CVE 2026 document archive · 74
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 74 / 264
- CVE-2026-90040kernel: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
- CVE-2026-90039kernel: NFSD: Guard admin state-revocation walks with NFSD_NET_UP
- CVE-2026-90038kernel: NFSD: Prevent client use-after-free during export state revocation
- CVE-2026-90037kernel: NFSD: Prevent client use-after-free during close_lru reaping
- CVE-2026-90036kernel: NFSD: Prevent client use-after-free during blocked-lock reaping
- CVE-2026-90035kernel: drm/amd/display: fix division by zero in get_estimated_bw()
- CVE-2026-90034kernel: usb: image: mdc800: change kmalloc() to kzalloc()
- CVE-2026-90033kernel: ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
- CVE-2026-90031kernel: usb-storage: ene_ub6250: fix race between scan work and probe
- CVE-2026-90030kernel: usb: dwc3: clear forceRM when issuing EndTransfer
- CVE-2026-90029kernel: usb: storage: realtek_cr: fix use-after-free on disconnect
- CVE-2026-90028kernel: usb: typec: hd3ss3220: track VBUS enable state per consumer
- CVE-2026-90025kernel: usb: typec: ucsi: displayport: Fix OOB altmode array index
- CVE-2026-90024kernel: usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
- CVE-2026-90023kernel: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
- CVE-2026-90021kernel: usb: gadget: f_midi: initialize work in f_midi_alloc()
- CVE-2026-90020kernel: USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
- CVE-2026-90019kernel: usb: gadget: fix null pointer dereference in usb_put_function_instance()
- CVE-2026-90015kernel: xhci: fix lost bounce buffers on TDs spanning several ring segments
- CVE-2026-90014kernel: tracing: Have show_event_filters/triggers files take trace array ref
- CVE-2026-90013kernel: tracing: Take trace_array reference when opening options file
- CVE-2026-90012kernel: spi: Fix DMA mapping ownership on partial map failure
- CVE-2026-90011kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload
- CVE-2026-90008kernel: scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
- CVE-2026-90007kernel: scsi: pm8001: Use rollback index when freeing MSI-X vectors
- CVE-2026-90005kernel: samples/damon/wsse: handle damon_start() failure
- CVE-2026-90003kernel: futex: Prevent rcuwait use-after-free during requeue PI
- CVE-2026-90002kernel: ftrace: Take trace_array reference before accessing its ftrace_ops
- CVE-2026-90001kernel: HID: bpf: serialize device reference release in struct_ops destroy path
- CVE-2026-90000kernel: HID: rmi: fix OOB access with undersized RMI reports
- CVE-2026-89998kernel: dm: fix race when loading and unloading a table
- CVE-2026-89997kernel: dm: fix resume-vs-remove race
- CVE-2026-89996kernel: dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds
- CVE-2026-89995kernel: dma-direct: return struct page from dma_direct_alloc_from_pool()
- CVE-2026-89994kernel: dmaengine: fsl-edma: tracing: no ptr dereference during log output
- CVE-2026-89993kernel: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
- CVE-2026-89992kernel: cpuidle: dt_idle_genpd: kfree() the original name allocation
- CVE-2026-89991kernel: bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
- CVE-2026-89990kernel: ceph: lock mutex in ceph_mds_check_access()
- CVE-2026-89989kernel: ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
- CVE-2026-89988kernel: kprobes: Protect kprobe_blacklist with RCU
- CVE-2026-89987kernel: mm/huge_memory: transfer the pmd dirty bit to the folio on zap
- CVE-2026-89986kernel: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
- CVE-2026-89985kernel: memcg: keep folio's objcg same as its node
- CVE-2026-89984kernel: perf/x86/intel: Fix kernel address leakages in LBR stack
- CVE-2026-89983kernel: i2c: core: fix debugfs UAF on adapter removal
- CVE-2026-89982kernel: i2c: mux: Fix channel node leak on adapter add failure
- CVE-2026-89981kernel: arm64: Don't read GMID_EL1 when MTE is disabled
- CVE-2026-89979kernel: ALSA: pcm: Fix race between non-atomic ops and trigger-start
- CVE-2026-89977kernel: accel/ethosu: check MMIO mapping errors in probe