94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,701–4,750 of 94,138 · page 95 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90339 | CVE-2026-90339 | In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace After enabling GENERIC_… |
| CVE-2026-90338 | CVE-2026-90338 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011_console_write_atom… |
| CVE-2026-90337 | CVE-2026-90337 | In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serial_core_ad… |
| CVE-2026-90336 | CVE-2026-90336 | In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uart_register_driver() failure uart_register_driver… |
| CVE-2026-90335 | CVE-2026-90335 | In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY device registration can fail before a… |
| CVE-2026-90334 | CVE-2026-90334 | In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops the cdev reference … |
| CVE-2026-90333 | CVE-2026-90333 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-blo… |
| CVE-2026-90332 | CVE-2026-90332 CVSS 8.2 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU The MSI-X path already flu… |
| CVE-2026-90331 | CVE-2026-90331 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issues have been found … |
| CVE-2026-90330 | CVE-2026-90330 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidpp_ff_init() creates the in… |
| CVE-2026-9033 | CVE-2026-9033 CVSS 4.3tp-link | An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including for… |
| CVE-2026-90329 | CVE-2026-90329 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed probe hid_device_io_start() allows rep… |
| CVE-2026-90328 | CVE-2026-90328 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the me… |
| CVE-2026-90327 | CVE-2026-90327 | In the Linux kernel, the following vulnerability has been resolved: phonet: pep: do not write beyond optlen in getsockopt pep_getsockopt() clamps the reporte… |
| CVE-2026-90326 | CVE-2026-90326 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and blkg destruction When switching an IO … |
| CVE-2026-90325 | CVE-2026-90325 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcg_activate_policy() When switching IO schedulers on a … |
| CVE-2026-90324 | CVE-2026-90324 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ublk: check import_ubuf() return value import_ubuf() can fail if the address range (provi… |
| CVE-2026-90323 | CVE-2026-90323 | In the Linux kernel, the following vulnerability has been resolved: ublk: validate auto buf reg before taking uring_cmd With UBLK_F_AUTO_BUF_REG, invalid sqe… |
| CVE-2026-90322 | CVE-2026-90322 | In the Linux kernel, the following vulnerability has been resolved: ocfs2/cluster: keep heartbeat local node stable o2nm_node_local_store() handles local=0 b… |
| CVE-2026-90321 | CVE-2026-90321 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inode block validation Patch series "ocfs2: validate… |
| CVE-2026-90320 | CVE-2026-90320 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries when reading metadata ocfs2_validate_xattr_block()… |
| CVE-2026-9032 | CVE-2026-9032 | Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication … |
| CVE-2026-90319 | CVE-2026-90319 | In the Linux kernel, the following vulnerability has been resolved: rapidio: clear mport->net when rio_add_net() fails rio_alloc_net() stores the newly alloc… |
| CVE-2026-90318 | CVE-2026-90318 | In the Linux kernel, the following vulnerability has been resolved: fat: release buffer head after rebuilding parent fat_scan_logstart() leaves the matching … |
| CVE-2026-90317 | CVE-2026-90317 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Invalidate RCU pointers after final spin unlock In a sleepable BPF program, a spin l… |
| CVE-2026-90316 | CVE-2026-90316 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/omap: dsi: Do not copy isr table To be able to unregister stuff from isrs, the corres… |
| CVE-2026-90315 | CVE-2026-90315 | In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Currently, the legacy I/… |
| CVE-2026-90314 | CVE-2026-90314 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() table->offset[i]… |
| CVE-2026-90313 | CVE-2026-90313 | In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed A potential inva… |
| CVE-2026-90312 | CVE-2026-90312 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check load-acquire src ptr type before the load check_atomic_load() calls check_load… |
| CVE-2026-90311 | CVE-2026-90311 | In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device along with its parent The current code creates … |
| CVE-2026-90310 | CVE-2026-90310 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-9031 | CVE-2026-9031 | An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal f… |
| CVE-2026-90309 | CVE-2026-90309 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold CQ references when processing EQ events EQ handlers look up CQs from dev… |
| CVE-2026-90308 | CVE-2026-90308 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Hold QP references for AE and CM processing AE QP fatal events and iWARP CM p… |
| CVE-2026-90307 | CVE-2026-90307 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ srp_recv_done() passes wc… |
| CVE-2026-90306 | CVE-2026-90306 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints only on demand This removes the stub hw_breakpoi… |
| CVE-2026-90305 | CVE-2026-90305 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK Commit c6e61c06d606 ("ARM: 9463/1: Al… |
| CVE-2026-90304 | CVE-2026-90304 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9484/1: enable interrupts when unhandled user faults are triggered PREEMPT_RT requir… |
| CVE-2026-90303 | CVE-2026-90303 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults When CONFIG_DE… |
| CVE-2026-90302 | CVE-2026-90302 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: synchronize heartbeat callbacks with o2net teardown Patch series "ocfs2: harden he… |
| CVE-2026-90301 | CVE-2026-90301 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb: quiesce negotiate handlers and timeout work Heartbeat regions publish struct… |
| CVE-2026-90300 | CVE-2026-90300 | In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in __bpf_get_task_stack Both bpf_get_task_stack and bpf_get_task_… |
| CVE-2026-9030 | CVE-2026-9030 | A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly sy… |
| CVE-2026-90299 | CVE-2026-90299 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIG_FUNCTION_ERROR_INJECTION is dis… |
| CVE-2026-90298 | CVE-2026-90298 | In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: tcon: Drop TCON TOP device reference of_find_device_by_node() takes a device r… |
| CVE-2026-90297 | CVE-2026-90297 | In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: crtc: Propagate layer initialization error sun4i_crtc_init() returns plain NUL… |
| CVE-2026-90296 | CVE-2026-90296 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix devres accumulation across driver rebind imx6_soc_volt is allocated w… |
| CVE-2026-90295 | CVE-2026-90295 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix out-of-bounds write when probed more than once imx6_soc_volt is alloc… |
| CVE-2026-90294 | CVE-2026-90294 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until the session is registered isert_put_login_… |