CVE 2026 document archive · 92
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 92 / 264
- CVE-2026-80938kernel: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex
- CVE-2026-80937kernel: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
- CVE-2026-80936kernel: wifi: mt76: mt7925: cancel mlo_pm_work on stop
- CVE-2026-80935kernel: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy
- CVE-2026-80934kernel: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames
- CVE-2026-80933kernel: wifi: mt76: mt7996: validate default EEPROM firmware size
- CVE-2026-80932kernel: vsock/virtio: flush works in dependency order
- CVE-2026-80931kernel: w1: ds28e17: reject an oversize length on an I2C block read
- CVE-2026-80930kernel: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout
- CVE-2026-80929kernel: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
- CVE-2026-80928kernel: smack: fix cred UAF in smack_file_send_sigiotask()
- CVE-2026-80927kernel: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()
- CVE-2026-80925kernel: vlan: fix skb_under_panic and races when toggling HW VLAN offload
- CVE-2026-80924kernel: crypto: krb5 - use kfree_sensitive() for derived key buffers
- CVE-2026-80923kernel: xhci: dbgtty: Fix unregister on tty_register_driver() failure
- CVE-2026-80922kernel: crypto: qcom-rng - Allow zero as a random number
- CVE-2026-80921kernel: KVM: s390: vsie: zero stale crypto bits
- CVE-2026-80920kernel: io_uring: defer eventfd signaling when queued from a wakeup handler
- CVE-2026-80919kernel: drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format
- CVE-2026-80918kernel: HID: core: fix number/pointer type confusion on long items
- CVE-2026-80917kernel: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems
- CVE-2026-80916kernel: kcov: fix data corruption and race conditions on PREEMPT_RT
- CVE-2026-80915kernel: drm/xe: Fix DPT allocation paths
- CVE-2026-80914kernel: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
- CVE-2026-80913kernel: selinux: require every boolean value to be defined
- CVE-2026-80912kernel: selinux: reject an unclaimed class value in security_get_classes()
- CVE-2026-80911kernel: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
- CVE-2026-80909kernel: drm/amdgpu: Reject UVD message with invalid number of h265 refs
- CVE-2026-80908kernel: drm/amdgpu: Reject UVD message with dimensions above 4096
- CVE-2026-80907kernel: drm/amdgpu: Fix UVD dpb min size calculation for H264
- CVE-2026-80906kernel: net: packet: fix wrong transport_header when sending VLAN-tagged frame
- CVE-2026-80905kernel: net: tap: fix wrong transport_header when sending VLAN-tagged frame
- CVE-2026-80904kernel: net/tls: Fail tls_sw_splice_read() after a failed async decrypt
- CVE-2026-80903kernel: drm/xe/oa: Fix sync entry leak on OA config emit failure
- CVE-2026-80902kernel: dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
- CVE-2026-80901kernel: ipvs: fix the checksum validations
- CVE-2026-80900kernel: ASoC: SDCA: Make UMP message size check more robust
- CVE-2026-80899kernel: erofs: remove fscache backend entirely
- CVE-2026-80898kernel: netfs: clear PG_private_2 on copy-to-cache append failure
- CVE-2026-80897kernel: netfs: release readahead folios on iterator preparation failure
- CVE-2026-80896kernel: mshv: Fix race in mshv_irqfd_deassign
- CVE-2026-80895kernel: mshv: Order pt_vp_array publish against irqfd assertion path
- CVE-2026-80894kernel: iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace
- CVE-2026-80893kernel: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
- CVE-2026-80892kernel: erofs: cap LZMA stream pool size
- CVE-2026-80891kernel: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages
- CVE-2026-80890kernel: sctp: reject stale cookies with mismatched verification tags
- CVE-2026-80889kernel: can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
- CVE-2026-80888kernel: drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
- CVE-2026-80887kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound