CVE 2026 document archive · 82

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 82 / 264

  1. CVE-2026-89561kernel: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()
  2. CVE-2026-89560kernel: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
  3. CVE-2026-89559kernel: libnvdimm/labels: Prevent integer overflow in __nd_label_validate()
  4. CVE-2026-89558kernel: md/raid10: fix still_degraded being inverted in raid10_sync_request()
  5. CVE-2026-89557kernel: md: do overflow check for sb->bblog_shift in super_1_load()
  6. CVE-2026-89556kernel: module: validate string table section types
  7. CVE-2026-89555kernel: mpls: reload header after pskb_may_pull()
  8. CVE-2026-89554kernel: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
  9. CVE-2026-89553kernel: nouveau/gem: reserve the bo in the info ioctl around the vma lookup
  10. CVE-2026-89552kernel: params: fix charp corruption on allocation failure
  11. CVE-2026-89551kernel: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
  12. CVE-2026-89550kernel: SUNRPC: svcauth_gss: enforce krb5 token minimum length
  13. CVE-2026-89549kernel: sunrpc: route to a populated pool in svc_pool_for_cpu()
  14. CVE-2026-89548kernel: SUNRPC: always drain cache_cleaner before destroying a cache_detail
  15. CVE-2026-89547kernel: SUNRPC: Check svc pool percpu counter allocation
  16. CVE-2026-89546kernel: SUNRPC: close backchannel before destroying callback service
  17. CVE-2026-89545kernel: sunrpc: defer rq_argp and rq_resp free until after RCU grace period
  18. CVE-2026-89544kernel: SUNRPC: fix gssx_dec_option_array error path bugs
  19. CVE-2026-89543kernel: sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir
  20. CVE-2026-89542kernel: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
  21. CVE-2026-89541kernel: SUNRPC: harden gss_unwrap_resp_priv length checks
  22. CVE-2026-89540kernel: sunrpc: init gssp_lock before publishing proc entry
  23. CVE-2026-89539kernel: SUNRPC: reject duplicate CREDS_VALUE options
  24. CVE-2026-89538kernel: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
  25. CVE-2026-89537kernel: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
  26. CVE-2026-89536kernel: SUNRPC: wait for in-flight client TLS handshake callback
  27. CVE-2026-89535kernel: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id
  28. CVE-2026-89534kernel: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails
  29. CVE-2026-89533kernel: svcrdma: Fix offset arithmetic in read_chunk_range
  30. CVE-2026-89532kernel: svcrdma: Fix pcl_for_each_segment for empty chunks
  31. CVE-2026-89531kernel: svcrdma: Reject connection when transport allocation fails
  32. CVE-2026-89530kernel: svcrdma: Reject inline replies that overflow the pull-up buffer
  33. CVE-2026-89529kernel: svcrdma: Reject oversized Read segments at decode time
  34. CVE-2026-89528kernel: svcrdma: Reject Read lists that exceed the page budget
  35. CVE-2026-89527kernel: svcrdma: Use svc_xprt_put to free listener on create failure
  36. CVE-2026-89526kernel: svcrdma: Validate Read chunk positions before reconstruction
  37. CVE-2026-89525kernel: udf: reject VAT indexes equal to the entry count
  38. CVE-2026-89524kernel: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets
  39. CVE-2026-89523kernel: wifi: mt76: mt7925: cancel pending mlo_pm_work
  40. CVE-2026-89522kernel: media: staging/ipu7: fix async notifier UAF on probe error path
  41. CVE-2026-89521kernel: sched/core: Handle pick_task() releasing the rq lock
  42. CVE-2026-89520kernel: sched/core: Make core-sched flips wait for in-flight selections
  43. CVE-2026-89519kernel: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return
  44. CVE-2026-89518kernel: sched_ext: Fix this_rq() assumptions in dispatch kfuncs
  45. CVE-2026-89517kernel: sched_ext: Fix rq->core_pick corruption under core scheduling
  46. CVE-2026-89516kernel: sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users
  47. CVE-2026-89515kernel: scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()
  48. CVE-2026-89514kernel: scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock
  49. CVE-2026-89513kernel: RISC-V: KVM: Fix PMU event info array size overflow
  50. CVE-2026-89512kernel: remoteproc: scp: Fix device reference leak on failed lookup
CVE 2026 document archive — Page 82 | PulseLinux