94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,051–5,100 of 94,138 · page 102 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90013 | CVE-2026-90013 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference when opening options file The options files do not ta… |
| CVE-2026-90012 | CVE-2026-90012 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: spi: Fix DMA mapping ownership on partial map failure If RX mapping fails after TX mappin… |
| CVE-2026-90011 | CVE-2026-90011 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for the login payload iscsi_target_check_l… |
| CVE-2026-90010 | CVE-2026-90010 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Cap io_uring sense copy to max_response_len Completion copied scmd->sense_len … |
| CVE-2026-90009 | CVE-2026-90009 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Fix TOCTOU in io_uring passthrough command setup scsi_bsg_uring_cmd() reads bs… |
| CVE-2026-90008 | CVE-2026-90008 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame megasas_make_prp_nvme(… |
| CVE-2026-90007 | CVE-2026-90007 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001_request_msix() unwinds… |
| CVE-2026-90006 | CVE-2026-90006 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damon_stop() failure damon_sample_mtier_stop() assumes its da… |
| CVE-2026-90005 | CVE-2026-90005 | In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damon_start() failure Patch series "samples/damon: handle damo… |
| CVE-2026-90004 | CVE-2026-90004 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in apply_min_nr_regions() damon_apply_min_nr_r… |
| CVE-2026-90003 | CVE-2026-90003 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeue PI On PREEMPT_RT, FUTEX_CMP_REQUEUE_… |
| CVE-2026-90002 | CVE-2026-90002 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Take trace_array reference before accessing its ftrace_ops The trace instance fil… |
| CVE-2026-90001 | CVE-2026-90001 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: serialize device reference release in struct_ops destroy path __hid_bpf_ops_des… |
| CVE-2026-90000 | CVE-2026-90000 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeRe… |
| CVE-2026-89999 | CVE-2026-89999 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacom_intuos_pro2_bt_irq wacom_intuos_pro2_bt_irq()… |
| CVE-2026-89998 | CVE-2026-89998 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent tab… |
| CVE-2026-89997 | CVE-2026-89997 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl at… |
| CVE-2026-89996 | CVE-2026-89996 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds DMA_HEAP_IOCTL_ALLOC a… |
| CVE-2026-89995 | CVE-2026-89995 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: dma-direct: return struct page from dma_direct_alloc_from_pool() Commit 5b138c534fda ("dm… |
| CVE-2026-89994 | CVE-2026-89994 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: tracing: no ptr dereference during log output The fsl edma events st… |
| CVE-2026-89993 | CVE-2026-89993 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dw_edma_irq_request() pass… |
| CVE-2026-89992 | CVE-2026-89992 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name allocation dt_idle_pd_alloc() kasprintf… |
| CVE-2026-89991 | CVE-2026-89991 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpu_freelist push with one possible CPU __pcpu_freelist_push()… |
| CVE-2026-89990 | CVE-2026-89990 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ceph: lock mutex in ceph_mds_check_access() MDS session OPEN handling replaces mdsc->s_ca… |
| CVE-2026-89989 | CVE-2026-89989 | In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() dentry_path() returns E… |
| CVE-2026-89988 | CVE-2026-89988 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobe_blacklist with RCU __within_kprobe_blacklist() traverses kprobe_b… |
| CVE-2026-89987 | CVE-2026-89987 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: transfer the pmd dirty bit to the folio on zap zap_huge_pmd_folio() propa… |
| CVE-2026-89986 | CVE-2026-89986 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() syzbot re… |
| CVE-2026-89985 | CVE-2026-89985 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: memcg: keep folio's objcg same as its node memcg_reparent_objcgs() has an inherent assump… |
| CVE-2026-89984 | CVE-2026-89984 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix kernel address leakages in LBR stack Before Arch LBR gained CPL filte… |
| CVE-2026-89983 | CVE-2026-89983 | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i2c_del_adapter() frees the adapter's debug… |
| CVE-2026-89982 | CVE-2026-89982 | In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a refe… |
| CVE-2026-89981 | CVE-2026-89981 | In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMID_EL1 when MTE is disabled __cpuinfo_store_cpu() gates the GMID_EL1 … |
| CVE-2026-89980 | CVE-2026-89980 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the … |
| CVE-2026-89979 | CVE-2026-89979 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race between non-atomic ops and trigger-start We protect the races of the … |
| CVE-2026-89978 | CVE-2026-89978 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: return early from a zero-length flush SYNC_BO does not constrain its size,… |
| CVE-2026-89977 | CVE-2026-89977 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: check MMIO mapping errors in probe devm_platform_ioremap_resource() returns… |
| CVE-2026-89976 | CVE-2026-89976 | In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix job completion fence cleanup ethosu_ioctl_submit_job() allocates done_f… |
| CVE-2026-89975 | CVE-2026-89975 | In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix DHCHAP secret leak on parse failure nvmf_parse_options() duplicates dhc… |
| CVE-2026-89974 | CVE-2026-89974 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails nvmf_create_ctrl()… |
| CVE-2026-89973 | CVE-2026-89973 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvme_tcp_handle_c2h_data() finds the … |
| CVE-2026-89972 | CVE-2026-89972 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvme_alloc_ns() error path at out_unlin… |
| CVE-2026-89971 | CVE-2026-89971 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed nvme_query_zone_info() r… |
| CVE-2026-89970 | CVE-2026-89970 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Synchronize timeout work during SQ teardown nvmet_auth_sq_free() cancels auth… |
| CVE-2026-8997 | CVE-2026-8997 | vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json). This flaw occurs because the applicat… |
| CVE-2026-89969 | CVE-2026-89969 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU nvmet_tcp_try_recv_pdu… |
| CVE-2026-89968 | CVE-2026-89968 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: reject unsolicited H2CData PDUs nvmet_tcp_handle_h2c_data_pdu() accepts an H2C… |
| CVE-2026-89967 | CVE-2026-89967 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: avoid out-of-bounds writes for compound folios migrate_device_range() … |
| CVE-2026-89966 | CVE-2026-89966 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio alloc_bud… |
| CVE-2026-89965 | CVE-2026-89965 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfre… |