PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 60

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 60 / 264

  1. CVE-2026-93070kernel: media: ipu6: Do not free aux device pdata after init
  2. CVE-2026-93069kernel: OPP: Fix cleanup ordering
  3. CVE-2026-93068kernel: drm/amd/display: Fix DM I2C teardown race
  4. CVE-2026-93067kernel: drm/bridge: tc358767: clamp the reported AUX read size to the request
  5. CVE-2026-93066kernel: x86/mm/pat: Take cpa_lock around large-page collapse
  6. CVE-2026-93065kernel: wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs
  7. CVE-2026-93064kernel: wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser
  8. CVE-2026-93063kernel: wifi: iwlwifi: mei: check SAP message length before reading it
  9. CVE-2026-93062kernel: wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments
  10. CVE-2026-93061kernel: gpu: host1x: Avoid stack over-read in debug output helpers
  11. CVE-2026-93060kernel: drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()
  12. CVE-2026-93059kernel: drm/msm: Fix task_struct reference leak in recover_worker
  13. CVE-2026-93058kernel: drm/msm: Only fini scheduler after successful init
  14. CVE-2026-93057kernel: scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context
  15. CVE-2026-93056kernel: usb: gadget: f_uac1_legacy: remove broken string configfs attributes
  16. CVE-2026-93055kernel: UDF symlink pathComponent header OOB read
  17. CVE-2026-93054kernel: uio: Fix stale info pointer in failed registration path
  18. CVE-2026-93053kernel: speakup: keyhelp: guard letter_offsets possible out-of-range indexing
  19. CVE-2026-93052kernel: misc: bcm-vk: Use acquire/release for msgq_inited
  20. CVE-2026-93051kernel: misc: ad525x_dpot: use driver core groups for sysfs files
  21. CVE-2026-93050kernel: ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove
  22. CVE-2026-93049kernel: mtd: mtdswap: Avoid freeing registered blktrans device twice
  23. CVE-2026-93048kernel: mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()
  24. CVE-2026-93047kernel: drm/v3d: Associate BOs with every job that accesses them
  25. CVE-2026-93046kernel: software node: Fix software_node_get_reference_args() with index -1
  26. CVE-2026-93045kernel: bpf: Reject arena frees below the arena base
  27. CVE-2026-93044kernel: bpf: Disallow interpreter fallback for arena-related insns
  28. CVE-2026-93043kernel: bpf: Disallow interpreter fallback for gotox insn
  29. CVE-2026-93042kernel: dmaengine: dw-edma: Terminate all descriptors without callbacks
  30. CVE-2026-93041kernel: dmaengine: dw-edma: Serialize abort state updates
  31. CVE-2026-93040kernel: dmaengine: dw-edma: Serialize channel state checks
  32. CVE-2026-93039kernel: ASoC: meson: Keep link pointers valid on realloc failure
  33. CVE-2026-93038kernel: iio: dac: ad5686: missing NULL check on match data
  34. CVE-2026-93037kernel: RDMA/hfi1: Propagate sdma_txinit_ahg() errors
  35. CVE-2026-93011dnsmasq: dnsmasq: heap out-of-bounds write in DNSSEC validator via to_wire/from_wire transforms
  36. CVE-2026-93010dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
  37. CVE-2026-93009dnsmasq: dnsmasq: heap out-of-bounds read in DHCPv6 option 39 FQDN decoder
  38. CVE-2026-93008dnsmasq: dnsmasq: out-of-bailiwick cache injection through CNAME chase in split-DNS configurations
  39. CVE-2026-93007dnsmasq: dnsmasq: TCP/53 child-slot exhaustion starves DNSSEC validation
  40. CVE-2026-93006dnsmasq: dnsmasq: TFTP prefetch cache keyed on stale heap pointer serves wrong file content
  41. CVE-2026-92925redis: Redis: Out-of-bounds read via crafted cluster bus packets
  42. CVE-2026-92842php: php: Information disclosure via out-of-bounds read in stream filters
  43. CVE-2026-92824libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
  44. CVE-2026-92823libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed YAML
  45. CVE-2026-92822libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd YAML
  46. CVE-2026-92821sssd: SSSD: Access control bypass via premature LDAP access rule evaluation
  47. CVE-2026-92817Ignition: Ignition: Arbitrary code execution via improper session privilege validation
  48. CVE-2026-92768cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments
  49. CVE-2026-92747cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list
  50. CVE-2026-92745cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments
CVE 2026 document archive — Page 60 | PulseLinux