CVE 2026 document archive · 67
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 67 / 264
- CVE-2026-90396kernel: block: fix dio leak on metadata mapping error
- CVE-2026-90395kernel: power: supply: isp1704_charger: cancel work on remove
- CVE-2026-90394kernel: power: supply: sc2731_charger: cancel work on remove
- CVE-2026-90393kernel: bpf: Fix potential UAF in bpf_netns_link_update_prog
- CVE-2026-90392kernel: bpf: Fix potential UAF when reading bpf link info
- CVE-2026-90391kernel: lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone
- CVE-2026-90390kernel: md/bitmap: resume array on backlog_store() error path
- CVE-2026-90389kernel: md: scope memalloc_noio to allocation critical sections
- CVE-2026-90388kernel: iommu/dma: Check atomic pool allocation result directly
- CVE-2026-90387kernel: swiotlb: Preserve allocation virtual address for dynamic pools
- CVE-2026-90386kernel: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices
- CVE-2026-90385kernel: md/raid1: create serial pool adding rdev to array with serialize_policy=1
- CVE-2026-90384kernel: iomap: release the folio batch on iomap callback failures
- CVE-2026-90383kernel: misc: sgi-gru: remove interrupt-context page-table walks
- CVE-2026-90382kernel: wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
- CVE-2026-90381kernel: wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
- CVE-2026-90380kernel: wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
- CVE-2026-90379kernel: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
- CVE-2026-90378kernel: wifi: mt76: mt792x: Fix memory leak in SDIO TX path
- CVE-2026-90377kernel: wifi: mt76: fix RX data queuing of RRO 3.0
- CVE-2026-90376kernel: wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP
- CVE-2026-90375kernel: wifi: mt76: fix non-AQL packet accounting for MLO stations
- CVE-2026-90374kernel: wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]
- CVE-2026-90373kernel: wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear
- CVE-2026-90372kernel: wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
- CVE-2026-90371kernel: wifi: mt76: fix RXDMAD_C buffer recycling race
- CVE-2026-90370kernel: wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
- CVE-2026-90369kernel: wifi: mt76: fix out-of-bounds access in mmio copy helpers
- CVE-2026-90368kernel: wifi: mt76: mt7915: unwind state on add_interface failure
- CVE-2026-90367kernel: wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
- CVE-2026-90366kernel: wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV
- CVE-2026-90365kernel: wifi: mt76: cancel reset and rc work on device unregister
- CVE-2026-90364kernel: ACPI: processor: Unregister cpufreq notifier on init failure
- CVE-2026-90363kernel: drm/msm: don't tear down KMS twice when KMS init fails
- CVE-2026-90362kernel: drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
- CVE-2026-90361kernel: wifi: ath11k: fix leak in ath11k_service_ready_ext_event()
- CVE-2026-90360kernel: regulator: core: use system_freezable_wq for init complete work
- CVE-2026-90359kernel: bpf: Reject >8 byte return values on return-reading trampoline paths
- CVE-2026-90358kernel: bpf, x86: Fix trampoline stack size for 128-bit arguments
- CVE-2026-90357kernel: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
- CVE-2026-90356kernel: wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset
- CVE-2026-90355kernel: wifi: mt76: mt7996: clear stale link state on full reset
- CVE-2026-90354kernel: wifi: mt76: mt7915: fix double hif2 init on the non-WED path
- CVE-2026-90353kernel: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
- CVE-2026-90352kernel: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
- CVE-2026-90351kernel: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
- CVE-2026-90350kernel: wifi: mt76: reject out-of-range link ids in mt76_vif_link()
- CVE-2026-90349kernel: wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx()
- CVE-2026-90348kernel: wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump
- CVE-2026-90347kernel: arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry