Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
401,254 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98840 | Not scored | vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF | Oct 18, 2026 |
| CVE-2026-98839 | Not scored | vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() | Oct 18, 2026 |
| CVE-2026-98838 | Not scored | vt: skip screen update for DEC alignment test on backgroup consoles | Oct 18, 2026 |
| CVE-2026-98837 | Not scored | ALSA: caiaq: unregister the input device when probe fails | Oct 18, 2026 |
| CVE-2026-98836 | Not scored | ALSA: line6: reject oversized playback packets | Oct 18, 2026 |
| CVE-2026-98835 | Not scored | iio: accel: kionix-kx022a: Fix array boundary check | Oct 18, 2026 |
| CVE-2026-98834 | Not scored | mtd: core: avoid double-free of OTP NVMEM device | Oct 18, 2026 |
| CVE-2026-98833 | Not scored | mtd: core: call _get_device() with the master MTD | Oct 18, 2026 |
| CVE-2026-98832 | Not scored | blk-cgroup: save IRQ state in blkg_tryget_closest() | Oct 18, 2026 |
| CVE-2026-98831 | Not scored | of/overlay: don't leak fragment references when changeset init fails | Oct 18, 2026 |
| CVE-2026-98830 | Not scored | wifi: wfx: validate MIB read length before copying to caller | Oct 18, 2026 |
| CVE-2026-98829 | Not scored | wifi: mac80211: drop oversized fragments to avoid extra_len overflow | Oct 18, 2026 |
| CVE-2026-98828 | Not scored | wifi: ath9k: reject short WMI command responses | Oct 18, 2026 |
| CVE-2026-98827 | Not scored | wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE | Oct 18, 2026 |
| CVE-2026-98826 | Not scored | rtc: ac100: Fix clock provider use-after-free on probe failure | Oct 18, 2026 |
| CVE-2026-98825 | Not scored | rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() | Oct 18, 2026 |
| CVE-2026-98824 | Not scored | wifi: mac80211: validate TX status rate metadata | Oct 18, 2026 |
| CVE-2026-98823 | Not scored | wifi: cfg80211: preserve hidden-group beacon IE ownership | Oct 18, 2026 |
| CVE-2026-98822 | Not scored | wifi: mac80211: prevent AP VLAN tx from other interfaces | Oct 18, 2026 |
| CVE-2026-98821 | Not scored | block: reject polled dio with user integrity metadata | Oct 18, 2026 |
| CVE-2026-98820 | Not scored | blk-mq: set RQF_USE_SCHED when the operation is known | Oct 18, 2026 |
| CVE-2026-98819 | Not scored | Bluetooth: btintel: validate DDC record lengths | Oct 18, 2026 |
| CVE-2026-98818 | Not scored | mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() | Oct 18, 2026 |
| CVE-2026-98817 | Not scored | ASoC: SDCA: Add better pm_runtime error handling in func probe | Oct 18, 2026 |
| CVE-2026-98816 | Not scored | bpf: Fix overflow of jump offset in constant blinding | Oct 18, 2026 |
| CVE-2026-98815 | Not scored | nvme: fix cdev lifetime | Oct 18, 2026 |
| CVE-2026-98814 | Not scored | nvme: fix command effects log lifetime for multipath heads | Oct 18, 2026 |
| CVE-2026-98813 | Not scored | bpf: Hold map BTF for the memory allocator destructor record | Oct 18, 2026 |
| CVE-2026-98812 | Not scored | net/mctp: publish the mctp_dev only after it is initialised | Oct 18, 2026 |
| CVE-2026-98811 | Not scored | net/sched: cls_api: reclaim an empty proto on the error path | Oct 18, 2026 |
| CVE-2026-98810 | Not scored | wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() | Oct 18, 2026 |
| CVE-2026-98809 | Not scored | Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister | Oct 18, 2026 |
| CVE-2026-98808 | Not scored | net: systemport: Fix buffer overflow in bcm_sysport_get_stats() | Oct 18, 2026 |
| CVE-2026-98807 | Not scored | net/mlx5: Fix slab-out-of-bounds when handling team device events | Oct 18, 2026 |
| CVE-2026-98806 | Not scored | octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled | Oct 18, 2026 |
| CVE-2026-98805 | Not scored | tipc: prevent GCM nonce reuse on peer key changes | Oct 18, 2026 |
| CVE-2026-98804 | Not scored | net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() | Oct 18, 2026 |
| CVE-2026-98803 | Not scored | net: stmmac: fix rx Scatter-Gather support | Oct 18, 2026 |
| CVE-2026-98802 | Not scored | seg6: ensure packet data is writable before modifying SRH and IPv6 DA | Oct 18, 2026 |
| CVE-2026-98801 | Not scored | net: restrict SO_RESERVE_MEM to TCP sockets and cap max value | Oct 18, 2026 |
| CVE-2026-98800 | Not scored | bpf: Wait for an RCU tasks grace period before freeing trampoline progs | Oct 18, 2026 |
| CVE-2026-98799 | Not scored | bpf: Skip detached progs in trampoline images that are still in use | Oct 18, 2026 |
| CVE-2026-98798 | Not scored | net: bcmgenet: fix NULL dereference in set_coalesce before first open | Oct 18, 2026 |
| CVE-2026-98797 | Not scored | net: cap skb->queue_mapping when the tx queue is picked | Oct 18, 2026 |
| CVE-2026-98796 | Not scored | net: ethernet: mtk_eth_soc: allocate dummy netdev sooner | Oct 18, 2026 |
| CVE-2026-98795 | Not scored | net: sparx5: skip ptp deinit if init was skipped | Oct 18, 2026 |
| CVE-2026-98794 | Not scored | ipvs: filter some flags received in the backup server | Oct 18, 2026 |
| CVE-2026-98793 | Not scored | netfilter: bpf: reject invalid NAT manipulation types | Oct 18, 2026 |
| CVE-2026-98792 | Not scored | netfilter: flowtable: generalize pending status bit | Oct 18, 2026 |
| CVE-2026-98791 | Not scored | net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.