Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,116 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-98501 | 7.1 High | HID: alps: fix use-after-free on input2 registration failure | Oct 18, 2026 |
| CVE-2026-98500 | Not scored | HID: hid-oxp: use cancel_delayed_work_sync() in remove | Oct 18, 2026 |
| CVE-2026-98499 | 8.1 High | HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() | Oct 18, 2026 |
| CVE-2026-98498 | Not scored | net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() | Oct 18, 2026 |
| CVE-2026-98497 | 7.5 High | net/mlx5e: fix swapped IPv6 IPsec policy masks | Oct 18, 2026 |
| CVE-2026-98496 | Not scored | net: airoha: npu: cancel wdt_work after releasing the WDT IRQ | Oct 18, 2026 |
| CVE-2026-98495 | Not scored | net: arp: terminate device name before lookup | Oct 18, 2026 |
| CVE-2026-98494 | Not scored | net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read | Oct 18, 2026 |
| CVE-2026-98493 | Not scored | net: ipconfig: bound DHCP option construction | Oct 18, 2026 |
| CVE-2026-98492 | Not scored | net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths | Oct 18, 2026 |
| CVE-2026-98491 | 7.8 High | net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry | Oct 18, 2026 |
| CVE-2026-98490 | 9.8 Critical | net: openvswitch: conntrack: fix helper UAF due to extensions realloc | Oct 18, 2026 |
| CVE-2026-98489 | Not scored | net: atl1c: fix soft lockup on out-of-range tpd_cons read | Oct 18, 2026 |
| CVE-2026-98488 | Not scored | net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read | Oct 18, 2026 |
| CVE-2026-98487 | 7.8 High | net: bridge: mdb: restart port group walk after deletion | Oct 18, 2026 |
| CVE-2026-98486 | Not scored | net: ena: fix MMIO read buffer leak on probe failure | Oct 18, 2026 |
| CVE-2026-98485 | 7.1 High | netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read | Oct 18, 2026 |
| CVE-2026-98484 | Not scored | netfilter: nf_tables: skip expired catchall elements on insert and delete | Oct 18, 2026 |
| CVE-2026-98483 | Not scored | nfc: fix use-after-free in nfc_get_local_general_bytes | Oct 18, 2026 |
| CVE-2026-98482 | Not scored | nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() | Oct 18, 2026 |
| CVE-2026-98481 | Not scored | nfc: port100: reject frames whose declared length exceeds the received data | Oct 18, 2026 |
| CVE-2026-98480 | Not scored | nfc: trf7970a: power down on startup RX gain failure | Oct 18, 2026 |
| CVE-2026-98479 | 7.5 High | scsi: libiscsi_tcp: Check the data direction of a Data-In PDU | Oct 18, 2026 |
| CVE-2026-98478 | Not scored | scsi: ufs: core: Keep internal commands dispatchable during error handling | Oct 18, 2026 |
| CVE-2026-98477 | Not scored | perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() | Oct 18, 2026 |
| CVE-2026-98476 | Not scored | s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() | Oct 18, 2026 |
| CVE-2026-98475 | Not scored | s390/cmf: Fix virtual vs physical address confusion | Oct 18, 2026 |
| CVE-2026-98474 | Not scored | s390/pci: Fix missing device lock in zpci_report_status() | Oct 18, 2026 |
| CVE-2026-98473 | Not scored | s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config | Oct 18, 2026 |
| CVE-2026-98472 | Not scored | KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV | Oct 18, 2026 |
| CVE-2026-98471 | 7.1 High | KVM: SEV: Do cache maintenance on the source VM during intra-host migration | Oct 18, 2026 |
| CVE-2026-98470 | Not scored | KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode | Oct 18, 2026 |
| CVE-2026-98469 | 7.1 High | KVM: arm64: Fix AArch32 DBGBXVR<n> handling | Oct 18, 2026 |
| CVE-2026-98468 | Not scored | KVM: arm64: Fix spurious warning for benign stage 2 teardown race | Oct 18, 2026 |
| CVE-2026-98467 | Not scored | KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race | Oct 18, 2026 |
| CVE-2026-98466 | 8.2 High | KVM: arm64: Transfer the hyp stack pages out of the host stage-2 | Oct 18, 2026 |
| CVE-2026-98465 | 7.0 High | RISC-V: KVM: Serialize IMSIC attributes with vCPU migration | Oct 18, 2026 |
| CVE-2026-98464 | 9.3 Critical | RISC-V: KVM: Synchronize hrtimer callback during teardown | Oct 18, 2026 |
| CVE-2026-98463 | Not scored | sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags | Oct 18, 2026 |
| CVE-2026-98462 | Not scored | Bluetooth: hci_conn: fix CIS hold ownership on reuse | Oct 18, 2026 |
| CVE-2026-98461 | Not scored | Bluetooth: hci_sock: validate event length before filtering | Oct 18, 2026 |
| CVE-2026-98460 | Not scored | Bluetooth: hci_sock: reject out-of-range OCF values | Oct 18, 2026 |
| CVE-2026-98459 | Not scored | Bluetooth: ISO: balance the parent hold in hci_bind_bis() | Oct 18, 2026 |
| CVE-2026-98458 | Not scored | Bluetooth: ISO: release unused CIS holds after channel attach | Oct 18, 2026 |
| CVE-2026-98457 | Not scored | Bluetooth: L2CAP: validate frame length before control and FCS access | Oct 18, 2026 |
| CVE-2026-98456 | 7.0 High | Bluetooth: mgmt: fix race in read_unconf_index_list() | Oct 18, 2026 |
| CVE-2026-98455 | Not scored | Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO | Oct 18, 2026 |
| CVE-2026-98454 | 8.1 High | smb: client: fix create context out-of-bounds reads | Oct 18, 2026 |
| CVE-2026-98453 | Not scored | smb: client: close handle after create-context parsing failure | Oct 18, 2026 |
| CVE-2026-98452 | Not scored | smb: client: clean up failed cached directory opens | Oct 18, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.