94,138 indexed
CVECVE vulnerabilities
94,138 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 4,751–4,800 of 94,138 · page 96 of 1883
| ID | Title | Summary |
|---|---|---|
| CVE-2026-90293 | CVE-2026-90293 CVSS 7.5 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: post the full-feature receive buffers after session registration isert_put_logi… |
| CVE-2026-90292 | CVE-2026-90292 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix use-after-free in siw_accept() siw_accept() looks up the QP supplied by use… |
| CVE-2026-90291 | CVE-2026-90291 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: module/dups: Fix use-after-free in kmod_dup_req lifetime handling The kmod dups code uses… |
| CVE-2026-90290 | CVE-2026-90290 | In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Restore DAIF state on error Sashiko AI has reported that if swsusp_mte_… |
| CVE-2026-9029 | CVE-2026-9029 CVSS 7.3grafana | A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script the… |
| CVE-2026-90289 | CVE-2026-90289 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPU_DM_MAX_DISPLAY_INDEX i… |
| CVE-2026-90288 | CVE-2026-90288 CVSS 7.4 | In the Linux kernel, the following vulnerability has been resolved: phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure for_each_child_of… |
| CVE-2026-90287 | CVE-2026-90287 | In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in sp_uphy_init() Fix the error paths of sp_uphy_init() … |
| CVE-2026-90286 | CVE-2026-90286 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the sam… |
| CVE-2026-90285 | CVE-2026-90285 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path qla2x00_sysfs_read_vpd(… |
| CVE-2026-90284 | CVE-2026-90284 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: do not queue completed sysfs fallback requests fw_load_sysfs_fallback() … |
| CVE-2026-90283 | CVE-2026-90283 | In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: release subpool on fill_super failure hugetlbfs_fill_super() allocates a hugep… |
| CVE-2026-90282 | CVE-2026-90282 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend There is a sm… |
| CVE-2026-90281 | CVE-2026-90281 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM mus… |
| CVE-2026-90280 | CVE-2026-90280 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend There is a small win… |
| CVE-2026-9028 | CVE-2026-9028 CVSS 5.3 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.4. This is due t… |
| CVE-2026-90279 | CVE-2026-90279 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5_bitmap_sector_map() aligns the … |
| CVE-2026-90278 | CVE-2026-90278 | In the Linux kernel, the following vulnerability has been resolved: md: wait for behind writes before destroying bitmap __md_stop() destroyed the bitmap befo… |
| CVE-2026-90277 | CVE-2026-90277 | In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: prevent create failure bitmap UAF llbitmap_create() publishes mddev->bitm… |
| CVE-2026-90276 | CVE-2026-90276 | In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: stop daemon timer rearm on destroy llbitmap_destroy() deletes pending_tim… |
| CVE-2026-90275 | CVE-2026-90275 | In the Linux kernel, the following vulnerability has been resolved: md/raid1: don't set array_frozen in raid1_takeover() raid1_takeover() sets conf->array_fr… |
| CVE-2026-90274 | CVE-2026-90274 | In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: fix underflow for usage of (nrseqstate - 1) According to IHI006H Embedd… |
| CVE-2026-90273 | CVE-2026-90273 | In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable In the perf … |
| CVE-2026-90272 | CVE-2026-90272 | In the Linux kernel, the following vulnerability has been resolved: perf: arm_pmuv3: Zero initialize hw_id branch stack field PERF_SAMPLE_BRANCH_HW_INDEX is … |
| CVE-2026-90271 | CVE-2026-90271 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt If a user … |
| CVE-2026-90270 | CVE-2026-90270 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is t… |
| CVE-2026-9027 | CVE-2026-9027 CVSS 5.3 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass via Improper Verification of Cryptographic Signature in all vers… |
| CVE-2026-90269 | CVE-2026-90269 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject load-acquire from pointers requiring fault protection A BPF_LOAD_ACQ is not r… |
| CVE-2026-90268 | CVE-2026-90268 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sd_probe() after large pool creation failure After device… |
| CVE-2026-90267 | CVE-2026-90267 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails sd_set_special_bv… |
| CVE-2026-90266 | CVE-2026-90266 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge On a zoned FS, … |
| CVE-2026-90265 | CVE-2026-90265 | In the Linux kernel, the following vulnerability has been resolved: btrfs: defrag: fix deadlock between defrag and delalloc space reservation While running f… |
| CVE-2026-90264 | CVE-2026-90264 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always wait for ordered extents to avoid OE races [BUG] Syzbot reported a bug that… |
| CVE-2026-90263 | CVE-2026-90263 | In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs … |
| CVE-2026-90262 | CVE-2026-90262 | In the Linux kernel, the following vulnerability has been resolved: btrfs: retry verity reads for not-uptodate Merkle folios btrfs_read_merkle_tree_page() ca… |
| CVE-2026-90261 | CVE-2026-90261 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btree_writepages() start btree_writepa… |
| CVE-2026-90260 | CVE-2026-90260 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't clobber the extent buffer when zeroing it out On a zoned filesystem a… |
| CVE-2026-90259 | CVE-2026-90259 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() In that func… |
| CVE-2026-90258 | CVE-2026-90258 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: airoha: add missed IRQ resource helpers Without hooking .irq_request_resources, … |
| CVE-2026-90257 | CVE-2026-90257 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: avoid OOB read of build info string The virtbt_setup_zephyr() sends… |
| CVE-2026-90256 | CVE-2026-90256 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind hci_conn::l2cap_… |
| CVE-2026-90255 | CVE-2026-90255 CVSS 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix the SCO setup context lifetime hci_setup_sync() queues a conn_ha… |
| CVE-2026-90254 | CVE-2026-90254 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths adv_ti… |
| CVE-2026-90253 | CVE-2026-90253 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: free the mesh send cancel command when it is cancelled mesh_send_cancel(… |
| CVE-2026-90252 | CVE-2026-90252 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: free the HCI command when it is cancelled mgmt_hci_cmd_sync() queues the… |
| CVE-2026-90251 | CVE-2026-90251 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MSFT: validate evt_prefix_len against the response length read_supported_featu… |
| CVE-2026-90250 | CVE-2026-90250 | In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix storage null-ptr-deref after replacing prog Syzkaller reported a storage… |
| CVE-2026-90249 | CVE-2026-90249 | In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core doe… |
| CVE-2026-90248 | CVE-2026-90248 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix teardown of an adopted proto on insert-race loss In tc_new_tfilte… |
| CVE-2026-90247 | CVE-2026-90247 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmap_lock leak in irq_work path stack_map_get_build_id_offset() introduced a per… |