CVE 2026 document archive · 95
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
13,154 documents · Identifier year 2026 · 95 / 264
- CVE-2026-80744kernel: netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
- CVE-2026-80743kernel: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
- CVE-2026-80742kernel: af_packet: Don't send zero-byte data in tpacket_snd()
- CVE-2026-80739kernel: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock
- CVE-2026-80738kernel: bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie
- CVE-2026-80737kernel: serial: amba-pl011: synchronize DMA teardown
- CVE-2026-80736kernel: thunderbolt: Fix bandwidth group reservation indexing
- CVE-2026-80733kernel: net: remove WARN_ON_ONCE() from sk_mc_loop()
- CVE-2026-80731kernel: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
- CVE-2026-80730kernel: ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
- CVE-2026-80729kernel: mm/huge_memory: initialise workingset state before folio split
- CVE-2026-80728kernel: Revert "drm/amdgpu: fix aperture mapping leak"
- CVE-2026-80727kernel: x86/mce: Set up the polling timer before CMCI discovery
- CVE-2026-80725kernel: net: gro: properly validate BIG TCP aggregation criteria
- CVE-2026-80724kernel: ptp: vmclock: prevent read-only mappings from becoming writable
- CVE-2026-80723kernel: of: reserved_mem: prevent OOB when too many dynamic regions are defined
- CVE-2026-80722kernel: wifi: mac80211: validate individual TWT params before driver setup
- CVE-2026-80721kernel: Bluetooth: ISO: ensure no dangling hcon references in iso_conn
- CVE-2026-80720kernel: iomap: add a separate bio_set for iomap_split_ioend
- CVE-2026-80719kernel: mm: mglru: fix stale batch updates after memcg reparenting
- CVE-2026-80718kernel: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()
- CVE-2026-80717kernel: sctp: validate Adaptation Indication parameter length
- CVE-2026-80716kernel: ALSA: pcm: wake linked drain waiters on unlink
- CVE-2026-80715kernel: igc: remove napi_synchronize() in igc_down()
- CVE-2026-80714kernel: ipvs: do not propagate one-packet flag to synced conns
- CVE-2026-80713kernel: io_uring: preserve task restrictions across exec
- CVE-2026-80712kernel: spi: spi-qpic-snand: write the feature value before executing SET_FEATURE
- CVE-2026-80711kernel: power: supply: max17040: handle missing status supplier
- CVE-2026-80710kernel: s390/dasd: Fix undersized format-check buffer
- CVE-2026-80709kernel: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
- CVE-2026-80708kernel: s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
- CVE-2026-80707kernel: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer
- CVE-2026-80706kernel: can: softing: fw_parse(): validate firmware record spans
- CVE-2026-80705kernel: drm/amd/display: check if dml21_add_phantom_plane() is successful
- CVE-2026-80704kernel: drm/amd/display: use proper context for logging
- CVE-2026-80703kernel: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
- CVE-2026-80702kernel: drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size
- CVE-2026-80701kernel: drm/vmwgfx: enforce cursor size limits for MOB cursors
- CVE-2026-80700kernel: drm/vmwgfx: validate external BO copy bounds for both stride paths
- CVE-2026-80699kernel: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context
- CVE-2026-80698kernel: dmaengine: idxd: fix double free of wq, engine, and group structs
- CVE-2026-80697kernel: erofs: ensure valid f_path for page cache sharing
- CVE-2026-80696kernel: hwmon: (ltc4282) Fix reading the minimum alarm voltage
- CVE-2026-80695kernel: hwmon: (sht3x) Fix unaligned accesses
- CVE-2026-80694kernel: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller
- CVE-2026-80693kernel: idpf: bound interrupt-vector register fill to the allocated array
- CVE-2026-80692kernel: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks
- CVE-2026-80691kernel: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE
- CVE-2026-80690kernel: scsi: ufs: core: Initialize hba->rpmbs list in ufshcd
- CVE-2026-80689kernel: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions