Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,206 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-99168 | Not scored | mshv_vtl: Check per-CPU register page before mmap | Oct 28, 2026 |
| CVE-2026-99167 | Not scored | net/sched: fix use-after-free in __tcf_action_put() | Oct 28, 2026 |
| CVE-2026-99166 | Not scored | net: rds: fix uninitialized trans dereference in CM event handler | Oct 28, 2026 |
| CVE-2026-99165 | Not scored | sctp: revalidate output stream after association connect wait | Oct 28, 2026 |
| CVE-2026-99164 | Not scored | spi: imx: fix slab corruption from undersized DMA bounce buffers | Oct 28, 2026 |
| CVE-2026-99163 | Not scored | tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields | Oct 28, 2026 |
| CVE-2026-99162 | Not scored | gpio: shared: fix use-after-free bug when adding shared proxies | Oct 28, 2026 |
| CVE-2026-99161 | Not scored | i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() | Oct 28, 2026 |
| CVE-2026-99160 | Not scored | ring-buffer: Do not show buffer_meta for CPUs without a buffer | Oct 28, 2026 |
| CVE-2026-99159 | Not scored | ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() | Oct 28, 2026 |
| CVE-2026-99158 | Not scored | ring-buffer: Fix false warning in ring_buffer_map_get_reader() | Oct 28, 2026 |
| CVE-2026-99157 | Not scored | scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies | Oct 28, 2026 |
| CVE-2026-99156 | Not scored | scsi: st: Fix use-after-free race between st_remove() and st_open() | Oct 28, 2026 |
| CVE-2026-99155 | Not scored | scsi: xen/scsifront: Check for a NULL shadow entry on a backend response | Oct 28, 2026 |
| CVE-2026-99154 | Not scored | scsi: libiscsi: Reject a negative task index from parse_pdu_itt | Oct 28, 2026 |
| CVE-2026-99153 | Not scored | scsi: libiscsi: Validate the ITT reflected in a Reject PDU | Oct 28, 2026 |
| CVE-2026-99152 | Not scored | scsi: libiscsi: Validate the task named by a management response | Oct 28, 2026 |
| CVE-2026-99151 | Not scored | drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions | Oct 28, 2026 |
| CVE-2026-99150 | Not scored | drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr | Oct 28, 2026 |
| CVE-2026-99149 | Not scored | drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl | Oct 28, 2026 |
| CVE-2026-99148 | Not scored | drm/amdgpu: keep the eviction fence until the last handle is closed | Oct 28, 2026 |
| CVE-2026-99147 | Not scored | drm/exec: don't immediately add prelocked obj to array of locked objs | Oct 28, 2026 |
| CVE-2026-99146 | Not scored | drm/i915/dmc: Add sanity check for DMC load address | Oct 28, 2026 |
| CVE-2026-99145 | Not scored | drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change | Oct 28, 2026 |
| CVE-2026-99144 | Not scored | sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue | Oct 28, 2026 |
| CVE-2026-99143 | Not scored | tracing: Keep the predicate limit separate from program capacity | Oct 28, 2026 |
| CVE-2026-99142 | Not scored | tracing: Check operator stack capacity before pushing | Oct 28, 2026 |
| CVE-2026-99141 | Not scored | tracing: Fix crash in print_graph_function_event() | Oct 28, 2026 |
| CVE-2026-99140 | Not scored | tracing: Fix hist trigger timestamps for buffered events | Oct 28, 2026 |
| CVE-2026-99139 | Not scored | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) | Oct 28, 2026 |
| CVE-2026-99138 | Not scored | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) | Oct 28, 2026 |
| CVE-2026-99137 | Not scored | cifs: don't update i_size in cifs_do_truncate without a cached handle | Oct 28, 2026 |
| CVE-2026-99136 | Not scored | dm-crypt: fix a tiny race condition in crypt_dec_pending | Oct 28, 2026 |
| CVE-2026-99135 | Not scored | dm-integrity: fix infinite loop on discard with large tag size | Oct 28, 2026 |
| CVE-2026-99134 | Not scored | mac802154: fix data race and NULL deref on local->assoc_dev | Oct 28, 2026 |
| CVE-2026-99133 | Not scored | net/iucv: fix the recvmsg window update | Oct 28, 2026 |
| CVE-2026-99132 | Not scored | xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf | Oct 28, 2026 |
| CVE-2026-99131 | Not scored | xfs: fix capability check in xfs | Oct 28, 2026 |
| CVE-2026-99130 | Not scored | io_uring/cancel: don't spin on local work the task can't run | Oct 28, 2026 |
| CVE-2026-99129 | Not scored | selinux: fix BPF token permission checks | Oct 28, 2026 |
| CVE-2026-99128 | Not scored | sctp: validate chunk length in the inqueue parser | Oct 28, 2026 |
| CVE-2026-99127 | Not scored | page_pool: keep frag_offset aligned for odd-sized requests | Oct 28, 2026 |
| CVE-2026-99126 | Not scored | s390/ctcm: Prevent XID null dereference | Oct 28, 2026 |
| CVE-2026-99125 | Not scored | s390/pai: Handle multiple PMU stop callback invocations | Oct 28, 2026 |
| CVE-2026-99124 | Not scored | s390/pci: Fix leak of uninitialized kernel data in SCLP report | Oct 28, 2026 |
| CVE-2026-99123 | Not scored | vsock/virtio: validate packet source for connected sockets | Oct 28, 2026 |
| CVE-2026-99122 | Not scored | vsock/vmci: validate packet source for connected sockets | Oct 28, 2026 |
| CVE-2026-99121 | Not scored | ipv4: avoid divide by zero in fib_rebalance | Oct 28, 2026 |
| CVE-2026-99120 | Not scored | KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes | Oct 28, 2026 |
| CVE-2026-99119 | Not scored | drm/amdgpu/userq: actually validate userq BOs | Oct 28, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.