PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 84

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 84 / 264

  1. CVE-2026-89460kernel: s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks
  2. CVE-2026-89459kernel: s390/percpu: Fix MVIY_PERCPU() with older binutils
  3. CVE-2026-89458kernel: s390/dasd: Do not complete a failed ESE read as successful
  4. CVE-2026-89457kernel: s390/dasd: Guard sysfs discipline callbacks against unallocated private data
  5. CVE-2026-89456kernel: s390/dasd: Propagate partial completion length across ERP recovery
  6. CVE-2026-89455kernel: PCI: plda: Fix use-after-free of event IRQs during teardown
  7. CVE-2026-89454kernel: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()
  8. CVE-2026-89453kernel: iommu/amd: Put PCI device after handling PPR faults
  9. CVE-2026-89452kernel: iommu/msm: Unwind probe state on registration failure
  10. CVE-2026-89451kernel: iommu/sva: Set handle->dev before the SVA handle is visible
  11. CVE-2026-89450kernel: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field
  12. CVE-2026-89449kernel: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add
  13. CVE-2026-89448kernel: iommu/vt-d: Force requesting ACS when tboot is enabled
  14. CVE-2026-89447kernel: iommufd: Avoid locking internal accesses during unmap
  15. CVE-2026-89446kernel: iommufd: Release current IOAS on xa_store() failure
  16. CVE-2026-89445kernel: iommufd: Fix UAF in selftest IOPF reporting
  17. CVE-2026-89444kernel: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer
  18. CVE-2026-89443kernel: platform/x86: ISST: Validate level in perf mask ioctls
  19. CVE-2026-89442kernel: platform/x86: ISST: Validate socket ID in clos_assoc ioctl
  20. CVE-2026-89441kernel: mmc: via-sdmmc: cancel card-detect work on remove
  21. CVE-2026-89440kernel: mmc: via-sdmmc: stop card-detect handling on probe failure
  22. CVE-2026-89439kernel: platform/x86: ISST: Add a NULL check for sst_inst[]
  23. CVE-2026-89438kernel: platform/x86: ISST: Validate logical CPU id and clos id
  24. CVE-2026-89437kernel: platform/x86: int1092: Fix potential memory leak in sar_probe()
  25. CVE-2026-89436kernel: platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]
  26. CVE-2026-89425com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing
  27. CVE-2026-89407com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking
  28. CVE-2026-89329device-mapper-multipath: Local Denial of Service via Blocking IPC Send Operations
  29. CVE-2026-89162pcre2: PCRE2: Information disclosure via pcre2_serialize_encode
  30. CVE-2026-89161pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match
  31. CVE-2026-89160pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching
  32. CVE-2026-89158PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms
  33. CVE-2026-89157pcre2: PCRE2: Out-of-bounds write via large pattern input
  34. CVE-2026-89156PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback
  35. CVE-2026-89098nfs-utils: nfs-utils: Denial of Service via assertion failure in fsidd
  36. CVE-2026-89096nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statd
  37. CVE-2026-89092glibc: nscd stack overflow leads to degraded DNS resolution
  38. CVE-2026-89091ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
  39. CVE-2026-89090github.com/aws/aws-sdk-go-v2: Amazon AWS SDK for Go v2: Denial of Service via crafted event stream header
  40. CVE-2026-89088parted: parted: Denial of Service via heap buffer overflow during FAT16 resize
  41. CVE-2026-89085parted: parted: Heap-based buffer overflow via crafted FAT32 filesystem image
  42. CVE-2026-89078ruby: double free issue in regular expression parser
  43. CVE-2026-89059resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)
  44. CVE-2026-89058resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config
  45. CVE-2026-89046zstd-jni: zstd-jni: Information disclosure or denial of service via out-of-bounds read
  46. CVE-2026-89045com.github.luben/zstd-jni: zstd-jni: Denial of Service via negative length parameter
  47. CVE-2026-88967grafana: Azure Monitor data source could leak its Azure access token
  48. CVE-2026-88924gvfs: gvfs-admin socket ownership race permits local root
  49. CVE-2026-88914gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux CEA-608 closed-caption parser
  50. CVE-2026-88859evolution: evolution: javascript execution via spoofed vCard control bypasses mail script-markup restriction
CVE 2026 document archive — Page 84 | PulseLinux