CVE 2026 document archive · 71
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 71 / 264
- CVE-2026-90195kernel: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args
- CVE-2026-90194kernel: ACPI: scan: fix bus ID cleanup on device_add() failures
- CVE-2026-90193kernel: mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler
- CVE-2026-90192kernel: mailbox: qcom-cpucp: handle NULL data in send_data callback
- CVE-2026-90191kernel: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths
- CVE-2026-90190kernel: null_blk: use DEFINE_MUTEX for the file-scope mutex
- CVE-2026-90189kernel: null_blk: register configfs subsystem after creating default devices
- CVE-2026-90188kernel: null_blk: free global tag_set on init error path
- CVE-2026-90187kernel: null_blk: free zones array on device power-off
- CVE-2026-90186kernel: null_blk: reject per-device queue resize for shared tag set
- CVE-2026-90185kernel: null_blk: serialize configfs attribute stores with the lock
- CVE-2026-90184kernel: null_blk: serialize configfs attribute updates with device setup
- CVE-2026-90183kernel: blk-iolatency: clear delay state when freeing policy data
- CVE-2026-90182kernel: blk-iocost: clear delay state when freeing policy data
- CVE-2026-90181kernel: ublk: avoid teardown retry loop on xarray allocation failure
- CVE-2026-90180kernel: block: mtip32xx: synchronize ioctls with device removal
- CVE-2026-90179kernel: apparmor: fix deadlock in complain-mode change_hat
- CVE-2026-90178kernel: hwmon: (coretemp) Fix core_data leak on CPUs without PTS
- CVE-2026-90177kernel: bpf: Check pointer type for all atomic RMW paths
- CVE-2026-90176kernel: ksmbd: Do not skip lock checks for single-byte ranges
- CVE-2026-90175kernel: smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer
- CVE-2026-90174kernel: ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
- CVE-2026-90173kernel: smb: smbdirect: free completion queues with ib_free_cq()
- CVE-2026-90172kernel: smb: smbdirect: destroy QP before mem pools on accept failure
- CVE-2026-90171kernel: smb: smbdirect: release pending child sockets outside the handler lock
- CVE-2026-90170kernel: ksmbd: validate ipc response length before dereferencing its fields
- CVE-2026-90169kernel: ksmbd: free preauth sessions on connection teardown
- CVE-2026-90167kernel: ksmbd: serialize oplock close with pending break ownership
- CVE-2026-90166kernel: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
- CVE-2026-90165kernel: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
- CVE-2026-90164kernel: smb/server: abort initialization when proc setup fails
- CVE-2026-90163kernel: smb/server: call ksmbd_proc_cleanup() on module init failure
- CVE-2026-90162kernel: ksmbd: defer publishing granted locks to prevent UAF/double-free race
- CVE-2026-90161kernel: erofs: fix interlaced ztailpacking pclusters
- CVE-2026-90160kernel: lwt_bpf: Restore reserved headroom after xmit program
- CVE-2026-90159kernel: bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks
- CVE-2026-90158kernel: m68k: nfcon: Do not call console_is_registered() in nfcon_device()
- CVE-2026-90157kernel: bpf: Reject negative optlen in cgroup getsockopt hook
- CVE-2026-90156kernel: ksmbd: safely discard unregistered deferred locks
- CVE-2026-90155kernel: ksmbd: detach blocked lock requests before freeing
- CVE-2026-90154kernel: ksmbd: scope session state changes to bound connections
- CVE-2026-90153kernel: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
- CVE-2026-90152kernel: smb/server: fix session leak in ksmbd_session_register()
- CVE-2026-90151kernel: NFSv4: remove callback IDR entry on client allocation failure
- CVE-2026-90150kernel: pnfs/blocklayout: Fix device leaks on parse failure
- CVE-2026-90149kernel: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
- CVE-2026-90148kernel: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
- CVE-2026-90147kernel: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()
- CVE-2026-90146kernel: bpf, xdp: move offload check into dev_xdp_install()
- CVE-2026-90145kernel: hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed