CVE 2026 document archive · 54
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 54 / 264
- CVE-2026-94114org.apache.bcel/bcel: Apache Commons BCEL: Security verification bypass via unvalidated class caching
- CVE-2026-93994org.apache.sshd/sshd-core: Apache MINA SSHD: Authentication bypass via duplicate public key presentation
- CVE-2026-93990expat: Expat: XML Injection via Malformed UTF-16 Input
- CVE-2026-93834qemu-kvm: 9pfs: use-after-free race in Tlcreate/Twalk allows VM guest escape
- CVE-2026-93830kernel: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask
- CVE-2026-93829kernel: smb: client: fix races in cifsd thread creation
- CVE-2026-93828kernel: exfat: fix handling of damaged volume in exfat_create_upcase_table()
- CVE-2026-93827kernel: virtio-fs: avoid double-free on failed queue setup
- CVE-2026-93826kernel: HID: hidpp: fix potential UAF in hidpp_connect_event()
- CVE-2026-93825kernel: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
- CVE-2026-93824kernel: tls: reject the combination of TLS and sockmap
- CVE-2026-93823kernel: drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
- CVE-2026-93822kernel: PCI: iproc: Protect root bus removal with rescan lock
- CVE-2026-93821kernel: PCI: altera: Protect root bus removal with rescan lock
- CVE-2026-93820kernel: PCI: rockchip: Protect root bus removal with rescan lock
- CVE-2026-93819kernel: PCI: mediatek: Protect root bus removal with rescan lock
- CVE-2026-93818kernel: PCI: plda: Protect root bus removal with rescan lock
- CVE-2026-93817kernel: perf: Fix addr_filter_ranges lifetime
- CVE-2026-93816kernel: f2fs: validate inline dentry name lengths before conversion
- CVE-2026-93815kernel: net: au1000: move free_irq out of the close-time spinlocked section
- CVE-2026-93814kernel: spi: core: Abort active target transfer on controller suspend
- CVE-2026-93813kernel: btrfs: tree-checker: validate INODE_REF's namelen
- CVE-2026-93812kernel: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
- CVE-2026-93811kernel: ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling
- CVE-2026-93810kernel: cachefiles: Fix double fput
- CVE-2026-93809kernel: drm/amdgpu: flush pending RCU callbacks on module unload
- CVE-2026-93808kernel: ALSA: usb-audio: caiaq: validate EP1 reply lengths
- CVE-2026-93807kernel: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
- CVE-2026-93806kernel: wifi: cfg80211: validate assoc response length before status and IE access
- CVE-2026-93805kernel: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
- CVE-2026-93804kernel: wifi: mac80211: ibss: wait for in-flight TX on disconnect
- CVE-2026-93803kernel: wifi: libipw: fix key index receive bound checks
- CVE-2026-93802kernel: wifi: rsi: validate beacon length before fixed buffer copy
- CVE-2026-93801kernel: smb/client: zero-initialize stack-allocated cifs_open_info_data
- CVE-2026-93800kernel: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
- CVE-2026-93799kernel: wifi: iwlwifi: mvm: validate sta_id in BA window status notif
- CVE-2026-93798kernel: btrfs: fix reloc root cleanup in merge_reloc_roots()
- CVE-2026-93796kernel: wifi: iwlwifi: pcie: null RX pointers after free
- CVE-2026-93795kernel: blk-cgroup: fix leaks and online flag on radix_tree_insert failure
- CVE-2026-93794kernel: smb/client: flush dirty data before punching a hole
- CVE-2026-93793kernel: wifi: iwlwifi: mvm: validate TX_CMD response layout
- CVE-2026-93791kernel: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
- CVE-2026-93790kernel: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
- CVE-2026-93789kernel: wifi: iwlwifi: bound aligned TLV advance in FW parser
- CVE-2026-93788kernel: wifi: iwlwifi: acpi: validate WGDS table revision index
- CVE-2026-93787kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir
- CVE-2026-93786kernel: ksmbd: preserve VFS inherited POSIX ACL mask
- CVE-2026-93785kernel: cifs: validate idmap key payload length
- CVE-2026-93784kernel: wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
- CVE-2026-93783kernel: Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame