CVE 2026 document archive · 68
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 68 / 264
- CVE-2026-90346kernel: wifi: nl80211: clean up color-change beacon data on errors
- CVE-2026-90345kernel: wifi: brcmfmac: fix P2P action frame handling without device vif
- CVE-2026-90344kernel: wifi: mac80211: disconnect on CSA to channel 0
- CVE-2026-90343kernel: wifi: cfg80211: stop PMSR before P2P and NAN teardown
- CVE-2026-90342kernel: bpf: Fix mmap_lock deadlock on arena lock failure
- CVE-2026-90341kernel: firmware: coreboot: Validate table bounds
- CVE-2026-90340kernel: pinctrl: generic: free maps on pinctrl_generic_to_map() failure
- CVE-2026-90339kernel: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace
- CVE-2026-90338kernel: serial: amba-pl011: keep console clock enabled for atomic writes
- CVE-2026-90337kernel: serial: core: do fallible allocations before the console can be registered
- CVE-2026-90336kernel: serial: core: clear freed pointers on uart_register_driver() failure
- CVE-2026-90335kernel: tty: skip cdev_del() when no cdev is registered
- CVE-2026-90334kernel: tty: clear cdev pointer after cdev_add() failure
- CVE-2026-90333kernel: dm-integrity: replace forgeable discard filler with a keyed sector marker
- CVE-2026-90332kernel: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
- CVE-2026-90331kernel: HID: asus: refactor the two workqueues and init sequence
- CVE-2026-90330kernel: HID: logitech-hidpp: Fix FF device cleanup on init failure
- CVE-2026-90329kernel: HID: synchronize input before cleaning up a failed probe
- CVE-2026-90328kernel: HID: steam: Reject short reads
- CVE-2026-90327kernel: phonet: pep: do not write beyond optlen in getsockopt
- CVE-2026-90326kernel: blk-cgroup: fix race between policy activation and blkg destruction
- CVE-2026-90325kernel: blk-cgroup: skip dying blkg in blkcg_activate_policy()
- CVE-2026-90324kernel: ublk: check import_ubuf() return value
- CVE-2026-90323kernel: ublk: validate auto buf reg before taking uring_cmd
- CVE-2026-90322kernel: ocfs2/cluster: keep heartbeat local node stable
- CVE-2026-90321kernel: ocfs2: validate inline xattrs during inode block validation
- CVE-2026-90320kernel: ocfs2: validate external xattr entries when reading metadata
- CVE-2026-90319kernel: rapidio: clear mport->net when rio_add_net() fails
- CVE-2026-90318kernel: fat: release buffer head after rebuilding parent
- CVE-2026-90317kernel: bpf: Invalidate RCU pointers after final spin unlock
- CVE-2026-90316kernel: drm/omap: dsi: Do not copy isr table
- CVE-2026-90315kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
- CVE-2026-90314kernel: remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()
- CVE-2026-90313kernel: bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
- CVE-2026-90312kernel: bpf: Check load-acquire src ptr type before the load
- CVE-2026-90311kernel: thermal: hwmon: Remove hwmon class device along with its parent
- CVE-2026-90309kernel: RDMA/erdma: Hold CQ references when processing EQ events
- CVE-2026-90308kernel: RDMA/erdma: Hold QP references for AE and CM processing
- CVE-2026-90307kernel: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
- CVE-2026-90306kernel: ARM: 9481/2: breakpoint: CFI breakpoints only on demand
- CVE-2026-90305kernel: ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK
- CVE-2026-90304kernel: ARM: 9484/1: enable interrupts when unhandled user faults are triggered
- CVE-2026-90303kernel: ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults
- CVE-2026-90302kernel: ocfs2: synchronize heartbeat callbacks with o2net teardown
- CVE-2026-90301kernel: ocfs2: o2hb: quiesce negotiate handlers and timeout work
- CVE-2026-90300kernel: bpf: Clear buf on error in __bpf_get_task_stack
- CVE-2026-90299kernel: bpf: Fix sleepable check for tracing/lsm prog
- CVE-2026-90298kernel: drm/sun4i: tcon: Drop TCON TOP device reference
- CVE-2026-90297kernel: drm/sun4i: crtc: Propagate layer initialization error
- CVE-2026-90296kernel: cpufreq: imx6q: fix devres accumulation across driver rebind