CVE 2026 document archive · 75
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 75 / 264
- CVE-2026-89976kernel: accel/ethosu: fix job completion fence cleanup
- CVE-2026-89975kernel: nvme-fabrics: fix DHCHAP secret leak on parse failure
- CVE-2026-89974kernel: nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
- CVE-2026-89973kernel: nvme-tcp: check the data direction of a C2HData PDU
- CVE-2026-89972kernel: nvme: add missing SRCU grace period in error path
- CVE-2026-89971kernel: nvme: skip the zoned limits update if the zone info query failed
- CVE-2026-89970kernel: nvmet-auth: Synchronize timeout work during SQ teardown
- CVE-2026-89968kernel: nvmet-tcp: reject unsolicited H2CData PDUs
- CVE-2026-89966kernel: mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio
- CVE-2026-89965kernel: nvdimm/btt: reject an arena whose nfree is below the lane count
- CVE-2026-89963kernel: powerpc/kexec_file: Fix null-ptr-def in extra size calculation
- CVE-2026-89962kernel: powerpc/kexec_file: Prevent kexec range truncation
- CVE-2026-89961kernel: powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
- CVE-2026-89959kernel: s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
- CVE-2026-89958kernel: s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
- CVE-2026-89956kernel: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
- CVE-2026-89955kernel: s390/vfio-ap: Fix NULL deref in status_show() during queue probe
- CVE-2026-89953kernel: mtd: mtdoops: free page bitmap when the backing MTD is removed
- CVE-2026-89952kernel: mtd: rawnand: validate ONFI extended parameter page sections
- CVE-2026-89944kernel: ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
- CVE-2026-89942kernel: iio: buffer: Fix potential use-after-free in anonymous buffer release
- CVE-2026-89941kernel: iio: buffer: Make IIO DMA fence release RCU-safe
- CVE-2026-89940kernel: iio: buffer: Tie IIO dma fence lock lifetime to the fence
- CVE-2026-89939kernel: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
- CVE-2026-89936kernel: iio: dac: m62332: Fix regulator reference count imbalance
- CVE-2026-89935kernel: iio: light: apds9306: fix PM reference leak in apds9306_read_data()
- CVE-2026-89934kernel: iio: light: ltrf216a: fix runtime PM reference leak in error path
- CVE-2026-89933kernel: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
- CVE-2026-89932kernel: KVM: nVMX: Always flush vpid02 on first use
- CVE-2026-89931kernel: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
- CVE-2026-89930kernel: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
- CVE-2026-89929kernel: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
- CVE-2026-89927kernel: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
- CVE-2026-89926kernel: KVM: s390: Fix length check __import_wp_info()
- CVE-2026-89925kernel: KVM: s390: Fix memory leak in guest debug handling
- CVE-2026-89924kernel: KVM: s390: Fix old_data leak in guest debug error path
- CVE-2026-89923kernel: KVM: s390: Free guest debug data on vcpu destroy
- CVE-2026-89922kernel: KVM: s390: Take srcu when importing watchpoint data
- CVE-2026-89921kernel: KVM: s390: Zero initialize data structures for inject_pfault_token
- CVE-2026-89920kernel: KVM: s390: Fix memory corruption by not reinjecting CK machine checks
- CVE-2026-89919kernel: KVM: s390: keyop: use mmu_lock to read gmap->asce
- CVE-2026-89918kernel: KVM: arm64: Correctly handle end of VA space TLBI invalidation
- CVE-2026-89917kernel: KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping
- CVE-2026-89916kernel: KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
- CVE-2026-89915kernel: KVM: arm64: Remove VM-wide VNCR mapping counter
- CVE-2026-89914kernel: KVM: arm64: Sign-extend VA for range-based TLBI invalidation
- CVE-2026-89913kernel: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
- CVE-2026-89912kernel: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
- CVE-2026-89911kernel: KVM: arm64: Correctly cap TLBI Range to the architural limit
- CVE-2026-89909kernel: LoongArch: KVM: Free init resources if kvm_init() fails