Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,087 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98622 | Not scored | net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure | Oct 18, 2026 |
| CVE-2026-98621 | Not scored | net: gue: reject invalid REMCSUM offsets | Oct 18, 2026 |
| CVE-2026-98620 | Not scored | net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure | Oct 18, 2026 |
| CVE-2026-98619 | Not scored | net: ethtool: keep rtnl_lock for the ioctl self test | Oct 18, 2026 |
| CVE-2026-98618 | Not scored | eth: fbnic: Handle maximum standalone channels | Oct 18, 2026 |
| CVE-2026-98617 | Not scored | eth: fbnic: use the Rx queue napi pointer to find the napi vector | Oct 18, 2026 |
| CVE-2026-98616 | Not scored | eth: fbnic: reset num_napi when the napi vectors are freed | Oct 18, 2026 |
| CVE-2026-98615 | Not scored | eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox | Oct 18, 2026 |
| CVE-2026-98614 | Not scored | sctp: avoid livelock while updating retransmit path | Oct 18, 2026 |
| CVE-2026-98613 | Not scored | bpf: Bound ownership depth through local kptrs and graph roots | Oct 18, 2026 |
| CVE-2026-98612 | Not scored | net: usb: catc: bound the RX packet length in catc_rx_done() | Oct 18, 2026 |
| CVE-2026-98611 | Not scored | bpf: Check params size before reading reserved fields | Oct 18, 2026 |
| CVE-2026-98610 | Not scored | net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget | Oct 18, 2026 |
| CVE-2026-98609 | Not scored | drm/virtio: fix object leak when drm_gem_handle_create() fails | Oct 18, 2026 |
| CVE-2026-98608 | Not scored | drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() | Oct 18, 2026 |
| CVE-2026-98607 | Not scored | drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() | Oct 18, 2026 |
| CVE-2026-98606 | Not scored | drm/virtio: release the GEM object on virtio_gpu_vram_create() errors | Oct 18, 2026 |
| CVE-2026-98605 | Not scored | drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach | Oct 18, 2026 |
| CVE-2026-98604 | Not scored | ovpn: replace bind when learning local endpoint | Oct 18, 2026 |
| CVE-2026-98603 | Not scored | ovpn: replace bind when clearing stale local source | Oct 18, 2026 |
| CVE-2026-98602 | Not scored | Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough | Oct 18, 2026 |
| CVE-2026-98601 | Not scored | Bluetooth: btintel_pcie: validate device-supplied DMA indices | Oct 18, 2026 |
| CVE-2026-98600 | Not scored | Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() | Oct 18, 2026 |
| CVE-2026-98599 | Not scored | bpf: Reject non-negative offsets in stack_slot_obj_get_spi() | Oct 18, 2026 |
| CVE-2026-98598 | Not scored | ipv6: Prevent rt6_insert_exception() for dying fib6_info. | Oct 18, 2026 |
| CVE-2026-98597 | Not scored | net: usb: sr9700: include receive overhead in the length check | Oct 18, 2026 |
| CVE-2026-98596 | Not scored | ipv6: Fix dst leak for uncached routes. | Oct 18, 2026 |
| CVE-2026-98595 | Not scored | udp: remove a disconnected socket from the 4-tuple hash table | Oct 18, 2026 |
| CVE-2026-98594 | Not scored | tg3: clean up PHYLIB resources on probe failure | Oct 18, 2026 |
| CVE-2026-98593 | Not scored | s390/debug: Fix NULL pointer dereference in debug_info_copy() | Oct 18, 2026 |
| CVE-2026-98592 | Not scored | net: spacemit: clear TX descriptor on fragment mapping failure | Oct 18, 2026 |
| CVE-2026-98591 | Not scored | bpf: Fix bounds check for skb-backed dynptrs | Oct 18, 2026 |
| CVE-2026-98590 | Not scored | bpf: Fix bpf_sock context code generation | Oct 18, 2026 |
| CVE-2026-98589 | Not scored | bpf: Reject pkt arguments in mutating subprogs | Oct 18, 2026 |
| CVE-2026-98588 | Not scored | bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc | Oct 18, 2026 |
| CVE-2026-98587 | Not scored | firewire: cdev: fix back-transition for iso_resource_auto client resource | Oct 18, 2026 |
| CVE-2026-98586 | Not scored | sctp: hold asoc or transport before mod_timer() in timer handlers | Oct 18, 2026 |
| CVE-2026-98585 | Not scored | eth: fbnic: Avoid rounding zero ring sizes | Oct 18, 2026 |
| CVE-2026-98584 | Not scored | net/sched: fix potential stack infoleak in em_text_dump() | Oct 18, 2026 |
| CVE-2026-98583 | Not scored | nfc: nfcmrvl: validate helper command length before pull | Oct 18, 2026 |
| CVE-2026-98582 | Not scored | nfc: st21nfca: validate received frame size | Oct 18, 2026 |
| CVE-2026-98581 | Not scored | nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() | Oct 18, 2026 |
| CVE-2026-98580 | Not scored | nfc: llcp: Fix race condition in accept_queue lifecycle | Oct 18, 2026 |
| CVE-2026-98579 | Not scored | nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure | Oct 18, 2026 |
| CVE-2026-98578 | Not scored | nfc: st21nfca: validate ISO15693 inventory length | Oct 18, 2026 |
| CVE-2026-98577 | Not scored | nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() | Oct 18, 2026 |
| CVE-2026-98576 | Not scored | nfc: llcp: fix slab-out-of-bounds reads when logging service names | Oct 18, 2026 |
| CVE-2026-98575 | Not scored | nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() | Oct 18, 2026 |
| CVE-2026-98574 | Not scored | net: bcmgenet: stop Tx NAPI before disabling the queues | Oct 18, 2026 |
| CVE-2026-98573 | Not scored | net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.