CVE 2026 document archive · 72
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 72 / 264
- CVE-2026-90144kernel: dpll: fix NULL deref in dpll_device_ops() during teardown race
- CVE-2026-90143kernel: net: kcm: Hold RCU read lock while running BPF parser
- CVE-2026-90142kernel: virtio_net: Fix resize of the RX ring
- CVE-2026-90141kernel: ipvs: fix integer overflow in ftp helper port/address parsing
- CVE-2026-90140kernel: cuse: wait for pending RCU callbacks on module exit
- CVE-2026-90139kernel: fuse: check for NULL root inode in fuse_fill_super_submount
- CVE-2026-90138kernel: vsock: don't check the listener's sk_err in vsock_accept()
- CVE-2026-90137kernel: platform/x86: hp-bioscfg: fix password encoding bounds check
- CVE-2026-90136kernel: platform/x86/amd/hsmp: Reject negative power cap writes in hwmon
- CVE-2026-90135kernel: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()
- CVE-2026-90134kernel: ntfs: fix kmap_local_page() usage in compress
- CVE-2026-90133kernel: ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()
- CVE-2026-90132kernel: ntfs: reject unprivileged writes to reserved $LX* xattrs
- CVE-2026-90131kernel: ntfs: serialize resident iomap reads with mrec_lock
- CVE-2026-90130kernel: vdpa_sim: fix cleanup after worker creation failure
- CVE-2026-90129kernel: virtio_balloon: quiesce balloon work before device shutdown
- CVE-2026-90128kernel: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path
- CVE-2026-90127kernel: virtio: rtc: time out alarm requests
- CVE-2026-90126kernel: rtc: pcf8563: fix clock provider leak on unbind
- CVE-2026-90125kernel: smb: client: fix request buffer leak in smb2_new_read_req()
- CVE-2026-90124kernel: irqchip/renesas-rzg2l: Fix loss of interrupt
- CVE-2026-90123kernel: irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback
- CVE-2026-90122kernel: clk: visconti: Make sure clk_init_data is fully initialized
- CVE-2026-90121kernel: irqchip/gic-v5: Clear per-CPU IRS data on teardown
- CVE-2026-90120kernel: irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
- CVE-2026-90119kernel: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
- CVE-2026-90118kernel: ntfs: fix off-by-one page overflow in ntfs_decompress()
- CVE-2026-90117kernel: ntfs: validate usa_ofs before preserving the update sequence number
- CVE-2026-90116kernel: ALSA: mtpav: shut down output timer before card teardown
- CVE-2026-90115kernel: xsk: fix NULL pointer dereference in __xsk_rcv()
- CVE-2026-90114kernel: net: bridge: Reject descending VLAN tunnel ranges
- CVE-2026-90113kernel: netdevsim: update queue NAPI association on queue reset
- CVE-2026-90112kernel: net: qlcnic: validate unified ROM sections before loading
- CVE-2026-90111kernel: ip6mr: do not clone dst in ip6mr_cache_report()
- CVE-2026-90110kernel: inetpeer: randomize RB-tree node comparison using SipHash
- CVE-2026-90109kernel: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
- CVE-2026-90108kernel: net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
- CVE-2026-90107kernel: net/smc: free pending qentry in smc_llc_flow_stop() before memset
- CVE-2026-90106kernel: net: bridge: arp/nd proxy: fix reading neigh ha
- CVE-2026-90105kernel: vxlan: fix reading neigh ha
- CVE-2026-90104kernel: NFSv4.1: zero referring call lists before decoding
- CVE-2026-90103kernel: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
- CVE-2026-90102kernel: NFSv4/pnfs: key the data server cache on the NFS version
- CVE-2026-90101kernel: bnxt_en: Fix call to hardware monitoring event handler
- CVE-2026-90100kernel: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT
- CVE-2026-90099kernel: net/sched: account classifier filter allocations to memcg
- CVE-2026-90098kernel: net: sparx5: fix sleep in atomic context in MAC table access
- CVE-2026-90097kernel: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition
- CVE-2026-90096kernel: fuse: invalidate the correct range after O_APPEND direct write
- CVE-2026-90095kernel: fuse: Fix the condition to enable over-io-uring