PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 66

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 66 / 264

  1. CVE-2026-90802binutils: GNU Binutils: Denial of service via null pointer dereference in ld component
  2. CVE-2026-90801binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation
  3. CVE-2026-90781alsa-lib: alsa-lib: Denial of Service via off-by-one stack buffer overflow
  4. CVE-2026-90771joi: joi: Prototype Pollution via custom messages
  5. CVE-2026-90711proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
  6. CVE-2026-90698memcached: memcached: Denial of Service due to out-of-bounds read
  7. CVE-2026-90678haproxy: HAProxy: HTTP Request Smuggling via HTTP/3 Multiplexer Desynchronization
  8. CVE-2026-90616flatpak: Flatpak: Arbitrary code execution via missing symlink protection
  9. CVE-2026-90560com.github.luben/zstd-jni: zstd-jni: Denial of Service via out-of-bounds read in ZstdDictDecompress
  10. CVE-2026-90463sssd: Local OOB Read in NSS Service Request Parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)
  11. CVE-2026-90462sssd: SSSD: Fail-open in LDAP ppolicy access check allows continued authorization
  12. CVE-2026-90435kernel: RDMA/mlx5: Fix integer overflow of user QP buffer size
  13. CVE-2026-90434kernel: isofs: release zisofs block pointer buffer head
  14. CVE-2026-90433kernel: spi: oc-tiny: switch to managed controller allocation
  15. CVE-2026-90432kernel: sched_ext: Abort directly from the hardlockup handler
  16. CVE-2026-90431kernel: remoteproc: Prevent crash handling to race with rproc_del()
  17. CVE-2026-90430kernel: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized
  18. CVE-2026-90429kernel: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init
  19. CVE-2026-90428kernel: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs
  20. CVE-2026-90427kernel: iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
  21. CVE-2026-90426kernel: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs
  22. CVE-2026-90425kernel: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
  23. CVE-2026-90424kernel: iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path
  24. CVE-2026-90423kernel: RDMA/rxe: Fix UAF in ODP init error-handling path
  25. CVE-2026-90422kernel: clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path
  26. CVE-2026-90421kernel: PCI: Fix UAF when probe runs concurrent to dyn ID removal
  27. CVE-2026-90420kernel: nilfs2: fix infinite loop in nilfs_clean_segments()
  28. CVE-2026-90419kernel: nilfs2: prevent out-of-bounds read in super root block parsing
  29. CVE-2026-90418kernel: nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
  30. CVE-2026-90417kernel: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()
  31. CVE-2026-90416kernel: RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs
  32. CVE-2026-90415kernel: RDMA/cxgb4: free STAG index when TPT entry write fails
  33. CVE-2026-90414kernel: IB/isert: reject PDUs declaring more data than was received
  34. CVE-2026-90413kernel: IB/isert: reject login PDUs declaring more data than was received
  35. CVE-2026-90412kernel: nvmet: fix return status of RMI log page on allocation failure
  36. CVE-2026-90411kernel: nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request
  37. CVE-2026-90410kernel: spi: davinci: switch to managed controller allocation
  38. CVE-2026-90409kernel: drm/panthor: Add vm_bind region with kbo range overlap check
  39. CVE-2026-90408kernel: wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
  40. CVE-2026-90407kernel: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
  41. CVE-2026-90406kernel: media: qcom: iris: handle runtime PM resume failure in core deinit
  42. CVE-2026-90405kernel: media: stm32: dcmi: fix some error handling bugs in probe()
  43. CVE-2026-90404kernel: platform/chrome: cros_ec_debugfs: Unregister panic notifier
  44. CVE-2026-90403kernel: wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
  45. CVE-2026-90402kernel: bus: mhi: host: Fix controller cleanup on EDL sysfs failure
  46. CVE-2026-90401kernel: md: remove REQ_NOWAIT support from raid1/10/456
  47. CVE-2026-90400kernel: md: recheck spare changes before starting sync
  48. CVE-2026-90399kernel: wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()
  49. CVE-2026-90398kernel: wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
  50. CVE-2026-90397kernel: firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published
CVE 2026 document archive — Page 66 | PulseLinux