CVE 2026 document archive · 83
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 83 / 264
- CVE-2026-89511kernel: qede: Fix NULL pointer dereference in TPA fragment processing
- CVE-2026-89510kernel: RDMA/cxgb4: Cancel reg_work before freeing device on remove
- CVE-2026-89509kernel: RDMA/ionic: Embed counter driver data in rdma_counter allocation
- CVE-2026-89508kernel: RDMA/ucma: Lock the handler in ucma_set_ib_path()
- CVE-2026-89507kernel: RDMA/ucma: Lock the handler in ucma_write_cm_event()
- CVE-2026-89506kernel: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
- CVE-2026-89505kernel: RDMA/uverbs: Guard legacy bundles without method_elm
- CVE-2026-89504kernel: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
- CVE-2026-89503kernel: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()
- CVE-2026-89502kernel: ring-buffer: Free cpu_buffer::free_page with subbuf_order
- CVE-2026-89501kernel: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf
- CVE-2026-89500kernel: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page
- CVE-2026-89499kernel: ring-buffer: Stop remote reader update when page swap fails
- CVE-2026-89498kernel: orangefs: fix double-free of trailer_buf on readdir copy failure
- CVE-2026-89497kernel: orangefs: skip leading spaces before parsing client debug masks
- CVE-2026-89496kernel: ocfs2: always run deallocs on copy-on-write completion
- CVE-2026-89495kernel: ocfs2: bound namelen in dlm_migrate_request_handler
- CVE-2026-89494kernel: ocfs2: validate lengths in dlm_mig_lockres_handler
- CVE-2026-89493kernel: ocfs2: validate rl_used against rl_count in refcount block validator
- CVE-2026-89492kernel: ocfs2: validate directory-index entry counts when reading metadata
- CVE-2026-89491kernel: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()
- CVE-2026-89489kernel: openrisc: fix arbitrary kernel memory access via or1k_atomic syscall
- CVE-2026-89488kernel: openvswitch: Fix CT limit teardown use-after-free
- CVE-2026-89487kernel: openvswitch: only skb_tx_error() a packet we are about to drop
- CVE-2026-89486kernel: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()
- CVE-2026-89485kernel: lockd: pin next file across nlm_inspect_file lock-drop
- CVE-2026-89484kernel: lockd: fix NULL dereference on lockowner allocation failure
- CVE-2026-89483kernel: nvme: zero the discard fallback page
- CVE-2026-89482kernel: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
- CVE-2026-89481kernel: nvme-tcp: fix host memory disclosure on R2T for a read command
- CVE-2026-89480kernel: nvme-tcp: reject a read that transferred too few bytes
- CVE-2026-89479kernel: sctp: stop processing a packet once its association is deleted
- CVE-2026-89478kernel: sctp: drop a chunk if its transport was removed
- CVE-2026-89477kernel: sctp: fix NULL deref on untransmitted RECONF completion
- CVE-2026-89476kernel: sctp: fix stream->outcnt underflow on duplicate RECONF responses
- CVE-2026-89475kernel: power: supply: bq24257: fix use-after-free on remove
- CVE-2026-89474kernel: power: supply: bq256xx: drain usb_work before freeing the charger
- CVE-2026-89473kernel: power: supply: bq25890: Fix power_supply reference leak
- CVE-2026-89472kernel: power: supply: charger-manager: register regulators before exposing sysfs
- CVE-2026-89471kernel: power: supply: cros_usbpd-charger: bound the EC-reported port count
- CVE-2026-89470kernel: power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS
- CVE-2026-89469kernel: power: supply: lp8727: fix use-after-free in lp8727_release_irq()
- CVE-2026-89468kernel: power: supply: lp8788-charger: fix use-after-free on remove
- CVE-2026-89467kernel: power: supply: qcom_battmgr: fix use-after-free
- CVE-2026-89466kernel: power: supply: qcom_battmgr: terminate the strings from firmware
- CVE-2026-89465kernel: power: supply: rt9455: quiesce delayed work before teardown
- CVE-2026-89464kernel: power: supply: twl4030_charger: cancel workers via devm
- CVE-2026-89463kernel: power: supply: ucs1002: fix use-after-free on remove
- CVE-2026-89462kernel: power: supply: max17040: propagate register read errors
- CVE-2026-89461kernel: power: supply: max17040: synchronize work cancellation on suspend