PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 90

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 90 / 264

  1. CVE-2026-82328gimp: heap out-of-bounds read in ICO loader via unvalidated used_clrs palette count
  2. CVE-2026-82327libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data
  3. CVE-2026-82324gimp: heap out-of-bounds reads in IFF/ILBM loader from HAM row size mismatch and nPlanes=0
  4. CVE-2026-82209curl: libcurl: Information disclosure via improper Public Suffix List boundary check
  5. CVE-2026-82208curl: libcurl: Improper certificate validation when using wolfSSL CA cache
  6. CVE-2026-81934redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free
  7. CVE-2026-81928perl-Net-DNS: Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records
  8. CVE-2026-81893gdk-pixbuf: gdk-pixbuf: invalid write in JPEG ICC profile parser on error recovery
  9. CVE-2026-81872go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission
  10. CVE-2026-81871go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration
  11. CVE-2026-81856hex: hex: Terminal output spoofing via unescaped control sequences
  12. CVE-2026-81842grafana: grafana: Authorization bypass via missing destination folder permission check
  13. CVE-2026-81841grafana: grafana: Information disclosure via unrevoked access tokens in paused shared dashboards
  14. CVE-2026-81736bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records
  15. CVE-2026-81666corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems
  16. CVE-2026-81665corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly
  17. CVE-2026-81642unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
  18. CVE-2026-81634unbound: Unbound: Heap buffer overflow via malicious DNSSEC response
  19. CVE-2026-81627qemu-kvm: VAPIC writable ROM alias can escape the option-ROM window and expose locked SMRAM
  20. CVE-2026-81624undertow-core: undertow: WebSocketContainer defaults for buffers and timeouts are infinite
  21. CVE-2026-81563bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing
  22. CVE-2026-81018kernel: platform/x86: think-lmi: Free system certificate signatures
  23. CVE-2026-81017kernel: platform/chrome: sensorhub: Bound the EC-reported sensor number
  24. CVE-2026-81016kernel: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
  25. CVE-2026-81015kernel: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
  26. CVE-2026-81014kernel: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()
  27. CVE-2026-81013kernel: platform/x86: hp-bioscfg: fix heap OOB read on empty password write
  28. CVE-2026-81012kernel: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
  29. CVE-2026-81011kernel: platform/x86: hp-bioscfg: pass validated element count to package parsers
  30. CVE-2026-81010kernel: io_uring/waitid: honor task_work cancellation
  31. CVE-2026-81009kernel: io_uring/query: cap user size passed to copy_struct_to_user
  32. CVE-2026-81008kernel: interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
  33. CVE-2026-81006kernel: ipmi: Remove all sysfs files on registration failure
  34. CVE-2026-81005kernel: ipmi: si: Fix NULL pointer dereference after failed registration
  35. CVE-2026-81004kernel: ipmi:msghandler: Cancel work cleanly on an error
  36. CVE-2026-81003kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device
  37. CVE-2026-81002kernel: xdp: fix zero-copy frame layout
  38. CVE-2026-81001kernel: slip: fix use-after-free in sl_sync()
  39. CVE-2026-81000kernel: net: tun: bound receive headroom
  40. CVE-2026-80999kernel: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO
  41. CVE-2026-80998kernel: net: bnxt: ring the doorbell when SW USO exits early
  42. CVE-2026-80997kernel: net: ipa: fix stalled modem TX queue after runtime resume
  43. CVE-2026-80996kernel: net: l2tp: do not propagate multicast notification errors
  44. CVE-2026-80995kernel: net: mctp: hold a reference to the route device in mctp_route_lookup()
  45. CVE-2026-80994kernel: net: openvswitch: fix flow mask use-after-free on flow deletion
  46. CVE-2026-80993kernel: net: phylink: correctly validate returned PCS in phylink_inband_caps
  47. CVE-2026-80992kernel: net: ravb: avoid dereferencing an invalid PTP clock
  48. CVE-2026-80991kernel: net: ravb: serialize PTP clock teardown
  49. CVE-2026-80990kernel: net: thunderbolt: Release the Rx HopID that was handed out on mismatch
  50. CVE-2026-80989kernel: net: thunderbolt: Mark the connection down when bringing it up fails
CVE 2026 document archive — Page 90 | PulseLinux