  6. CVE-2026-97421kernel: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()
  7. CVE-2026-97420kernel: bpf: NUL-terminate replaced sysctl value
  8. CVE-2026-97419kernel: hsr: broadcast netlink notifications in the device's net namespace
  9. CVE-2026-97418kernel: ALSA: es18xx: check control allocation before private data setup
  10. CVE-2026-97417kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
  11. CVE-2026-97416kernel: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()
  12. CVE-2026-97415kernel: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF
  13. CVE-2026-97414kernel: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend()
  14. CVE-2026-97413kernel: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write
  15. CVE-2026-97412kernel: pds_core: quiesce DMA before freeing resources
  16. CVE-2026-97411kernel: net: ibm: emac: mal: fix potential system hang in mal_remove()
  17. CVE-2026-97410kernel: netconsole: take target_cleanup_list_lock in drop_netconsole_target()
  18. CVE-2026-97409kernel: nvme-fc: Do not cancel requests in io target before it is initialized
  19. CVE-2026-97408kernel: Bluetooth: L2CAP: validate connectionless PSM length
  20. CVE-2026-97407kernel: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
  21. CVE-2026-97399glibc: glibc: Denial of Service via out-of-bounds read in strncasecmp
  22. CVE-2026-97380mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement
  23. CVE-2026-97313bind: bind: Denial of service via assertion failure in RPZ query processing
  24. CVE-2026-97229ruby: integer overflow issue in CI/CD regular expression compiler
  25. CVE-2026-97205nginx: NGINX ngx_http_core_module vulnerability
  26. CVE-2026-97185gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file
  27. CVE-2026-97032net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification
  28. CVE-2026-97031crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references
  29. CVE-2026-97030html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword
  30. CVE-2026-97029flatpak: flatpak: Sandboxed app can signal unsandboxed processes in the same process group
  31. CVE-2026-97027flatpak: flatpak: Denial of service via unsanitized keys in exported Desktop Entry / D-Bus Service files
  32. CVE-2026-97026flatpak: flatpak: World-writable temporary child repositories in system-helper cache path
  33. CVE-2026-97025flatpak: flatpak: World-readable OCI authentication token in system-helper cache path
  34. CVE-2026-97024flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc
  35. CVE-2026-97023flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin
  36. CVE-2026-96960dotnet: .NET: Denial of Service via asymmetric resource consumption
  37. CVE-2026-96959dotnet: .NET: Denial of Service via unthrottled resource allocation
  38. CVE-2026-96958dotnet: .NET Denial of Service Vulnerability
  39. CVE-2026-96957dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability
  40. CVE-2026-96956dotnet8.0: dotnet10.0: dotnet9.0: SQL Server Elevation of Privilege Vulnerability
  41. CVE-2026-96889librsvg: Use-after-free when XML includes have duplicated entities
  42. CVE-2026-96888bind: bind: Denial of Service via assertion failure during redirect processing
  43. CVE-2026-96869firefox: thunderbird: Information disclosure in the Networking component
  44. CVE-2026-96808flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer
  45. CVE-2026-96807flatpak: Flatpak: Low integrity or availability impact via symlink manipulation
  46. CVE-2026-96778pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow
  47. CVE-2026-96749pymongo: pymongo: Out-of-bounds write via integer overflow during BSON encoding
  48. CVE-2026-96675alsa-lib: alsa-lib: Denial of Service via malicious ALSA configuration file
  49. CVE-2026-96674alsa-lib: alsa-lib: Integer Overflow via Crafted Topology Files
  50. CVE-2026-96644pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser
CVE 2026 document archive — Page 51 | PulseLinux