CVE 2026 document archive · 76
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 76 / 264
- CVE-2026-89901kernel: media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
- CVE-2026-89900kernel: media: cec: core: Fix kmemleak due to missed rc_free_device() call
- CVE-2026-89899kernel: media: cec: disable delayed work before freeing an interrupted transmit
- CVE-2026-89897kernel: media: cec: Serialize exclusive follower delivery
- CVE-2026-89896kernel: media: cedrus: fix memory leak in cedrus_init_ctrls()
- CVE-2026-89894kernel: media: cx231xx: reject geometry changes while the VBI queue is busy
- CVE-2026-89893kernel: media: cx23885: cancel NetUP CI work before teardown
- CVE-2026-89892kernel: media: em28xx: defer audio-only extension registration
- CVE-2026-89891kernel: media: em28xx: fix use-after-free of dev_next->devlist on disconnect
- CVE-2026-89889kernel: media: i2c: imx415: Release runtime PM reference on VBLANK error
- CVE-2026-89886kernel: media: intel/ipu6: fix async notifier cleanup leak on parse error
- CVE-2026-89884kernel: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
- CVE-2026-89881kernel: media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
- CVE-2026-89879kernel: media: s2255: bound JPEG frame size before copying into the buffer
- CVE-2026-89878kernel: media: s2255: check firmware size before reading trailing marker
- CVE-2026-89877kernel: media: saa7164: fix cleanup on resource allocation failure
- CVE-2026-89876kernel: media: tda18250: fix possible integer overflow
- CVE-2026-89874kernel: media: v4l2-async: avoid deleting unlinked ASC entry on link error
- CVE-2026-89872kernel: media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
- CVE-2026-89867kernel: media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued
- CVE-2026-89865kernel: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
- CVE-2026-89864kernel: scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
- CVE-2026-89863kernel: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
- CVE-2026-89862kernel: scsi: qla2xxx: Fix BSG job leak on validate flash image error path
- CVE-2026-89861kernel: scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
- CVE-2026-89860kernel: scsi: qla2xxx: Initialize NVMe abort_work once at submission
- CVE-2026-89859kernel: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
- CVE-2026-89858kernel: scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
- CVE-2026-89857kernel: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
- CVE-2026-89856kernel: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
- CVE-2026-89855kernel: scsi: qla2xxx: Serialize flash version read in reset handler
- CVE-2026-89854kernel: scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
- CVE-2026-89853kernel: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
- CVE-2026-89852kernel: scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
- CVE-2026-89851kernel: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
- CVE-2026-89850kernel: scsi: qla2xxx: Don't query firmware state while chip is down
- CVE-2026-89849kernel: scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
- CVE-2026-89848kernel: scsi: qla2xxx: Quiesce response IRQ before freeing request queue
- CVE-2026-89847kernel: scsi: qla2xxx: Avoid double completion in async IOCB timeout
- CVE-2026-89846kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
- CVE-2026-89845kernel: scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
- CVE-2026-89844kernel: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
- CVE-2026-89843kernel: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
- CVE-2026-89842kernel: scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
- CVE-2026-89837kernel: f2fs: fix dentry folio leak in find_in_level
- CVE-2026-89835kernel: f2fs: avoid NULL checkpoint thread access in sysfs
- CVE-2026-89830kernel: f2fs: fix valid block count leak on data block allocation failure
- CVE-2026-89828kernel: drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()
- CVE-2026-89827kernel: drm/amdgpu: avoid force-completing uninitialized UVD rings
- CVE-2026-89824kernel: drm/panel-edp: fix i2c adapter leak on probe failure