CVE 2026 document archive · 70
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 70 / 264
- CVE-2026-90245kernel: fbdev: kyro: Validate overlay viewport coordinates
- CVE-2026-90244kernel: iommu/dma: Restore locking around msi_page_list
- CVE-2026-90243kernel: iommu/vt-d: Clear Present bit before tearing down copied context entry
- CVE-2026-90242kernel: iommu/vt-d: Fix iopf_refcount leak on RID domain replacement
- CVE-2026-90241kernel: iommu/vt-d: Tear down scalable-mode context on probe failure
- CVE-2026-90240kernel: iommu/vt-d: Flush context cache with correct SID when tearing down aliases
- CVE-2026-90239kernel: media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()
- CVE-2026-90238kernel: media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path
- CVE-2026-90237kernel: netfilter: nft_ct: move custom expectation support to helper
- CVE-2026-90236kernel: NFSD: Release the export reference when reaping open stateids
- CVE-2026-90235kernel: sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
- CVE-2026-90234kernel: NFS: Return a delegation the client fails to record
- CVE-2026-90233kernel: nvme-pci: release descriptor pools on probe failure
- CVE-2026-90232kernel: amt: Don't support cross-netns setup
- CVE-2026-90231kernel: apparmor: fix unconfined user namespace restriction forced stack
- CVE-2026-90230kernel: nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
- CVE-2026-90229kernel: nvme-apple: Destroy the admin queue on removal
- CVE-2026-90228kernel: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()
- CVE-2026-90227kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
- CVE-2026-90226kernel: nfc: llcp: avoid userspace overflow on invalid optlen
- CVE-2026-90225kernel: nfc: llcp: read llcp_sock->local under the socket lock in getsockopt
- CVE-2026-90224kernel: nfc: nci: fix double completion race in nci_data_exchange_complete
- CVE-2026-90223kernel: nfc: llcp: bound SNL TLV parsing to the skb and add length checks
- CVE-2026-90222kernel: nfc: pn533: hold a reference to the request skb during send_frame
- CVE-2026-90221kernel: nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
- CVE-2026-90220kernel: ALSA: seq: Don't leak the extension cell pointer in the bounce payload
- CVE-2026-90219kernel: RDMA/cxgb4: Free debugfs on registration failure
- CVE-2026-90218kernel: RDMA/cma: Fix WARNING in res_to_rt
- CVE-2026-90217kernel: bpf: Compare iterator types during state pruning
- CVE-2026-90216kernel: ubi: Fix rollback for explicit UBI device numbers
- CVE-2026-90215kernel: mtd: ubi: Release device reference on busy detach
- CVE-2026-90214kernel: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error
- CVE-2026-90213kernel: firewire: core: fix memory leak in error path of build_tree()
- CVE-2026-90212kernel: arm64/efi: Avoid voluntary preemption with efi_mm installed
- CVE-2026-90211kernel: bpf, s390: Clear fetch destination on faulting arena atomic
- CVE-2026-90210kernel: bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure
- CVE-2026-90209kernel: s390/debug: Fix deadlock during unregister
- CVE-2026-90208kernel: clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type
- CVE-2026-90207kernel: ALSA: seq: midi: Serialize input teardown with event_input
- CVE-2026-90206kernel: nvmet: fix max_qid race between configfs and controller allocation
- CVE-2026-90205kernel: ocfs2: validate orphan slot during inode read
- CVE-2026-90204kernel: ocfs2: validate DIO orphan slot during inode read
- CVE-2026-90203kernel: Squashfs: check block offset is not negative
- CVE-2026-90202kernel: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers
- CVE-2026-90201kernel: net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race
- CVE-2026-90200kernel: fs/ntfs3: fix integer overflow in MFT cluster validation
- CVE-2026-90199kernel: fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
- CVE-2026-90198kernel: ALSA: core: Fix use-after-free in snd_card_do_free()
- CVE-2026-90197kernel: HID: haptic: don't write an uninitialized value to unhandled usages
- CVE-2026-90196kernel: ASoC: SOF: validate topology volume range before allocation