CVE 2026 document archive · 57
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 57 / 264
- CVE-2026-93227kernel: mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn
- CVE-2026-93226kernel: ipv6: use RCU iterator to dump route exceptions
- CVE-2026-93225kernel: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
- CVE-2026-93224kernel: svcrdma: Fix unmatched rn_unregister on failed accept
- CVE-2026-93223kernel: staging: media: tegra-video: fix of_node_put() on VIP parse errors
- CVE-2026-93222kernel: signal: avoid shared siginfo namespace rewrites
- CVE-2026-93221kernel: nfsd: convert nfsd_net boolean flags to unsigned long flags word
- CVE-2026-93217kernel: mm/madvise: skip device-private PMDs in cold and pageout walks
- CVE-2026-93216kernel: mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()
- CVE-2026-93213kernel: of: fix out-of-bounds read in of_alias_scan() stem parser
- CVE-2026-93212kernel: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
- CVE-2026-93211kernel: nfsd: initialize DRC hash table before registering shrinker
- CVE-2026-93210kernel: smb: client: harden DFS cache against invalid target hints
- CVE-2026-93209kernel: Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
- CVE-2026-93208kernel: kasan: fix cache shrink race with CPU hotplug
- CVE-2026-93207kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
- CVE-2026-93206kernel: PCI/proc: Use file_ns_capable() when checking config space read access
- CVE-2026-93205kernel: iommu/arm-smmu-v3: Manage teardown with devm
- CVE-2026-93204kernel: batman-adv: dat: atomically update mac addresses
- CVE-2026-93203kernel: batman-adv: bla: avoid CRC corruption due to parallel claim add
- CVE-2026-93202kernel: i3c: master: Fix recursive locking during device registration
- CVE-2026-93201kernel: dm-pcache: validate seg_id fields from persistent memory
- CVE-2026-93200kernel: i3c: master: Fix use-after-free of master->this
- CVE-2026-93199kernel: i3c: master: Do not treat master device as a duplicate target
- CVE-2026-93198kernel: dm-pcache: validate the persisted dirty_tail chain at load
- CVE-2026-93197kernel: memcg: move LRU size accounting on reparenting instead of copying it
- CVE-2026-93196kernel: nvdimm: virtio_pmem: refcount requests for token lifetime
- CVE-2026-93195kernel: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel
- CVE-2026-93194kernel: drm/rockchip: dw_dp: Release core resources
- CVE-2026-93193kernel: drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup
- CVE-2026-93192kernel: drm/v3d: Clear queue->active_job when v3d_fence_create() fails
- CVE-2026-93191kernel: smack: fix incorrect task context in smack_msg_queue_msgrcv
- CVE-2026-93190kernel: platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
- CVE-2026-93189kernel: HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
- CVE-2026-93188kernel: HID: roccat: bound device-supplied profile index
- CVE-2026-93187kernel: ASoC: SOF: ipc4-topology: Return error for invalid number of formats
- CVE-2026-93186kernel: cxl/mbox: Clamp mailbox output allocation to the payload size
- CVE-2026-93185kernel: ASoC: rt700-sdw: always drain jack work on remove
- CVE-2026-93184kernel: ASoC: fsl_audmix: rework runtime PM handling in probe
- CVE-2026-93183kernel: drm/lima: call drm_mm_init() with a valid allocation range
- CVE-2026-93182kernel: sched/fair: Fix overflow in update_tg_cfs_runnable()
- CVE-2026-93181kernel: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering
- CVE-2026-93180kernel: drm/panthor: Fix NPD issue on partial unmap of an evicted BO
- CVE-2026-93179kernel: drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
- CVE-2026-93178kernel: drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
- CVE-2026-93177kernel: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
- CVE-2026-93176kernel: drm/amd/display: Fix dangling pointer in plane reset function
- CVE-2026-93175kernel: drm/amd/display: Fix dangling pointer in CRTC reset function
- CVE-2026-93174kernel: bpf: Copy per-CPU map value padding in copy_map_value_long()
- CVE-2026-93173kernel: bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks