PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 69

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 69 / 264

  1. CVE-2026-90295kernel: cpufreq: imx6q: fix out-of-bounds write when probed more than once
  2. CVE-2026-90294kernel: IB/isert: delay the final Login Response until the session is registered
  3. CVE-2026-90293kernel: IB/isert: post the full-feature receive buffers after session registration
  4. CVE-2026-90292kernel: RDMA/siw: Fix use-after-free in siw_accept()
  5. CVE-2026-90291kernel: module/dups: Fix use-after-free in kmod_dup_req lifetime handling
  6. CVE-2026-90290kernel: arm64: hibernate: Restore DAIF state on error
  7. CVE-2026-90289kernel: drm/amd/display: Resize MST HDCP per-connector arrays to 32
  8. CVE-2026-90288kernel: phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure
  9. CVE-2026-90287kernel: phy: sunplus: fix error handling in sp_uphy_init()
  10. CVE-2026-90286kernel: drm/amdgpu/gfx6: Use PFP on the compute queues too
  11. CVE-2026-90285kernel: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
  12. CVE-2026-90284kernel: firmware_loader: do not queue completed sysfs fallback requests
  13. CVE-2026-90283kernel: hugetlbfs: release subpool on fill_super failure
  14. CVE-2026-90282kernel: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend
  15. CVE-2026-90281kernel: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend
  16. CVE-2026-90280kernel: phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend
  17. CVE-2026-90279kernel: md/raid5: round bitmap stripes with sector division
  18. CVE-2026-90278kernel: md: wait for behind writes before destroying bitmap
  19. CVE-2026-90277kernel: md/md-llbitmap: prevent create failure bitmap UAF
  20. CVE-2026-90276kernel: md/md-llbitmap: stop daemon timer rearm on destroy
  21. CVE-2026-90275kernel: md/raid1: don't set array_frozen in raid1_takeover()
  22. CVE-2026-90274kernel: coresight: etm4x: fix underflow for usage of (nrseqstate - 1)
  23. CVE-2026-90273kernel: coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
  24. CVE-2026-90272kernel: perf: arm_pmuv3: Zero initialize hw_id branch stack field
  25. CVE-2026-90271kernel: arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt
  26. CVE-2026-90270kernel: arm_mpam: Disable driver unbind to avoid UAF
  27. CVE-2026-90269kernel: bpf: Reject load-acquire from pointers requiring fault protection
  28. CVE-2026-90268kernel: scsi: sd: Fix error handling in sd_probe() after large pool creation failure
  29. CVE-2026-90267kernel: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails
  30. CVE-2026-90266kernel: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge
  31. CVE-2026-90265kernel: btrfs: defrag: fix deadlock between defrag and delalloc space reservation
  32. CVE-2026-90264kernel: btrfs: always wait for ordered extents to avoid OE races
  33. CVE-2026-90263kernel: btrfs: check if root is readonly when setting posix acl
  34. CVE-2026-90262kernel: btrfs: retry verity reads for not-uptodate Merkle folios
  35. CVE-2026-90261kernel: btrfs: zoned: flush active metadata block group at btree_writepages() start
  36. CVE-2026-90260kernel: btrfs: zoned: don't clobber the extent buffer when zeroing it out
  37. CVE-2026-90259kernel: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
  38. CVE-2026-90258kernel: pinctrl: airoha: add missed IRQ resource helpers
  39. CVE-2026-90257kernel: Bluetooth: virtio_bt: avoid OOB read of build info string
  40. CVE-2026-90256kernel: Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
  41. CVE-2026-90255kernel: Bluetooth: hci_conn: fix the SCO setup context lifetime
  42. CVE-2026-90254kernel: Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths
  43. CVE-2026-90253kernel: Bluetooth: MGMT: free the mesh send cancel command when it is cancelled
  44. CVE-2026-90252kernel: Bluetooth: MGMT: free the HCI command when it is cancelled
  45. CVE-2026-90251kernel: Bluetooth: MSFT: validate evt_prefix_len against the response length
  46. CVE-2026-90250kernel: bpf, cgroup: Fix storage null-ptr-deref after replacing prog
  47. CVE-2026-90249kernel: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes
  48. CVE-2026-90248kernel: net/sched: cls_api: fix teardown of an adopted proto on insert-race loss
  49. CVE-2026-90247kernel: bpf: Fix mmap_lock leak in irq_work path
  50. CVE-2026-90246kernel: apparmor: fix integer overflow in verify_tags() bounds check