CVE 2026 document archive · 73
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 73 / 264
- CVE-2026-90094kernel: arm64: process: Fix context switching MTE store-only tag check
- CVE-2026-90093kernel: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
- CVE-2026-90092kernel: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
- CVE-2026-90091kernel: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
- CVE-2026-90090kernel: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path
- CVE-2026-90089kernel: Bluetooth: btnxpuart: Validate the FW dump header length
- CVE-2026-90088kernel: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
- CVE-2026-90087kernel: Bluetooth: do not leak an hci_conn when a second LE connect is rejected
- CVE-2026-90086kernel: xsk: honor XDP_TX_METADATA in zero-copy path
- CVE-2026-90085kernel: octeontx2-af: fix NULL deref in NIX TM tree debugfs read path
- CVE-2026-90084kernel: octeontx2-vf: fix workqueue and netdev race in probe/remove
- CVE-2026-90083kernel: net/sched: act_ife: Only operate on Ethernet frames
- CVE-2026-90082kernel: net: mana: Cap MSI-X vectors to the device MSI-X table size
- CVE-2026-90081kernel: net/rds: use wq_has_sleeper() in rds_cong_map_updated()
- CVE-2026-90080kernel: octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup
- CVE-2026-90079kernel: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()
- CVE-2026-90078kernel: net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
- CVE-2026-90077kernel: net: fix a resource leak in copy_net_ns() error handling path
- CVE-2026-90076kernel: net/sched: fq: add overflow bounds to quantum and initial quantum
- CVE-2026-90075kernel: net/sched: fq_codel: clamp default quantum and mtu
- CVE-2026-90074kernel: net/sched: fq_pie: clamp default quantum to avoid signed overflow
- CVE-2026-90073kernel: net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
- CVE-2026-90072kernel: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
- CVE-2026-90071kernel: net/sched: sch_teql: restore skb->dev on the slave failure path
- CVE-2026-90070kernel: tpm: st33zp24: Return zero on status read failure
- CVE-2026-90069kernel: crypto: acomp - allocate async request context when cloning
- CVE-2026-90068kernel: ASoC: dapm: Fix off-by-one check on the second enum channel
- CVE-2026-90067kernel: libceph: validate banner payload length
- CVE-2026-90066kernel: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
- CVE-2026-90065kernel: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure
- CVE-2026-90064kernel: drm/xe: Reject page faults from non-fault-mode scratch VMs
- CVE-2026-90063kernel: virtio-net: Ensure that TCP packets don't overflow gso_segs
- CVE-2026-90062kernel: netfilter: nf_tables: move hardware offload step after building the chain blob
- CVE-2026-90061kernel: netfilter: nf_tables: skip double clone set expressions on element insert
- CVE-2026-90060kernel: ALSA: control: Don't add invalid kcontrols to LED layer
- CVE-2026-90059kernel: net: stmmac: restore NET_IP_ALIGN in the RX DMA offset
- CVE-2026-90058kernel: net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup
- CVE-2026-90057kernel: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
- CVE-2026-90056kernel: net: fec: only stop PTP if it was initialized
- CVE-2026-90055kernel: usb: atm: usbatm: fix invalid ci_range initialization
- CVE-2026-90054kernel: tcp: fix corruption of urgent data on multi-segment retransmit
- CVE-2026-90053kernel: net/sched: sch_htb: limit htb_classify inner-class filter hops
- CVE-2026-90052kernel: dm-integrity: fix buffer overflow with keyed discard
- CVE-2026-90051kernel: tcp: reject non zerocopy devmem tx
- CVE-2026-90050kernel: net/sched: fq: clamp quantum and initial_quantum in change path
- CVE-2026-90049kernel: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
- CVE-2026-90047kernel: drm/xe: Don't hand out the flat CCS storage as usable VRAM
- CVE-2026-90046kernel: mm/page_alloc: don't spin_trylock() in NMI on UP
- CVE-2026-90042kernel: ceph: properly decrypt filenames in vmalloc() buffers
- CVE-2026-90041kernel: HID: sony: clean up device list on probe failure