Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
401,254 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98740 | Not scored | EDAC/altera: Drop __init from ECC setup paths for re-probe safety | Oct 18, 2026 |
| CVE-2026-98739 | Not scored | Bluetooth: RFCOMM: Fix initial port reference race | Oct 18, 2026 |
| CVE-2026-98738 | Not scored | Bluetooth: Serialize SMP remote OOB data access | Oct 18, 2026 |
| CVE-2026-98737 | Not scored | Bluetooth: hci_sync: Fix inquiry cache use-after-free | Oct 18, 2026 |
| CVE-2026-98736 | Not scored | Bluetooth: hci_conn: Lock parent access during enhanced SCO setup | Oct 18, 2026 |
| CVE-2026-98735 | Not scored | Bluetooth: hci_core: Serialize ACL scheduling with channel deletion | Oct 18, 2026 |
| CVE-2026-98734 | Not scored | Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown | Oct 18, 2026 |
| CVE-2026-98733 | Not scored | Bluetooth: hci_core: Serialize fragmented ISO packet queueing | Oct 18, 2026 |
| CVE-2026-98732 | Not scored | Bluetooth: btintel: fix buffer over-read in btintel_hw_error() | Oct 18, 2026 |
| CVE-2026-98731 | Not scored | Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() | Oct 18, 2026 |
| CVE-2026-98730 | Not scored | Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() | Oct 18, 2026 |
| CVE-2026-98729 | Not scored | x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h | Oct 18, 2026 |
| CVE-2026-98728 | Not scored | tpm: fix off-by-four bounds check in tpm2_get_random() | Oct 18, 2026 |
| CVE-2026-98727 | Not scored | nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known | Oct 18, 2026 |
| CVE-2026-98726 | Not scored | nvme-multipath: fix underflow in ANA log bounds checks | Oct 18, 2026 |
| CVE-2026-98725 | Not scored | nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() | Oct 18, 2026 |
| CVE-2026-98724 | Not scored | nvmet: pci-epf: reject too-short SGL segments | Oct 18, 2026 |
| CVE-2026-98723 | Not scored | nvmet: copy the hostid into the ctrl before creating PR pc_refs | Oct 18, 2026 |
| CVE-2026-98722 | Not scored | mtd: block2mtd: Fix divide error when erase_size is zero | Oct 18, 2026 |
| CVE-2026-98721 | Not scored | mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ | Oct 18, 2026 |
| CVE-2026-98720 | Not scored | KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified | Oct 18, 2026 |
| CVE-2026-98719 | Not scored | KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it | Oct 18, 2026 |
| CVE-2026-98718 | Not scored | KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state | Oct 18, 2026 |
| CVE-2026-98717 | Not scored | KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy | Oct 18, 2026 |
| CVE-2026-98716 | Not scored | KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted | Oct 18, 2026 |
| CVE-2026-98715 | Not scored | KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN | Oct 18, 2026 |
| CVE-2026-98714 | Not scored | KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded | Oct 18, 2026 |
| CVE-2026-98713 | Not scored | KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT | Oct 18, 2026 |
| CVE-2026-98712 | Not scored | KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq | Oct 18, 2026 |
| CVE-2026-98711 | Not scored | wifi: cw1200: fix TX padding OOB read leaking heap data to device | Oct 18, 2026 |
| CVE-2026-98710 | Not scored | wifi: iwlegacy: 3945: free EEPROM data on remove | Oct 18, 2026 |
| CVE-2026-98709 | Not scored | wifi: mac80211: count only matching reservations in reserved switch | Oct 18, 2026 |
| CVE-2026-98708 | Not scored | wifi: mac80211: keep paired old chanctx alive | Oct 18, 2026 |
| CVE-2026-98707 | Not scored | wifi: mac80211: shut down RX BA session timer on teardown | Oct 18, 2026 |
| CVE-2026-98706 | Not scored | wifi: mac80211: drain PS delivery work during station teardown | Oct 18, 2026 |
| CVE-2026-98705 | Not scored | wifi: mac80211: account proxy paths against the mesh path limit | Oct 18, 2026 |
| CVE-2026-98704 | Not scored | wifi: mac80211: keep fallback association elements alive | Oct 18, 2026 |
| CVE-2026-98703 | Not scored | wifi: mac80211: minstrel_ht: validate fixed rate index | Oct 18, 2026 |
| CVE-2026-98702 | Not scored | wifi: mac80211: reject invalid 320 MHz CSA bandwidth | Oct 18, 2026 |
| CVE-2026-98701 | Not scored | wifi: mac80211: release mesh path quota on failed additions | Oct 18, 2026 |
| CVE-2026-98700 | Not scored | wifi: mac80211: set info->band for 802.3 encap offload frames | Oct 18, 2026 |
| CVE-2026-98699 | Not scored | wifi: mac80211: fix mesh fast xmit path deletion UAF | Oct 18, 2026 |
| CVE-2026-98698 | Not scored | wifi: mac80211: handle empty FILS association request payload | Oct 18, 2026 |
| CVE-2026-98697 | Not scored | USB: serial: fix dynamic id driver deregistration race | Oct 18, 2026 |
| CVE-2026-98696 | Not scored | USB: serial: fix driver deregistration order | Oct 18, 2026 |
| CVE-2026-98695 | Not scored | USB: serial: fix ioctl hangup race | Oct 18, 2026 |
| CVE-2026-98694 | Not scored | thunderbolt: Fix KASAN reported use-after-free when request is canceled | Oct 18, 2026 |
| CVE-2026-98693 | Not scored | thunderbolt: Hold a router reference for each allocated HopID | Oct 18, 2026 |
| CVE-2026-98692 | Not scored | thunderbolt: Make the DP tunnel activation callback mandatory | Oct 18, 2026 |
| CVE-2026-98691 | Not scored | thunderbolt: Tear down inactive DP tunnels when the domain is stopped | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.