94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,201–5,250 of 94,138 · page 105 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89871 | CVE-2026-89871 | In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure kthread_ru… |
| CVE-2026-89870 | CVE-2026-89870 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_device twice zoran_init_video_device() ins… |
| CVE-2026-8987 | CVE-2026-8987 CVSS 8.8autel | Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An aut… |
| CVE-2026-89869 | CVE-2026-89869 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disable_irq() during power-off The IRQ is registered as a threaded… |
| CVE-2026-89868 | CVE-2026-89868 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_streaming When stop_streaming is called… |
| CVE-2026-89867 | CVE-2026-89867 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued Decoder inst… |
| CVE-2026-89866 | CVE-2026-89866 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag tal… |
| CVE-2026-89865 | CVE-2026-89865 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers s… |
| CVE-2026-89864 | CVE-2026-89864 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound i2c->length in I2C bsg handlers struct qla_i2c_access carries a 16-b… |
| CVE-2026-89863 | CVE-2026-89863 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check qla_chk_edif_rx_sa_dele… |
| CVE-2026-89862 | CVE-2026-89862 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix BSG job leak on validate flash image error path qla28xx_validate_flash… |
| CVE-2026-89861 | CVE-2026-89861 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() In the format 1 pa… |
| CVE-2026-89860 | CVE-2026-89860 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_fcp_abort() and qla… |
| CVE-2026-8986 | CVE-2026-8986 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromi… |
| CVE-2026-89859 | CVE-2026-89859 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00_do_dport_diagnost… |
| CVE-2026-89858 | CVE-2026-89858 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() qla2x00_update_fru_vers… |
| CVE-2026-89857 | CVE-2026-89857 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qla_nvme_ls_reject_iocb() allo… |
| CVE-2026-89856 | CVE-2026-89856 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha->msix_count is u16… |
| CVE-2026-89855 | CVE-2026-89855 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize flash version read in reset handler The "update cache versions w… |
| CVE-2026-89854 | CVE-2026-89854 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix cs84xx use-after-free on host teardown qla84xx_put_chip() drops the la… |
| CVE-2026-89853 | CVE-2026-89853 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump qla2x00_free_fce_trace()… |
| CVE-2026-89852 | CVE-2026-89852 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() The mbx_cmd_t is alloc… |
| CVE-2026-89851 | CVE-2026-89851 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs qla2x00_dfs_fce_write() called kst… |
| CVE-2026-89850 | CVE-2026-89850 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Don't query firmware state while chip is down qla2x00_fw_state_show() init… |
| CVE-2026-8985 | CVE-2026-8985 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated at… |
| CVE-2026-89849 | CVE-2026-89849 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path qla2x00_status_entry() filter… |
| CVE-2026-89848 | CVE-2026-89848 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2xxx_delete_qpair() d… |
| CVE-2026-89847 | CVE-2026-89847 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid double completion in async IOCB timeout qla2x00_async_iocb_timeout()… |
| CVE-2026-89846 | CVE-2026-89846 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read In qla2x00_status_entry(),… |
| CVE-2026-89845 | CVE-2026-89845 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() qla2x00_error_entry()… |
| CVE-2026-89844 | CVE-2026-89844 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition qla24xx_repo… |
| CVE-2026-89843 | CVE-2026-89843 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage … |
| CVE-2026-89842 | CVE-2026-89842 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started qla_nvme_xmt_ls_rsp() bails o… |
| CVE-2026-89841 | CVE-2026-89841 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: only redirty pinned folios in redirty_blocks redirty_blocks() pins folios with read… |
| CVE-2026-89840 | CVE-2026-89840 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, b… |
| CVE-2026-8984 | CVE-2026-8984 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request … |
| CVE-2026-89839 | CVE-2026-89839 | In the Linux kernel, the following vulnerability has been resolved: f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() f2fs_xattr_advis… |
| CVE-2026-89838 | CVE-2026-89838 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as … |
| CVE-2026-89837 | CVE-2026-89837 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dentry folio leak in find_in_level find_in_level() gets a dentry folio with f2f… |
| CVE-2026-89836 | CVE-2026-89836 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix folio_nr_pages() race after put in large folio invalidate Our v6.18 based Andro… |
| CVE-2026-89835 | CVE-2026-89835 | In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid NULL checkpoint thread access in sysfs checkpoint_merge can be enabled even w… |
| CVE-2026-89834 | CVE-2026-89834 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to migrate all curseg types during free_segment_range In free_segment_range(), … |
| CVE-2026-89833 | CVE-2026-89833 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() There is potential deadl… |
| CVE-2026-89832 | CVE-2026-89832 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty flag on folio in error path If node block is corrupted due to ch… |
| CVE-2026-89831 | CVE-2026-89831 | In the Linux kernel, the following vulnerability has been resolved: f2fs: protect critical_task_priority updates with s_umount The sysfs store path already t… |
| CVE-2026-89830 | CVE-2026-89830 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In __allocate_data_bloc… |
| CVE-2026-8983 | CVE-2026-8983 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpo… |
| CVE-2026-89829 | CVE-2026-89829 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer() Otherwise in f2fs_sanit… |
| CVE-2026-89828 | CVE-2026-89828 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init() drmm_cgroup_register_region() is … |
| CVE-2026-89827 | CVE-2026-89827 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid force-completing uninitialized UVD rings uvd_v7_0_sw_init() does not in… |