96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 5,901–5,950 of 96,609 · page 119 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-89530 | CVE-2026-89530 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject inline replies that overflow the pull-up buffer An RPC-over-RDMA client c… |
| CVE-2026-8953 | CVE-2026-8953 CVSS 9.6 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.… |
| CVE-2026-89529 | CVE-2026-89529 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject oversized Read segments at decode time The RPC/RDMA Read list decoder sto… |
| CVE-2026-89528 | CVE-2026-89528 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths ar… |
| CVE-2026-89527 | CVE-2026-89527 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc_xprt_put to free listener on create failure svc_rdma_create() calls kfre… |
| CVE-2026-89526 | CVE-2026-89526 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk posi… |
| CVE-2026-89525 | CVE-2026-89525 | In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses … |
| CVE-2026-89524 | CVE-2026-89524 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6kl_c… |
| CVE-2026-89523 | CVE-2026-89523 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unreg… |
| CVE-2026-89522 | CVE-2026-89522 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: media: staging/ipu7: fix async notifier UAF on probe error path isys_register_devices() r… |
| CVE-2026-89521 | CVE-2026-89521 CVSS 7.3 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick_task() releasing the rq lock Core scheduling's pick_next_task() b… |
| CVE-2026-89520 | CVE-2026-89520 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's pick_ne… |
| CVE-2026-8952 | CVE-2026-8952 CVSS 8.8 | Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
| CVE-2026-89519 | CVE-2026-89519 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return SCX_RQ_BAL_KEEP tells t… |
| CVE-2026-89518 | CVE-2026-89518 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix this_rq() assumptions in dispatch kfuncs Under core scheduling, dispatch r… |
| CVE-2026-89517 | CVE-2026-89517 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix rq->core_pick corruption under core scheduling Core scheduling's pick_next… |
| CVE-2026-89516 | CVE-2026-89516 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users scx_bpf_dsq_reenq… |
| CVE-2026-89515 | CVE-2026-89515 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() During fuzz testing, the f… |
| CVE-2026-89514 | CVE-2026-89514 | In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock fnic_fcoe_process_vlan_resp() al… |
| CVE-2026-89513 | CVE-2026-89513 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT_GET_INFO stores guest-c… |
| CVE-2026-89512 | CVE-2026-89512 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the referen… |
| CVE-2026-89511 | CVE-2026-89511 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the … |
| CVE-2026-89510 | CVE-2026-89510 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel reg_work before freeing device on remove c4iw_uld_state_change() queue… |
| CVE-2026-89509 | CVE-2026-89509 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdma_counter allocation Commit 7e53b31acc7f ("RD… |
| CVE-2026-89508 | CVE-2026-89508 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path() ucma_set_ib_path() calls ucma_event_han… |
| CVE-2026-89507 | CVE-2026-89507 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_write_cm_event() ctx->file may only be changed under … |
| CVE-2026-89506 | CVE-2026-89506 | In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR The original commit missed that … |
| CVE-2026-89505 | CVE-2026-89505 | In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method_elm The legacy write() path dispatches t… |
| CVE-2026-89504 | CVE-2026-89504 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_nod… |
| CVE-2026-89503 | CVE-2026-89503 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() ring_buffer_alloc_… |
| CVE-2026-89502 | CVE-2026-89502 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with subbuf_order When sub-buffers use an order g… |
| CVE-2026-89501 | CVE-2026-89501 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf Because, ring_buffer_subbuf_ord… |
| CVE-2026-89500 | CVE-2026-89500 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a cached reade… |
| CVE-2026-8950 | CVE-2026-8950 CVSS 9.3 | Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird … |
| CVE-2026-89499 | CVE-2026-89499 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page swap fails The remote swap_reader_page c… |
| CVE-2026-89498 | CVE-2026-89498 | In the Linux kernel, the following vulnerability has been resolved: orangefs: fix double-free of trailer_buf on readdir copy failure On a readdir downcall, o… |
| CVE-2026-89497 | CVE-2026-89497 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefs_prepare_cdm_arra… |
| CVE-2026-89496 | CVE-2026-89496 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: always run deallocs on copy-on-write completion Local fuzzing of 6.12.94 has found… |
| CVE-2026-89495 | CVE-2026-89495 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlm_migrate_request_handler Patch series "ocfs2/dlm: bound peer-c… |
| CVE-2026-89494 | CVE-2026-89494 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm_mig_lockres_handler A node receiving a DLM_MIG_LOCKRES mes… |
| CVE-2026-89493 | CVE-2026-89493 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl_used against rl_count in refcount block validator ocfs2_find_refcount_… |
| CVE-2026-89492 | CVE-2026-89492 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2_validate_dx_leaf… |
| CVE-2026-89491 | CVE-2026-89491 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() Patch serie… |
| CVE-2026-89490 | CVE-2026-89490 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2_dir_foreach_blk_el(), t… |
| CVE-2026-89489 | CVE-2026-89489 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1k_atomic syscall sys_or1k_atomic() (s… |
| CVE-2026-89488 | CVE-2026-89488 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-free Packet processing uses CT limit state u… |
| CVE-2026-89487 | CVE-2026-89487 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skb_tx_error() a packet we are about to drop queue_userspace_packet() b… |
| CVE-2026-89486 | CVE-2026-89486 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() Commit 9e91f8a6c868 ("ipmi:m… |
| CVE-2026-89485 | CVE-2026-89485 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file lock-drop nlm_traverse_files() pins the curr… |
| CVE-2026-89484 | CVE-2026-89484 | In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclnt_locks_init_private() … |