Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

401,254 vulnerabilities match.

CVESeveritySummary
CVE-2026-98639Not scoredKVM: riscv: Fix NACL hfence entry update order
CVE-2026-98638Not scoredKVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()
CVE-2026-98637Not scoredKVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure
CVE-2026-98636Not scoredsquashfs: Add dictionary size range check to prevent shift-out-of-bounds
CVE-2026-98635Not scoredscsi: block: Fix zones_cond out-of-bounds write on zone report
CVE-2026-98634Not scoredscsi: sd_zbc: Reject disks with too many zones
CVE-2026-98633Not scoredBluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
CVE-2026-98632Not scoredBluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel
CVE-2026-98631Not scoredxsk: Use a 32-bit compare in xsk_map_gen_lookup
CVE-2026-98630Not scoredeth: fbnic: Fix payload page pool error cleanup
CVE-2026-98629Not scorednet/sched: cls_u32: fix manual hash table handle IDR aliasing
CVE-2026-98628Not scoredbpf: Make post-verification instruction rewrites killable
CVE-2026-98627Not scoredbpf: Preserve packet pointer class displacement in regsafe()
CVE-2026-98626Not scoredbpf: Restrict CO-RE poisoning to relocatable instructions
CVE-2026-98625Not scorednetfilter: flowtable: publish HW_DEAD after worker is done
CVE-2026-98624Not scorednetfilter: nfnetlink_queue: hold nfnl mutex in event notifier
CVE-2026-98623Not scoreddrm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update
CVE-2026-98622Not scorednet/sched: act_ct: don't WARN on benign flow_offload_alloc() failure
CVE-2026-98621Not scorednet: gue: reject invalid REMCSUM offsets
CVE-2026-98620Not scorednet: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
CVE-2026-98619Not scorednet: ethtool: keep rtnl_lock for the ioctl self test
CVE-2026-98618Not scoredeth: fbnic: Handle maximum standalone channels
CVE-2026-98617Not scoredeth: fbnic: use the Rx queue napi pointer to find the napi vector
CVE-2026-98616Not scoredeth: fbnic: reset num_napi when the napi vectors are freed
CVE-2026-98615Not scoredeth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox
CVE-2026-98614Not scoredsctp: avoid livelock while updating retransmit path
CVE-2026-98613Not scoredbpf: Bound ownership depth through local kptrs and graph roots
CVE-2026-98612Not scorednet: usb: catc: bound the RX packet length in catc_rx_done()
CVE-2026-98611Not scoredbpf: Check params size before reading reserved fields
CVE-2026-98610Not scorednet/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget
CVE-2026-98609Not scoreddrm/virtio: fix object leak when drm_gem_handle_create() fails
CVE-2026-98608Not scoreddrm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()
CVE-2026-98607Not scoreddrm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()
CVE-2026-98606Not scoreddrm/virtio: release the GEM object on virtio_gpu_vram_create() errors
CVE-2026-98605Not scoreddrm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach
CVE-2026-98604Not scoredovpn: replace bind when learning local endpoint
CVE-2026-98603Not scoredovpn: replace bind when clearing stale local source
CVE-2026-98602Not scoredBluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough
CVE-2026-98601Not scoredBluetooth: btintel_pcie: validate device-supplied DMA indices
CVE-2026-98600Not scoredBluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()
CVE-2026-98599Not scoredbpf: Reject non-negative offsets in stack_slot_obj_get_spi()
CVE-2026-98598Not scoredipv6: Prevent rt6_insert_exception() for dying fib6_info.
CVE-2026-98597Not scorednet: usb: sr9700: include receive overhead in the length check
CVE-2026-98596Not scoredipv6: Fix dst leak for uncached routes.
CVE-2026-98595Not scoredudp: remove a disconnected socket from the 4-tuple hash table
CVE-2026-98594Not scoredtg3: clean up PHYLIB resources on probe failure
CVE-2026-98593Not scoreds390/debug: Fix NULL pointer dereference in debug_info_copy()
CVE-2026-98592Not scorednet: spacemit: clear TX descriptor on fragment mapping failure
CVE-2026-98591Not scoredbpf: Fix bounds check for skb-backed dynptrs
CVE-2026-98590Not scoredbpf: Fix bpf_sock context code generation

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.