PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 94

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 94 / 264

  1. CVE-2026-80819kernel: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept
  2. CVE-2026-80818kernel: iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown
  3. CVE-2026-80817kernel: iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages
  4. CVE-2026-80816kernel: ALSA: FCP: Use a private URB for the notification endpoint
  5. CVE-2026-80815kernel: ALSA: scarlett2: Use a private URB for the notification endpoint
  6. CVE-2026-80814kernel: rndis_host: add overflow check in rndis_rx_fixup()
  7. CVE-2026-80813kernel: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()
  8. CVE-2026-80812kernel: ALSA: dummy: Check card index validity at probe
  9. CVE-2026-80811kernel: io_uring/cmd: fix iovec leak when the async cmd is not recycled
  10. CVE-2026-80810kernel: io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec()
  11. CVE-2026-80808kernel: ext4: stop retrying saturated xattr cache entries
  12. CVE-2026-80806kernel: ext4: don't enable DAX on new encrypted files
  13. CVE-2026-80805kernel: xfs: validate attr entry pointer before field access
  14. CVE-2026-80804kernel: xfs: restore nofs context unconditionally in xfs_trans_roll
  15. CVE-2026-80797kernel: nfc: pn533: purge fragmented skbs during cleanup
  16. CVE-2026-80793kernel: ipv4: reject undersized MTUs in ip_do_fragment()
  17. CVE-2026-80792kernel: ipv6: fix use-after-free in ip6_finish_output2()
  18. CVE-2026-80791kernel: nvmet-auth: zero the AUTH_RECEIVE response buffer
  19. CVE-2026-80790kernel: nvmet-fc: fix invalid free in LS IOD error path
  20. CVE-2026-80789kernel: nvmet-tcp: bound SGL data length before allocating command buffers
  21. CVE-2026-80788kernel: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations
  22. CVE-2026-80786kernel: fbdev: Wrap user-invoked calls to fb_set_var() in helper
  23. CVE-2026-80785kernel: fbdev: serialize mode sysfs access with lock_fb_info()
  24. CVE-2026-80784kernel: mptcp: pm: fix memory leak from alloc-during-teardown race
  25. CVE-2026-80782kernel: HID: magicmouse: do not keep a stale msc->input if no input is claimed
  26. CVE-2026-80781kernel: HID: core: fix OOB read of field->usage in hid_set_field()
  27. CVE-2026-80780kernel: HID: pidff: fix OOB write when hid->inputs is empty
  28. CVE-2026-80779kernel: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ
  29. CVE-2026-80778kernel: futex/pi: Reject cross-mm private futex owners
  30. CVE-2026-80777kernel: futex/pi: Plug private futex exec() race
  31. CVE-2026-80776kernel: futex: Fix race in futex_pivot_pending() during private hash resize
  32. CVE-2026-80775kernel: futex: Fix race on the initial mm->futex.phash.ref allocation
  33. CVE-2026-80774kernel: HID: asus: fix missing hid_is_usb() check
  34. CVE-2026-80771kernel: HID: nintendo: register input device after capabilities are set
  35. CVE-2026-80767kernel: HID: sensor: custom: Fix use-after-free in enable_sensor
  36. CVE-2026-80766kernel: HID: uclogic: fix use-after-free of inrange_timer on remove
  37. CVE-2026-80765kernel: HID: hyperv: validate initial device info bounds
  38. CVE-2026-80764kernel: Bluetooth: hci_event: fix LE list UAF on reset
  39. CVE-2026-80763kernel: Bluetooth: hci_event: validate LE Set CIG Parameters response
  40. CVE-2026-80762kernel: Bluetooth: hci_sync: Fix accept list UAF during suspend
  41. CVE-2026-80761kernel: Bluetooth: ISO: zero the sockaddr before returning it in getname
  42. CVE-2026-80760kernel: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
  43. CVE-2026-80758kernel: futex: Avoid private hash use-after-free on final put
  44. CVE-2026-80757kernel: selinux: reject a class permission count below its inherited common
  45. CVE-2026-80756kernel: selinux: do not cancel a policy conversion that never started
  46. CVE-2026-80755kernel: selinux: reject a permission value exceeding the class permission count
  47. CVE-2026-80754kernel: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
  48. CVE-2026-80752kernel: Input: psxpad-spi - set driver data before use
  49. CVE-2026-80749kernel: drm/connector/hdmi: Fix out of bounds memory read
  50. CVE-2026-80747kernel: drm/amdkfd: Add bounds check for CRAT subtype length
CVE 2026 document archive — Page 94 | PulseLinux