PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 80

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 80 / 264

  1. CVE-2026-89662kernel: NFSD: Prevent lock owner use-after-free during client teardown
  2. CVE-2026-89661kernel: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem
  3. CVE-2026-89660kernel: NFSD: Prevent client use-after-free during admin state revocation
  4. CVE-2026-89659kernel: NFSD: Prevent client use-after-free during delegation revoke
  5. CVE-2026-89658kernel: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
  6. CVE-2026-89657kernel: libceph: validate OSD extent maps before cursor advance
  7. CVE-2026-89656kernel: libceph: reject buckets with mismatched CRUSH ids
  8. CVE-2026-89655kernel: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
  9. CVE-2026-89654kernel: ceph: fix UAF in check_new_map() on session freed during unlock
  10. CVE-2026-89653kernel: kernel: Memory corruption via out-of-bounds write in Ceph client
  11. CVE-2026-89652kernel: ceph: bound copied dentry name length in NFS export get_name
  12. CVE-2026-89651kernel: ceph: bound MDSCapAuth path and fs_name decode in handle_session()
  13. CVE-2026-89650kernel: ceph: bound num_export_targets array for mds info v2/v3
  14. CVE-2026-89649kernel: ceph: bound xattr value length in __build_xattrs()
  15. CVE-2026-89648kernel: ceph: cap delegated inode count in ceph_parse_deleg_inos()
  16. CVE-2026-89647kernel: ceph: do not repeat ceph_trim_dentries() if no progress possible
  17. CVE-2026-89646kernel: ceph: fix leaked inode reference on writeback abort at umount
  18. CVE-2026-89645kernel: btrfs: drop recovered reloc root refs on recovery failure
  19. CVE-2026-89644kernel: btrfs: fix extent map leak in NOCOW direct I/O write
  20. CVE-2026-89643kernel: audit: avoid dropping live tree ref on fsnotify rule autoremove
  21. CVE-2026-89642kernel: cifs: call pagecache_isize_extended() in cifs_setsize() when extending
  22. CVE-2026-89641kernel: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
  23. CVE-2026-89640kernel: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
  24. CVE-2026-89639kernel: cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
  25. CVE-2026-89638kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
  26. CVE-2026-89637kernel: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2
  27. CVE-2026-89636kernel: smb: client: clear ce->tgthint in free_tgts()
  28. CVE-2026-89635kernel: ksmbd: only rebind the reopened file's own oplock on durable reconnect
  29. CVE-2026-89634kernel: smb: client: fix ALIGN() overflow in symlink_data() error context loop
  30. CVE-2026-89633kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
  31. CVE-2026-89632kernel: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
  32. CVE-2026-89631kernel: smb: client: reject a tree connect response whose byte count is too small
  33. CVE-2026-89630kernel: smb: client: restore the data_offset bound in is_valid_oplock_break()
  34. CVE-2026-89629kernel: HID: corsair-void: Check size of status and firmware events before reading them
  35. CVE-2026-89628kernel: HID: picolcd: clamp eeprom debugfs read to bytes actually received
  36. CVE-2026-89627kernel: HID: roccat: free buffered reports when destroying device
  37. CVE-2026-89626kernel: HID: sensor: custom: Fix field sysfs group cleanup on failure
  38. CVE-2026-89625kernel: HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
  39. CVE-2026-89624kernel: HID: universal-pidff: stop the device when force-feedback init fails
  40. CVE-2026-89623kernel: HID: mcp2221: stop device IO before hid_hw_stop
  41. CVE-2026-89622kernel: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes
  42. CVE-2026-89621kernel: HID: mcp2221: validate report size in mcp2221_raw_event()
  43. CVE-2026-89620kernel: HID: intel-thc-hid: intel-quickspi: validate report size before copy
  44. CVE-2026-89619kernel: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
  45. CVE-2026-89618kernel: eventfs: Initialize ei->children and ei->list in init_ei()
  46. CVE-2026-89617kernel: fs/ntfs3: validate dirty page table on log replay
  47. CVE-2026-89616kernel: fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
  48. CVE-2026-89615kernel: fs/ntfs3: bound page_lcns[] index by the log record
  49. CVE-2026-89614kernel: ntfs: bound the free-cluster bitmap scan to the volume
  50. CVE-2026-89613kernel: ntfs: reject invalid empty mapping pairs
CVE 2026 document archive — Page 80 | PulseLinux