94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,601–4,650 of 94,138 · page 93 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90435 | CVE-2026-90435 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffer size set_user_buf_size() computes the Q… |
| CVE-2026-90434 | CVE-2026-90434 | In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofs_fill_pages() reads the compressed … |
| CVE-2026-90433 | CVE-2026-90433 | In the Linux kernel, the following vulnerability has been resolved: spi: oc-tiny: switch to managed controller allocation The controller is allocated with th… |
| CVE-2026-90432 | CVE-2026-90432 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Abort directly from the hardlockup handler scx_hardlockup() defers the abort t… |
| CVE-2026-90431 | CVE-2026-90431 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: Prevent crash handling to race with rproc_del() There's no synchronization be… |
| CVE-2026-90430 | CVE-2026-90430 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized tegra241_vintf… |
| CVE-2026-90429 | CVE-2026-90429 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init A user VINTF is to… |
| CVE-2026-90428 | CVE-2026-90428 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs __tegra241_cmdq… |
| CVE-2026-90427 | CVE-2026-90427 CVSS 7.4 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() __tegra241_cm… |
| CVE-2026-90426 | CVE-2026-90426 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs tegra241_cmdqv_remove… |
| CVE-2026-90425 | CVE-2026-90425 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra241_vintf_init_vsid()… |
| CVE-2026-90424 | CVE-2026-90424 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path tegra241_cmdqv_init_struct… |
| CVE-2026-90423 | CVE-2026-90423 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix UAF in ODP init error-handling path rxe_odp_mr_init_user() stores &umem_odp… |
| CVE-2026-90422 | CVE-2026-90422 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path When mtk_clk_re… |
| CVE-2026-90421 | CVE-2026-90421 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed… |
| CVE-2026-90420 | CVE-2026-90420 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix infinite loop in nilfs_clean_segments() syzbot reported a hung task in nilfs_… |
| CVE-2026-90419 | CVE-2026-90419 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent out-of-bounds read in super root block parsing super-root inode metadata … |
| CVE-2026-90418 | CVE-2026-90418 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch Syzbot reported a ker… |
| CVE-2026-90417 | CVE-2026-90417 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() When the device is in… |
| CVE-2026-90416 | CVE-2026-90416 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs get_param() reads a congesti… |
| CVE-2026-90415 | CVE-2026-90415 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: free STAG index when TPT entry write fails write_tpt_entry() allocates a new … |
| CVE-2026-90414 | CVE-2026-90414 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was received isert_recv_done() hands each … |
| CVE-2026-90413 | CVE-2026-90413 CVSS 9.1 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than was received isert_login_recv_done()… |
| CVE-2026-90412 | CVE-2026-90412 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix return status of RMI log page on allocation failure nvmet_execute_get_log_page… |
| CVE-2026-90411 | CVE-2026-90411 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request __nvme_fc_init_reques… |
| CVE-2026-90410 | CVE-2026-90410 | In the Linux kernel, the following vulnerability has been resolved: spi: davinci: switch to managed controller allocation The controller is allocated with th… |
| CVE-2026-90409 | CVE-2026-90409 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Add vm_bind region with kbo range overlap check When a VM is created, caller… |
| CVE-2026-90408 | CVE-2026-90408 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() There is no po… |
| CVE-2026-90407 | CVE-2026-90407 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() There is no po… |
| CVE-2026-90406 | CVE-2026-90406 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value… |
| CVE-2026-90405 | CVE-2026-90405 | In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: fix some error handling bugs in probe() There are a few issues here: … |
| CVE-2026-90404 | CVE-2026-90404 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_debugfs: Unregister panic notifier cros_ec_debugfs_probe() regis… |
| CVE-2026-90403 | CVE-2026-90403 CVSS 7.0 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() In the last error path in rtl_pci_p… |
| CVE-2026-90402 | CVE-2026-90402 CVSS 7.0 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() add… |
| CVE-2026-90401 | CVE-2026-90401 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: md: remove REQ_NOWAIT support from raid1/10/456 REQ_NOWAIT support in md personalities th… |
| CVE-2026-90400 | CVE-2026-90400 | In the Linux kernel, the following vulnerability has been resolved: md: recheck spare changes before starting sync remove_spares() and remove_and_add_spares(… |
| CVE-2026-9040 | CVE-2026-9040 CVSS 7.7 | A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allo… |
| CVE-2026-90399 | CVE-2026-90399 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() Currently, in ath12k_wmi_mac_ph… |
| CVE-2026-90398 | CVE-2026-90398 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() Currently, in ath11k_wmi_tlv_ma… |
| CVE-2026-90397 | CVE-2026-90397 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published In qco… |
| CVE-2026-90396 | CVE-2026-90396 | In the Linux kernel, the following vulnerability has been resolved: block: fix dio leak on metadata mapping error A failed integrity mapping holds a dio refe… |
| CVE-2026-90395 | CVE-2026-90395 | In the Linux kernel, the following vulnerability has been resolved: power: supply: isp1704_charger: cancel work on remove The USB notifier and initial VBUS d… |
| CVE-2026-90394 | CVE-2026-90394 | In the Linux kernel, the following vulnerability has been resolved: power: supply: sc2731_charger: cancel work on remove The USB notifier and initial charger… |
| CVE-2026-90393 | CVE-2026-90393 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_prog In bpf_netns_link_update_prog, the c… |
| CVE-2026-90392 | CVE-2026-90392 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link info In bpf_link_show_fdinfo and bpf_link_ge… |
| CVE-2026-90391 | CVE-2026-90391 | In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone dmirror_fault() is called… |
| CVE-2026-90390 | CVE-2026-90390 | In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlog_store() error path backlog_store() suspends the array … |
| CVE-2026-90389 | CVE-2026-90389 | In the Linux kernel, the following vulnerability has been resolved: md: scope memalloc_noio to allocation critical sections Storing a memalloc_noio_save() to… |
| CVE-2026-90388 | CVE-2026-90388 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent al… |
| CVE-2026-90387 | CVE-2026-90387 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: Preserve allocation virtual address for dynamic pools swiotlb_alloc_tlb() can al… |