96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,851–5,900 of 96,609 · page 118 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89577 | CVE-2026-89577 | In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLK_STS_NOTSUPP and BLK_ST… |
| CVE-2026-89576 | CVE-2026-89576 | In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata_take_snap() bumps the … |
| CVE-2026-89575 | CVE-2026-89575 | In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build_constructor_string() Reserve space fo… |
| CVE-2026-89574 | CVE-2026-89574 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array_block_check() validates blocknr and … |
| CVE-2026-89573 | CVE-2026-89573 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's array_block_check() … |
| CVE-2026-89572 | CVE-2026-89572 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() adds OPP tables from f… |
| CVE-2026-89571 | CVE-2026-89571 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctl_cmd_rpc() copies cmd-… |
| CVE-2026-89570 | CVE-2026-89570 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the … |
| CVE-2026-8957 | CVE-2026-8957 CVSS 8.8 | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 14… |
| CVE-2026-89569 | CVE-2026-89569 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation handling rfcomm_security_cfm() looks u… |
| CVE-2026-89568 | CVE-2026-89568 | In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho_preserved_memory_reserve() kho_preserved_memory_reserve(… |
| CVE-2026-89567 | CVE-2026-89567 | In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently acc… |
| CVE-2026-89566 | CVE-2026-89566 | In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy checkpoint buffers journal_shrink_one_cp_li… |
| CVE-2026-89565 | CVE-2026-89565 | In the Linux kernel, the following vulnerability has been resolved: ipip: fix skb leak in collect_md mode when metadata_dst allocation fails In collect_md mo… |
| CVE-2026-89564 | CVE-2026-89564 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 input preserve an sk… |
| CVE-2026-89563 | CVE-2026-89563 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() ip6_tnl_xmit() may need to expand headro… |
| CVE-2026-89562 | CVE-2026-89562 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fix hardware header length for NBMA tunnels ip6gre_tnl_link_config_route() accum… |
| CVE-2026-89561 | CVE-2026-89561 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() ipv6_rpl_srh_rcv() derefere… |
| CVE-2026-89560 | CVE-2026-89560 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Whiteout objects are … |
| CVE-2026-8956 | CVE-2026-8956 CVSS 9.8 | Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-89559 | CVE-2026-89559 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() The on-media namespac… |
| CVE-2026-89558 | CVE-2026-89558 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in raid10_sync_request() Commit fe6a19d40ceb… |
| CVE-2026-89557 | CVE-2026-89557 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb->bblog_shift in super_1_load() In super_1_load(), sb->bblog_… |
| CVE-2026-89556 | CVE-2026-89556 | In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elf_validity_cache_sechdrs, section sizes … |
| CVE-2026-89555 | CVE-2026-89555 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_select_multipath() calls mpls_multipath_ha… |
| CVE-2026-89554 | CVE-2026-89554 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction mptcp_token_join_co… |
| CVE-2026-89553 | CVE-2026-89553 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path,… |
| CVE-2026-89552 | CVE-2026-89552 | In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure param_set_charp() stores charp paramet… |
| CVE-2026-89551 | CVE-2026-89551 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow xdr_buf_trim() trims `len` bytes … |
| CVE-2026-89550 | CVE-2026-89550 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum length svcauth_gss_unwrap_priv() validate… |
| CVE-2026-8955 | CVE-2026-8955 CVSS 8.8 | Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
| CVE-2026-89549 | CVE-2026-89549 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_for_cpu() svc_set_num_threads() spreads the… |
| CVE-2026-89548 | CVE-2026-89548 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: always drain cache_cleaner before destroying a cache_detail sunrpc_destroy_cache_… |
| CVE-2026-89547 | CVE-2026-89547 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation __svc_create() initializes three per-poo… |
| CVE-2026-89546 | CVE-2026-89546 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: close backchannel before destroying callback service A backchannel receive can co… |
| CVE-2026-89545 | CVE-2026-89545 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after RCU grace period svc_rqst_free() frees… |
| CVE-2026-89544 | CVE-2026-89544 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx_dec_option_array error path bugs Four coupled defects in the gssx XDR op… |
| CVE-2026-89543 | CVE-2026-89543 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir Norma… |
| CVE-2026-89542 | CVE-2026-89542 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens gss_krb5_unwrap_v2() reads the EC … |
| CVE-2026-89541 | CVE-2026-89541 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks gss_unwrap_resp_priv() validates the RP… |
| CVE-2026-89540 | CVE-2026-89540 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp_lock before publishing proc entry create_use_gss_proxy_proc_entry() pub… |
| CVE-2026-89539 | CVE-2026-89539 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: reject duplicate CREDS_VALUE options gssx_dec_option_array() walks the wire-suppl… |
| CVE-2026-89538 | CVE-2026-89538 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss_krb5_unwrap_v2() sets buf-… |
| CVE-2026-89537 | CVE-2026-89537 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 gss_krb5_verify_mic_v2… |
| CVE-2026-89536 | CVE-2026-89536 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake callback xs_tls_handshake_sync() gives xs… |
| CVE-2026-89535 | CVE-2026-89535 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id svc_rdma_free() caches rdma… |
| CVE-2026-89534 | CVE-2026-89534 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails When svc_rdma_listen_handler()… |
| CVE-2026-89533 | CVE-2026-89533 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_range svc_rdma_read_chunk_range() walks a Re… |
| CVE-2026-89532 | CVE-2026-89532 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl_for_each_segment for empty chunks When a parsed chunk list contains a ch… |
| CVE-2026-89531 | CVE-2026-89531 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle_connect_req() returns w… |