CVE 2026 document archive · 91
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 91 / 264
- CVE-2026-80988kernel: NTB: ntb_transport: Fail TX enqueue when the QP link is down
- CVE-2026-80987kernel: NTB: ntb_transport: Reject oversized TX buffers
- CVE-2026-80986kernel: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
- CVE-2026-80985kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
- CVE-2026-80984kernel: net/smc: do not dereference an unset send buffer on the SMC-D teardown path
- CVE-2026-80983kernel: net/smc: fix socket refcount leak in smc_switch_conns()
- CVE-2026-80982kernel: net/smc: fix use-after-free in smc_rx_pipe_buf_release()
- CVE-2026-80981kernel: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
- CVE-2026-80980kernel: net/smc: stop killed, freed and out_of_sync sharing a byte
- CVE-2026-80979kernel: net/smc: unregister the connection before draining the rx tasklet
- CVE-2026-80978kernel: net: cap advertised IP tunnel headroom
- CVE-2026-80977kernel: net: skbuff: don't touch shared zerocopy state in skb_tx_error()
- CVE-2026-80976kernel: seg6: reset IP6CB after IPv6 decapsulation
- CVE-2026-80975kernel: mfd: qnap-mcu: keep the reply buffer alive past a command timeout
- CVE-2026-80974kernel: mfd: sm501: Fix potential memory leaks during remove
- CVE-2026-80973kernel: ALSA: 6fire: bound the MIDI event length from the device
- CVE-2026-80972kernel: ALSA: aloop: Check card index validity at probe
- CVE-2026-80971kernel: ALSA: bcd2000: clear the URB pointers on disconnect
- CVE-2026-80970kernel: ALSA: FCP: do not copy out an uninitialised init response
- CVE-2026-80969kernel: ALSA: mpu401: Check card index validity at probe
- CVE-2026-80968kernel: ALSA: mts64: Check card index validity at probe
- CVE-2026-80967kernel: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
- CVE-2026-80966kernel: ALSA: portman2x4: Check card index validity at probe
- CVE-2026-80965kernel: ALSA: serial-u16550: Check card index validity at probe
- CVE-2026-80964kernel: ALSA: virmidi: Check card index validity at probe
- CVE-2026-80963kernel: dm-stats: fix a crash if allocation of per-cpu data fails
- CVE-2026-80962kernel: dm-pcache: validate geometry fields from on-disk cache_info
- CVE-2026-80961kernel: dm-pcache: validate kset key_num and intra-segment bounds
- CVE-2026-80960kernel: dm-pcache: validate on-media seg_num against the cache device size
- CVE-2026-80959kernel: dm-pcache: bound the persisted tail-position offset
- CVE-2026-80958kernel: dm-pcache: clamp the tail kset read to the segment data region
- CVE-2026-80957kernel: dm-pcache: detect a cycle in the last-kset chain during replay
- CVE-2026-80956kernel: dm-pcache: only hand out initialized cache segments
- CVE-2026-80955kernel: dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
- CVE-2026-80954kernel: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()
- CVE-2026-80953kernel: i3c: master: adi: initialize the lock before enabling interrupts
- CVE-2026-80952kernel: i3c: master: Fix info leak and UAF in device unregister path
- CVE-2026-80951kernel: i3c: master: svc: bound IBI payload to the requested max_payload_len
- CVE-2026-80950kernel: i3c: renesas: Check that the transfer is valid before accessing it
- CVE-2026-80949kernel: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()
- CVE-2026-80948kernel: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()
- CVE-2026-80947kernel: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
- CVE-2026-80946kernel: fuse: copy request headers via a stack buffer for io-uring
- CVE-2026-80945kernel: crypto: iaa - unmap dst before software fallback on decompress
- CVE-2026-80944kernel: wifi: mwifiex: Detach sync cmd buffer on interrupted wait
- CVE-2026-80943kernel: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids
- CVE-2026-80942kernel: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()
- CVE-2026-80941kernel: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()
- CVE-2026-80940kernel: wifi: rtw88: pci: fix resource leak on failed NAPI setup
- CVE-2026-80939kernel: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot