CVE 2026 document archive · 61
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 61 / 264
- CVE-2026-92709rsyslog: rsyslog: Path traversal via unsanitized dynaFile templates
- CVE-2026-92707dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits
- CVE-2026-92599joi: joi: Denial of Service via `isoDate` validation regular expression
- CVE-2026-92574cri-o: CRI-O checkpoint restore bypasses destination security context
- CVE-2026-92543github.com/moby/moby: Docker Engine: Certificate verification bypass via flawed registry DNS check
- CVE-2026-92542github.com/moby/moby: Moby: Unauthorized traffic injection via forged VXLAN datagrams
- CVE-2026-92539grafana: Grafana: Unauthorized cross-organization user management via the SCIM API
- CVE-2026-92525kernel: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]
- CVE-2026-92524kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
- CVE-2026-92523kernel: RDMA/nldev: validate dynamic counter attribute length
- CVE-2026-92522kernel: ACPI: processor: validate MADT IOAPIC entry bounds
- CVE-2026-92521kernel: ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root
- CVE-2026-92520kernel: bpf: Zero queue and stack outputs on lock failure
- CVE-2026-92519kernel: riscv, bpf: Fix memory leak in bpf_jit_free
- CVE-2026-92518kernel: riscv, bpf: Fix kernel stack corruption in tailcall with CFI
- CVE-2026-92517kernel: bpf, riscv: Fix extable handling for arena load_acquire
- CVE-2026-92516kernel: bpf: Fix offset warn check for bpf_res_spin_lock
- CVE-2026-92515kernel: bpf: Preserve unique-field state across nested structs
- CVE-2026-92514kernel: RDMA/erdma: Fix CEQ tasklet use-after-free on removal
- CVE-2026-92513kernel: RDMA/mana_ib: drain QP references after partial table insertion
- CVE-2026-92512kernel: RDMA/core: Fix use after free in ib_query_qp()
- CVE-2026-92511kernel: RDMA/core: Fix potential use after free in ib_destroy_cq_user()
- CVE-2026-92510kernel: RDMA/core: Fix potential use after free in ib_destroy_srq_user()
- CVE-2026-92509kernel: RDMA/core: Fix potential use after free in counter_release()
- CVE-2026-92508kernel: RDMA/core: Fix potential use after free in ib_free_cq()
- CVE-2026-92507kernel: RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
- CVE-2026-92506kernel: firmware: arm_scmi: Fix requested device removal race
- CVE-2026-92505kernel: iommu/amd: Fix undefined behavior in devid_write debugfs function
- CVE-2026-92504kernel: thermal: intel: int3400: clean up ODVP on probe failures
- CVE-2026-92503kernel: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
- CVE-2026-92502kernel: ext4: clear stale xarray tags on folios skipped during writeback
- CVE-2026-92501kernel: ext4: drain in-flight DIO before buffered write fallback
- CVE-2026-92500kernel: ext4: use fsdata to track inline data write state and fix race
- CVE-2026-92499kernel: ext4: validate readdir offset before accessing dirent
- CVE-2026-92498kernel: wifi: ath6kl: avoid buffer overreads in WMI event handlers
- CVE-2026-92497kernel: wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()
- CVE-2026-92496kernel: wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()
- CVE-2026-92495kernel: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap
- CVE-2026-92494kernel: ext4: fix buffer_head leak in ext4_init_orphan_info
- CVE-2026-92493kernel: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active
- CVE-2026-92492kernel: cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks
- CVE-2026-92491kernel: firmware: arm_scmi: Roll back partial protocol table registration
- CVE-2026-92490kernel: firmware: arm_scmi: Unrequest devices if driver registration fails
- CVE-2026-92489kernel: xfrm: Fix skb double-free in xfrm_dev_direct_output()
- CVE-2026-92488kernel: RDMA/erdma: complete object teardown when the destroy command fails
- CVE-2026-92487kernel: exfat: fix valid_size extension over a shared writable mapping
- CVE-2026-92486kernel: bpf: Fix CFI mismatch in task work callback
- CVE-2026-92485kernel: bpf: Fix WARNING in bpf_tracing_link_release
- CVE-2026-92484kernel: cxl/region: Fix use-after-free in find_pos_and_ways() error path
- CVE-2026-92483kernel: liveupdate: Remember FLB retrieve() status