Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,705 vulnerabilities match.

CVESeveritySummary
CVE-2026-99039Not scoredmemstick: core: wait for request completion before freeing card
CVE-2026-99038Not scoredmemstick: rtsx_usb_ms: complete requests after eject instead of dropping them
CVE-2026-99037Not scoreddm-crypt: reject the lmk IV mode with AEAD ciphers
CVE-2026-99036Not scoreddm: fix reading free memory in do_resume
CVE-2026-99035Not scoredmmc: mtk-sd: Cancel request timeout work on remove
CVE-2026-99034Not scoredmmc: sdhci-sprd: disable runtime PM on remove
CVE-2026-99033Not scorednet/packet: guard the ll header push in packet_rcv_spkt()
CVE-2026-990327.8 Highnet/smc: protect clcsock lifetime in smc_getname
CVE-2026-99031Not scorednet: bridge: avoid recursive multicast port cleanup
CVE-2026-990307.5 Highnet: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()
CVE-2026-99029Not scorednet: sparx5: free the matchall entry on destroy
CVE-2026-99028Not scorednet: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop
CVE-2026-99027Not scorednet: team: stop reusing skb after queue override
CVE-2026-99026Not scorednet: team: free skb when broadcast has no txable port
CVE-2026-554224.6 Mediumconda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard
CVE-2026-99025Not scoredopenvswitch: fix soft lockup in the netlink flow dump
CVE-2026-99024Not scoredoptee: register TEE devices only once fully initialized
CVE-2026-99023Not scoredpower: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()
CVE-2026-99022Not scoredregulator: ltc3676: don't read the write-only HRST and CLIRQ registers
CVE-2026-99021Not scoredregulator: of: fill in supply names in of_regulator_bulk_get_all()
CVE-2026-99020Not scoredregulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4
CVE-2026-99019Not scoredscsi: ch: Do not keep references to data transfer element devices
CVE-2026-990187.8 Highriscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
CVE-2026-990177.0 Highriscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE
CVE-2026-990167.8 Highriscv: futex: untag the user pointer before the atomic access
CVE-2026-99015Not scoredBluetooth: hci_sock: Serialize dead-device detachment
CVE-2026-990147.8 HighBluetooth: hci_sync: Fix command skb lifetime during scan setup
CVE-2026-990137.8 HighBluetooth: ISO: Reject concurrent BIS listener setup
CVE-2026-990127.8 HighBluetooth: ISO: Serialize concurrent connect calls
CVE-2026-990117.1 HighBluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()
CVE-2026-99010Not scoredBluetooth: RFCOMM: free the skb when the DLC has no owner
CVE-2026-99009Not scoredBluetooth: RFCOMM: connect the session socket without rfcomm_mutex
CVE-2026-99008Not scoredBluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown
CVE-2026-99007Not scoreddrm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN
CVE-2026-990067.8 Highdrm/i915/gem: Prevent overstepping exec array boundary
CVE-2026-99005Not scoreddrm/i915/gt: Unmask interrupts only when ACTIVE is true
CVE-2026-99004Not scoreddrm/imagination: Size page table preallocation by device address
CVE-2026-99003Not scoreddrm/panthor: validate userspace queue count against initialized firmware slot count
CVE-2026-990027.8 Highdrm/vmwgfx: validate pitch coming from userspace
CVE-2026-99001Not scoreddrm/xe/i2c: cancel the client work on remove
CVE-2026-99000Not scoreddrm/xe: Fix shrinker accounting double-subtraction on nested external pins
CVE-2026-989997.8 Highdrm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin
CVE-2026-98998Not scoreddrm/bridge: th1520-dw-hdmi: Fix remove() callback
CVE-2026-98997Not scoreddrm/amdgpu/userq: only accept doorbell BOs as queue doorbell
CVE-2026-98996Not scoredfs: don't silently unmount busy mounts
CVE-2026-989957.8 Highnamespace: reset the old parent's ->overmount in mnt_change_mountpoint()
CVE-2026-98994Not scoredstatmount: read the parent of an unmounted mount under mount_lock
CVE-2026-989937.8 Highnamespace: don't inherit MNT_UMOUNT in clone_mnt()
CVE-2026-98992Not scorednamespace: don't copy an unmounted mount tree
CVE-2026-989917.8 Highnamespace: queue a mount only once for mount notifications

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.