96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,551–5,600 of 96,609 · page 112 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89852 | CVE-2026-89852 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() The mbx_cmd_t is alloc… |
| CVE-2026-89851 | CVE-2026-89851 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs qla2x00_dfs_fce_write() called kst… |
| CVE-2026-89850 | CVE-2026-89850 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Don't query firmware state while chip is down qla2x00_fw_state_show() init… |
| CVE-2026-8985 | CVE-2026-8985 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated at… |
| CVE-2026-89849 | CVE-2026-89849 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path qla2x00_status_entry() filter… |
| CVE-2026-89848 | CVE-2026-89848 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2xxx_delete_qpair() d… |
| CVE-2026-89847 | CVE-2026-89847 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid double completion in async IOCB timeout qla2x00_async_iocb_timeout()… |
| CVE-2026-89846 | CVE-2026-89846 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read In qla2x00_status_entry(),… |
| CVE-2026-89845 | CVE-2026-89845 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() qla2x00_error_entry()… |
| CVE-2026-89844 | CVE-2026-89844 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition qla24xx_repo… |
| CVE-2026-89843 | CVE-2026-89843 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage … |
| CVE-2026-89842 | CVE-2026-89842 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started qla_nvme_xmt_ls_rsp() bails o… |
| CVE-2026-89841 | CVE-2026-89841 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: only redirty pinned folios in redirty_blocks redirty_blocks() pins folios with read… |
| CVE-2026-89840 | CVE-2026-89840 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks the source range, b… |
| CVE-2026-8984 | CVE-2026-8984 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request … |
| CVE-2026-89839 | CVE-2026-89839 | In the Linux kernel, the following vulnerability has been resolved: f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() f2fs_xattr_advis… |
| CVE-2026-89838 | CVE-2026-89838 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as … |
| CVE-2026-89837 | CVE-2026-89837 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dentry folio leak in find_in_level find_in_level() gets a dentry folio with f2f… |
| CVE-2026-89836 | CVE-2026-89836 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix folio_nr_pages() race after put in large folio invalidate Our v6.18 based Andro… |
| CVE-2026-89835 | CVE-2026-89835 | In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid NULL checkpoint thread access in sysfs checkpoint_merge can be enabled even w… |
| CVE-2026-89834 | CVE-2026-89834 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to migrate all curseg types during free_segment_range In free_segment_range(), … |
| CVE-2026-89833 | CVE-2026-89833 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() There is potential deadl… |
| CVE-2026-89832 | CVE-2026-89832 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty flag on folio in error path If node block is corrupted due to ch… |
| CVE-2026-89831 | CVE-2026-89831 | In the Linux kernel, the following vulnerability has been resolved: f2fs: protect critical_task_priority updates with s_umount The sysfs store path already t… |
| CVE-2026-89830 | CVE-2026-89830 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix valid block count leak on data block allocation failure In __allocate_data_bloc… |
| CVE-2026-8983 | CVE-2026-8983 CVSS 9.8autel | Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpo… |
| CVE-2026-89829 | CVE-2026-89829 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer() Otherwise in f2fs_sanit… |
| CVE-2026-89828 | CVE-2026-89828 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init() drmm_cgroup_register_region() is … |
| CVE-2026-89827 | CVE-2026-89827 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid force-completing uninitialized UVD rings uvd_v7_0_sw_init() does not in… |
| CVE-2026-89826 | CVE-2026-89826 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info bounds checks panthor_fw_read_build_info() checks… |
| CVE-2026-89825 | CVE-2026-89825 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix firmware control interface bounds checks panthor_init_cs_iface() and pan… |
| CVE-2026-89824 | CVE-2026-89824 | In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter re… |
| CVE-2026-89823 | CVE-2026-89823 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm: fix race between partial drm_dev_register() failure and ioctl If drm_dev_register() … |
| CVE-2026-89822 | CVE-2026-89822 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Guard against NULL driver_data in i915_pci_probe() pci_match_device() can retur… |
| CVE-2026-89821 | CVE-2026-89821 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid divide-by-zero in __is_lut_linear() __is_lut_linear() computes the… |
| CVE-2026-89820 | CVE-2026-89820 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix dc_lock leak on GPU reset error paths On GPU reset, dm_suspend() tak… |
| CVE-2026-8982 | CVE-2026-8982 CVSS 8.1autel | Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanis… |
| CVE-2026-89819 | CVE-2026-89819 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: validate plane degamma LUT size for private color prop Unlike the CRTC d… |
| CVE-2026-89818 | CVE-2026-89818 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check If the supplied msg[2]… |
| CVE-2026-89817 | CVE-2026-89817 | In the Linux kernel, the following vulnerability has been resolved: drm/gud: NUL-terminate TV mode names read from the device gud_connector_add_tv_mode() rea… |
| CVE-2026-89816 | CVE-2026-89816 | In the Linux kernel, the following vulnerability has been resolved: drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used Commit 1c6ceeee6eb… |
| CVE-2026-89815 | CVE-2026-89815 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt->restore after successful restore ttm_pool_restore_and_alloc() can succe… |
| CVE-2026-89814 | CVE-2026-89814 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: clamp the isolation index for rings outside a partition adev->isolation[] has… |
| CVE-2026-89813 | CVE-2026-89813 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the KIQ ring fences on reset Like the MES scheduler ring, the … |
| CVE-2026-89812 | CVE-2026-89812 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the MES ring fences on reset The MES scheduler ring has no drm… |
| CVE-2026-89811 | CVE-2026-89811 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add TLB flush after MES queue eviction/suspension MES (Micro Engine Scheduler… |
| CVE-2026-89810 | CVE-2026-89810 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram If page migration from device to sy… |
| CVE-2026-8981 | CVE-2026-8981 CVSS 3.5 | The Custom Block Builder WordPress plugin before 4.3.0 does not consistently check the unfiltered_html capability across all paths that write to its block tem… |
| CVE-2026-89809 | CVE-2026-89809 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds Reading /sys/kernel/debu… |
| CVE-2026-89808 | CVE-2026-89808 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram When migration… |