Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,116 vulnerabilities match.

CVESeveritySummary
CVE-2026-98551Not scoredperf/core: Fill branch entries with a single assignment
CVE-2026-985507.5 Hightipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
CVE-2026-985499.1 Criticaltcp: prevent collapsing skbs across boundary in rtx queue
CVE-2026-985489.8 Criticalsctp: discard the rest of the packet on a stale-cookie error
CVE-2026-98547Not scoredaf_packet: fix integer overflow in prb_calc_retire_blk_tmo()
CVE-2026-98546Not scoredarm64/boot: Disable trapping of PMZR_EL0 writes to EL2
CVE-2026-98545Not scoredata: libata-scsi: bound the ATA passthru sense descriptor writes
CVE-2026-98544Not scoredbna: prevent IOC timer rearm during teardown
CVE-2026-985437.3 Highbpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir
CVE-2026-98542Not scoredcgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict
CVE-2026-98541Not scoredfou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT
CVE-2026-98540Not scoredfprobe: Terminate the fgraph_data list when the reservation is not filled
CVE-2026-98539Not scoredfs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga
CVE-2026-98538Not scoredwriteback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes
CVE-2026-98537Not scoredworkqueue: Fix NULL current_pwq deref in flush dependency check
CVE-2026-98536Not scoredwriteback: report a Tasks-RCU quiescent state per cgwb drain pass
CVE-2026-98535Not scoredfsl/fman: Fix clk reference leak in read_dts_node()
CVE-2026-98534Not scoredipe: fix use-after-free when auditing a newly loaded policy
CVE-2026-98533Not scoredipe: protect the dm-verity root hash with RCU
CVE-2026-985328.1 Highipv6: do not let ipv6_find_hdr() return an offset past the packet end
CVE-2026-98531Not scoredipv6: sr: enforce exact attribute length for SEG6_ATTR_DST
CVE-2026-98530Not scoredkprobes: Fix permanent hang when flushing the kprobe optimizer
CVE-2026-98529Not scoredgpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()
CVE-2026-98528Not scoredgpio: cdev: fix kernel stack leak to user-space in error path
CVE-2026-98527Not scoredgpio: zynq: fix runtime PM leak on request error path
CVE-2026-98526Not scoredllc: reserve device headroom for allocated frames
CVE-2026-98525Not scoredmctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()
CVE-2026-985247.8 Highrds: ib: Clear the sg list when mapping an MR fails
CVE-2026-98523Not scoreddrm/client: fix restore of partially initialized client
CVE-2026-98522Not scoreddrm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()
CVE-2026-98521Not scoreddrm/i915: fix incorrect RCU teardown order
CVE-2026-985207.8 Highdrm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping
CVE-2026-98519Not scoreddrm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()
CVE-2026-985187.0 Highdrm/nouveau/dmem: pin VRAM for the whole registered range
CVE-2026-985177.8 Highdrm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM
CVE-2026-98516Not scoreddrm/nouveau: Fix bridge reference leak in nv1a_ram_new()
CVE-2026-985157.8 Highdrm/nouveau: fix double-free in nvif_vmm_dtor
CVE-2026-98514Not scoreddrm/nouveau: Fix gem reference leak in validate_init()
CVE-2026-98513Not scoreddrm/nouveau: Fix runtime PM leak in nouveau_connector_detect()
CVE-2026-985127.1 Highdrm/nouveau: RCU-free the scheduler-containing nouveau_sched
CVE-2026-98511Not scoreddrm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()
CVE-2026-985107.8 Highdrm/xe/vm: nuke PTs only after unlinking contested VMAs
CVE-2026-98509Not scoreddrm/virtio: fix memory leak of fence event on execbuffer failure
CVE-2026-98508Not scoreddrm/virtio: fix NULL pointer dereference on fence allocation failure
CVE-2026-985077.8 Highmm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish
CVE-2026-98506Not scoredmm/hugetlb: do not dissolve gigantic pages without runtime support
CVE-2026-98505Not scoredmm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()
CVE-2026-98504Not scoredPCI: of_property: Omit bus properties without a subordinate bus
CVE-2026-98503Not scoredpacket: use ubuf_info completion for TX_RING packets
CVE-2026-98502Not scoredHID: alps: unregister DualPoint Stick input device on remove

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.