CVE 2026 document archive · 74

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 74 / 264

  1. CVE-2026-90040kernel: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
  2. CVE-2026-90039kernel: NFSD: Guard admin state-revocation walks with NFSD_NET_UP
  3. CVE-2026-90038kernel: NFSD: Prevent client use-after-free during export state revocation
  4. CVE-2026-90037kernel: NFSD: Prevent client use-after-free during close_lru reaping
  5. CVE-2026-90036kernel: NFSD: Prevent client use-after-free during blocked-lock reaping
  6. CVE-2026-90035kernel: drm/amd/display: fix division by zero in get_estimated_bw()
  7. CVE-2026-90034kernel: usb: image: mdc800: change kmalloc() to kzalloc()
  8. CVE-2026-90033kernel: ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
  9. CVE-2026-90031kernel: usb-storage: ene_ub6250: fix race between scan work and probe
  10. CVE-2026-90030kernel: usb: dwc3: clear forceRM when issuing EndTransfer
  11. CVE-2026-90029kernel: usb: storage: realtek_cr: fix use-after-free on disconnect
  12. CVE-2026-90028kernel: usb: typec: hd3ss3220: track VBUS enable state per consumer
  13. CVE-2026-90025kernel: usb: typec: ucsi: displayport: Fix OOB altmode array index
  14. CVE-2026-90024kernel: usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
  15. CVE-2026-90023kernel: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
  16. CVE-2026-90021kernel: usb: gadget: f_midi: initialize work in f_midi_alloc()
  17. CVE-2026-90020kernel: USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
  18. CVE-2026-90019kernel: usb: gadget: fix null pointer dereference in usb_put_function_instance()
  19. CVE-2026-90015kernel: xhci: fix lost bounce buffers on TDs spanning several ring segments
  20. CVE-2026-90014kernel: tracing: Have show_event_filters/triggers files take trace array ref
  21. CVE-2026-90013kernel: tracing: Take trace_array reference when opening options file
  22. CVE-2026-90012kernel: spi: Fix DMA mapping ownership on partial map failure
  23. CVE-2026-90011kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload
  24. CVE-2026-90008kernel: scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
  25. CVE-2026-90007kernel: scsi: pm8001: Use rollback index when freeing MSI-X vectors
  26. CVE-2026-90005kernel: samples/damon/wsse: handle damon_start() failure
  27. CVE-2026-90003kernel: futex: Prevent rcuwait use-after-free during requeue PI
  28. CVE-2026-90002kernel: ftrace: Take trace_array reference before accessing its ftrace_ops
  29. CVE-2026-90001kernel: HID: bpf: serialize device reference release in struct_ops destroy path
  30. CVE-2026-90000kernel: HID: rmi: fix OOB access with undersized RMI reports
  31. CVE-2026-89998kernel: dm: fix race when loading and unloading a table
  32. CVE-2026-89997kernel: dm: fix resume-vs-remove race
  33. CVE-2026-89996kernel: dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds
  34. CVE-2026-89995kernel: dma-direct: return struct page from dma_direct_alloc_from_pool()
  35. CVE-2026-89994kernel: dmaengine: fsl-edma: tracing: no ptr dereference during log output
  36. CVE-2026-89993kernel: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
  37. CVE-2026-89992kernel: cpuidle: dt_idle_genpd: kfree() the original name allocation
  38. CVE-2026-89991kernel: bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
  39. CVE-2026-89990kernel: ceph: lock mutex in ceph_mds_check_access()
  40. CVE-2026-89989kernel: ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
  41. CVE-2026-89988kernel: kprobes: Protect kprobe_blacklist with RCU
  42. CVE-2026-89987kernel: mm/huge_memory: transfer the pmd dirty bit to the folio on zap
  43. CVE-2026-89986kernel: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
  44. CVE-2026-89985kernel: memcg: keep folio's objcg same as its node
  45. CVE-2026-89984kernel: perf/x86/intel: Fix kernel address leakages in LBR stack
  46. CVE-2026-89983kernel: i2c: core: fix debugfs UAF on adapter removal
  47. CVE-2026-89982kernel: i2c: mux: Fix channel node leak on adapter add failure
  48. CVE-2026-89981kernel: arm64: Don't read GMID_EL1 when MTE is disabled
  49. CVE-2026-89979kernel: ALSA: pcm: Fix race between non-atomic ops and trigger-start
  50. CVE-2026-89977kernel: accel/ethosu: check MMIO mapping errors in probe
CVE 2026 document archive — Page 74 | PulseLinux