CVE 2026 document archive · 59
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 59 / 264
- CVE-2026-93122kernel: usb: gadget: uac: validate rate list length before storing
- CVE-2026-93121kernel: usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths
- CVE-2026-93120kernel: usb: gadget: configfs: fix out-of-bounds read of qw_sign
- CVE-2026-93119kernel: usb: ljca: bound bank_num in ljca_enumerate_gpio()
- CVE-2026-93118kernel: usb: gadget: aspeed_udc: check endpoint DMA allocation
- CVE-2026-93117kernel: usb: fix UAF when probe runs concurrent to dyn ID removal
- CVE-2026-93116kernel: platform/x86: asus-wmi: fix resource leaks on probe failure
- CVE-2026-93115kernel: platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL
- CVE-2026-93114kernel: platform/surface: acpi-notify: Check ACPI companion before use
- CVE-2026-93113kernel: clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK
- CVE-2026-93112kernel: bpf: Require a BPF cpumask for bpf_cpumask_populate()
- CVE-2026-93111kernel: bpf: Mark tracing_multi trampolines as ftrace managed
- CVE-2026-93110kernel: RDMA/core: Wait for RCU callbacks before unloading ib_core
- CVE-2026-93109kernel: RDMA/mlx5: Drain RCU callbacks during module teardown
- CVE-2026-93108kernel: RDMA/ipoib: Drain RCU callbacks during module teardown
- CVE-2026-93107kernel: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state
- CVE-2026-93106kernel: crash_dump: release keyring reference at the correct time
- CVE-2026-93105kernel: esp: do not unref managed frag pages in esp_ssg_unref()
- CVE-2026-93104kernel: RDMA/rvt: Return NULL after port allocation failure
- CVE-2026-93103kernel: RDMA/hfi1: Preserve unit 0 on allocation failure
- CVE-2026-93102kernel: RDMA/hfi1: Free RX data on late probe failure
- CVE-2026-93101kernel: media: v4l2-async: Unregister sub-device if asc_list is empty
- CVE-2026-93100kernel: fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()
- CVE-2026-93099kernel: fs/resctrl: Fix UAF from worker threads when domains are removed
- CVE-2026-93098kernel: rpmsg: glink: fix deadlock in endpoint destroy during driver detach
- CVE-2026-93097kernel: cxl/mbox: Break poison list loop on an empty payload
- CVE-2026-93096kernel: cxl/features: Serialize multi-part Get/Set Feature transfers
- CVE-2026-93095kernel: hfsplus: validate thread record before delete key rebuild
- CVE-2026-93094kernel: wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback
- CVE-2026-93093kernel: firmware: arm_scmi: Publish channel state before callbacks
- CVE-2026-93092kernel: firmware: arm_scmi: Unregister device notifier before IDR teardown
- CVE-2026-93091kernel: firmware: arm_scmi: Quiesce notifications before teardown
- CVE-2026-93090kernel: firmware: arm_scmi: Clean up channels on setup failure
- CVE-2026-93089kernel: firmware: arm_scmi: Free transport channel on IDR failure
- CVE-2026-93086kernel: firmware: arm_scmi: Avoid IDR updates while cleaning channels
- CVE-2026-93085kernel: firmware: arm_scmi: Reject out of range DT protocol IDs
- CVE-2026-93084kernel: firmware: arm_scmi: Drop handle on protocol bind failures
- CVE-2026-93083kernel: firmware: arm_scmi: Unwind TX receiver mailbox setup failure
- CVE-2026-93082kernel: firmware: arm_scmi: Unwind P2A receiver mailbox setup failure
- CVE-2026-93081kernel: firmware: arm_scmi: Fix SCMI device destroy lifetimes
- CVE-2026-93080kernel: firmware: arm_scmi: Fix transport device teardown lookup
- CVE-2026-93079kernel: cxl/features: Reject Get Feature count larger than the output buffer
- CVE-2026-93078kernel: cxl/features: Reject Set Features output buffer smaller than the header
- CVE-2026-93077kernel: cxl/features: Clamp Get Feature output size to the remaining buffer
- CVE-2026-93076kernel: dax/fsdev: clear vmemmap_shift when binding static pgmap
- CVE-2026-93075kernel: dax/fsdev: clear pgmap ops and owner on unbind
- CVE-2026-93074kernel: dax/fsdev: use __va(phys) for kaddr in direct_access
- CVE-2026-93073kernel: dax: read holder_ops once in dax_holder_notify_failure()
- CVE-2026-93072kernel: irqchip/renesas-irqc: Fix generic interrupt chip leak on remove
- CVE-2026-93071kernel: media: bcm2835-unicam: Fix asc leaked in error/remove path