Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,321 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-99184 | Not scored | accel/rocket: search every core slot when a core is removed | Oct 28, 2026 |
| CVE-2026-99183 | Not scored | accel/rocket: search every core slot when looking up a scheduler | Oct 28, 2026 |
| CVE-2026-99182 | Not scored | ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture | Oct 28, 2026 |
| CVE-2026-99181 | Not scored | autofs: ignore notification errors from a replaced pipe | Oct 28, 2026 |
| CVE-2026-99180 | Not scored | unicode: free the map after a grace period | Oct 28, 2026 |
| CVE-2026-99179 | Not scored | watch_queue: Fix note pool publication race in watch_queue_set_size() | Oct 28, 2026 |
| CVE-2026-99178 | Not scored | x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context | Oct 28, 2026 |
| CVE-2026-99177 | Not scored | KVM: SEV: Fix page dirtying in sev_gmem_post_populate() | Oct 28, 2026 |
| CVE-2026-99176 | Not scored | KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry | Oct 28, 2026 |
| CVE-2026-99175 | Not scored | fsnotify: prevent mark additions during connector teardown | Oct 28, 2026 |
| CVE-2026-99174 | Not scored | ext4: free the sbi after a grace period | Oct 28, 2026 |
| CVE-2026-99173 | Not scored | eventfs: Free the eventfs_inode after an rcu grace period too | Oct 28, 2026 |
| CVE-2026-99172 | Not scored | ipc: drop the mqueue mount with kern_unmount() on setup failure | Oct 28, 2026 |
| CVE-2026-99171 | Not scored | ntfs3: free the sbi after a grace period | Oct 28, 2026 |
| CVE-2026-99170 | Not scored | namespace: a mount that copy_tree() leaves out can't take over a lock | Oct 28, 2026 |
| CVE-2026-99169 | Not scored | futex: Fix mm reuse handling for FUT_OFF_MMSHARED | Oct 28, 2026 |
| CVE-2026-99168 | Not scored | mshv_vtl: Check per-CPU register page before mmap | Oct 28, 2026 |
| CVE-2026-99167 | Not scored | net/sched: fix use-after-free in __tcf_action_put() | Oct 28, 2026 |
| CVE-2026-99166 | Not scored | net: rds: fix uninitialized trans dereference in CM event handler | Oct 28, 2026 |
| CVE-2026-99165 | Not scored | sctp: revalidate output stream after association connect wait | Oct 28, 2026 |
| CVE-2026-99164 | Not scored | spi: imx: fix slab corruption from undersized DMA bounce buffers | Oct 28, 2026 |
| CVE-2026-99163 | Not scored | tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields | Oct 28, 2026 |
| CVE-2026-99162 | Not scored | gpio: shared: fix use-after-free bug when adding shared proxies | Oct 28, 2026 |
| CVE-2026-99161 | Not scored | i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() | Oct 28, 2026 |
| CVE-2026-99160 | Not scored | ring-buffer: Do not show buffer_meta for CPUs without a buffer | Oct 28, 2026 |
| CVE-2026-99159 | Not scored | ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() | Oct 28, 2026 |
| CVE-2026-99158 | Not scored | ring-buffer: Fix false warning in ring_buffer_map_get_reader() | Oct 28, 2026 |
| CVE-2026-99157 | Not scored | scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies | Oct 28, 2026 |
| CVE-2026-99156 | Not scored | scsi: st: Fix use-after-free race between st_remove() and st_open() | Oct 28, 2026 |
| CVE-2026-99155 | Not scored | scsi: xen/scsifront: Check for a NULL shadow entry on a backend response | Oct 28, 2026 |
| CVE-2026-99154 | Not scored | scsi: libiscsi: Reject a negative task index from parse_pdu_itt | Oct 28, 2026 |
| CVE-2026-99153 | Not scored | scsi: libiscsi: Validate the ITT reflected in a Reject PDU | Oct 28, 2026 |
| CVE-2026-99152 | Not scored | scsi: libiscsi: Validate the task named by a management response | Oct 28, 2026 |
| CVE-2026-99151 | Not scored | drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions | Oct 28, 2026 |
| CVE-2026-99150 | Not scored | drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr | Oct 28, 2026 |
| CVE-2026-99149 | Not scored | drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl | Oct 28, 2026 |
| CVE-2026-99148 | Not scored | drm/amdgpu: keep the eviction fence until the last handle is closed | Oct 28, 2026 |
| CVE-2026-99147 | Not scored | drm/exec: don't immediately add prelocked obj to array of locked objs | Oct 28, 2026 |
| CVE-2026-99146 | Not scored | drm/i915/dmc: Add sanity check for DMC load address | Oct 28, 2026 |
| CVE-2026-99145 | Not scored | drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change | Oct 28, 2026 |
| CVE-2026-99144 | Not scored | sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue | Oct 28, 2026 |
| CVE-2026-99143 | Not scored | tracing: Keep the predicate limit separate from program capacity | Oct 28, 2026 |
| CVE-2026-99142 | Not scored | tracing: Check operator stack capacity before pushing | Oct 28, 2026 |
| CVE-2026-99141 | Not scored | tracing: Fix crash in print_graph_function_event() | Oct 28, 2026 |
| CVE-2026-99140 | Not scored | tracing: Fix hist trigger timestamps for buffered events | Oct 28, 2026 |
| CVE-2026-99139 | Not scored | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) | Oct 28, 2026 |
| CVE-2026-99138 | Not scored | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) | Oct 28, 2026 |
| CVE-2026-99137 | Not scored | cifs: don't update i_size in cifs_do_truncate without a cached handle | Oct 28, 2026 |
| CVE-2026-99136 | Not scored | dm-crypt: fix a tiny race condition in crypt_dec_pending | Oct 28, 2026 |
| CVE-2026-99135 | Not scored | dm-integrity: fix infinite loop on discard with large tag size | Oct 28, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.