Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,087 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98723 | Not scored | nvmet: copy the hostid into the ctrl before creating PR pc_refs | Oct 18, 2026 |
| CVE-2026-98722 | Not scored | mtd: block2mtd: Fix divide error when erase_size is zero | Oct 18, 2026 |
| CVE-2026-98721 | Not scored | mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ | Oct 18, 2026 |
| CVE-2026-98720 | Not scored | KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified | Oct 18, 2026 |
| CVE-2026-98719 | Not scored | KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it | Oct 18, 2026 |
| CVE-2026-98718 | Not scored | KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state | Oct 18, 2026 |
| CVE-2026-98717 | Not scored | KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy | Oct 18, 2026 |
| CVE-2026-98716 | Not scored | KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted | Oct 18, 2026 |
| CVE-2026-98715 | Not scored | KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN | Oct 18, 2026 |
| CVE-2026-98714 | Not scored | KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded | Oct 18, 2026 |
| CVE-2026-98713 | Not scored | KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT | Oct 18, 2026 |
| CVE-2026-98712 | Not scored | KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq | Oct 18, 2026 |
| CVE-2026-98711 | Not scored | wifi: cw1200: fix TX padding OOB read leaking heap data to device | Oct 18, 2026 |
| CVE-2026-98710 | Not scored | wifi: iwlegacy: 3945: free EEPROM data on remove | Oct 18, 2026 |
| CVE-2026-98709 | Not scored | wifi: mac80211: count only matching reservations in reserved switch | Oct 18, 2026 |
| CVE-2026-98708 | Not scored | wifi: mac80211: keep paired old chanctx alive | Oct 18, 2026 |
| CVE-2026-98707 | Not scored | wifi: mac80211: shut down RX BA session timer on teardown | Oct 18, 2026 |
| CVE-2026-98706 | Not scored | wifi: mac80211: drain PS delivery work during station teardown | Oct 18, 2026 |
| CVE-2026-98705 | Not scored | wifi: mac80211: account proxy paths against the mesh path limit | Oct 18, 2026 |
| CVE-2026-98704 | Not scored | wifi: mac80211: keep fallback association elements alive | Oct 18, 2026 |
| CVE-2026-98703 | Not scored | wifi: mac80211: minstrel_ht: validate fixed rate index | Oct 18, 2026 |
| CVE-2026-98702 | Not scored | wifi: mac80211: reject invalid 320 MHz CSA bandwidth | Oct 18, 2026 |
| CVE-2026-98701 | Not scored | wifi: mac80211: release mesh path quota on failed additions | Oct 18, 2026 |
| CVE-2026-98700 | Not scored | wifi: mac80211: set info->band for 802.3 encap offload frames | Oct 18, 2026 |
| CVE-2026-98699 | Not scored | wifi: mac80211: fix mesh fast xmit path deletion UAF | Oct 18, 2026 |
| CVE-2026-98698 | Not scored | wifi: mac80211: handle empty FILS association request payload | Oct 18, 2026 |
| CVE-2026-98697 | Not scored | USB: serial: fix dynamic id driver deregistration race | Oct 18, 2026 |
| CVE-2026-98696 | Not scored | USB: serial: fix driver deregistration order | Oct 18, 2026 |
| CVE-2026-98695 | Not scored | USB: serial: fix ioctl hangup race | Oct 18, 2026 |
| CVE-2026-98694 | Not scored | thunderbolt: Fix KASAN reported use-after-free when request is canceled | Oct 18, 2026 |
| CVE-2026-98693 | Not scored | thunderbolt: Hold a router reference for each allocated HopID | Oct 18, 2026 |
| CVE-2026-98692 | Not scored | thunderbolt: Make the DP tunnel activation callback mandatory | Oct 18, 2026 |
| CVE-2026-98691 | Not scored | thunderbolt: Tear down inactive DP tunnels when the domain is stopped | Oct 18, 2026 |
| CVE-2026-98690 | Not scored | thunderbolt: Fix domain reference leak when DPRX read is canceled | Oct 18, 2026 |
| CVE-2026-98689 | Not scored | thunderbolt: Don't access a DP tunnel after its DPRX read was canceled | Oct 18, 2026 |
| CVE-2026-98688 | Not scored | thunderbolt: Fix NULL dereference in tb_remove_work() | Oct 18, 2026 |
| CVE-2026-98687 | Not scored | thunderbolt: Reject oversized XDomain properties responses | Oct 18, 2026 |
| CVE-2026-98686 | Not scored | smb: client: discard post-EOF pagecache when extending a file via zero range | Oct 18, 2026 |
| CVE-2026-98685 | Not scored | smb: client: discard post-EOF pagecache when extending a file via clone range | Oct 18, 2026 |
| CVE-2026-98684 | Not scored | smb: client: flush and commit data before querying allocated ranges | Oct 18, 2026 |
| CVE-2026-98683 | Not scored | smb: client: flush dirty data before zeroing a range | Oct 18, 2026 |
| CVE-2026-98682 | Not scored | smb: client: drain and invalidate before server-side copy/clone | Oct 18, 2026 |
| CVE-2026-98681 | Not scored | smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races | Oct 18, 2026 |
| CVE-2026-98680 | Not scored | iio: accel: kionix-kx022a: Prevent memory leak and fix state | Oct 18, 2026 |
| CVE-2026-98679 | Not scored | iio: accel: kxcjk-1013: reject duplicate event disable | Oct 18, 2026 |
| CVE-2026-98678 | Not scored | iio: adc: ad4030: fix invalid oversampling_ratio validation | Oct 18, 2026 |
| CVE-2026-98677 | Not scored | iio: adc: ad_sigma_delta: fix use-after-free on unbind | Oct 18, 2026 |
| CVE-2026-98676 | Not scored | iio: adc: ade9000: fix NULL pointer dereference in clkout registration | Oct 18, 2026 |
| CVE-2026-98675 | Not scored | iio: adc: ade9000: handle Phase C dip events in IRQ1 handler | Oct 18, 2026 |
| CVE-2026-98674 | Not scored | iio: adc: adi-axi-adc: Initialize state mutex | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.