CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 21:15 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89639 | LI Linux Linux | 7.1 | Sep 11 | cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC |
| CVE-2026-89638 | LI Linux Linux | 7.8 | Sep 11 | smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions |
| CVE-2026-89632 | LI Linux Linux | 8.2 | Sep 11 | smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() |
| CVE-2026-89626 | LI Linux Linux | 8.8 | Sep 11 | HID: sensor: custom: Fix field sysfs group cleanup on failure |
| CVE-2026-89624 | LI Linux Linux | 7.8 | Sep 11 | HID: universal-pidff: stop the device when force-feedback init fails |
| CVE-2026-89622 | LI Linux Linux | 7.8 | Sep 11 | HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes |
| CVE-2026-89620 | LI Linux Linux | 7.8 | Sep 11 | HID: intel-thc-hid: intel-quickspi: validate report size before copy |
| CVE-2026-89619 | LI Linux Linux | 7.8 | Sep 11 | HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer |
| CVE-2026-89617 | LI Linux Linux | 7.8 | Sep 11 | fs/ntfs3: validate dirty page table on log replay |
| CVE-2026-89616 | LI Linux Linux | 7.5 | Sep 11 | fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() |
| CVE-2026-89615 | LI Linux Linux | 8.4 | Sep 11 | fs/ntfs3: bound page_lcns[] index by the log record |
| CVE-2026-89609 | LI Linux Linux | 7.8 | Sep 11 | ecryptfs: hold msg ctx list lock when cleaning daemon queue |
| CVE-2026-89608 | LI Linux Linux | 7.1 | Sep 11 | ecryptfs: pass packet set buffer size to parser |
| CVE-2026-89607 | LI Linux Linux | 7.8 | Sep 11 | ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet |
| CVE-2026-89606 | LI Linux Linux | 7.8 | Sep 11 | ecryptfs: reject too-small tag 70 packets |
| CVE-2026-89605 | LI Linux Linux | 7.8 | Sep 11 | ecryptfs: release message context on send failure |
| CVE-2026-89602 | LI Linux Linux | 7.8 | Sep 11 | erofs: skip sufficiently large global buffers when resizing |
| CVE-2026-89601 | LI Linux Linux | 8.8 | Sep 11 | ext2: Fix lost inode updates for IS_SYNC inodes |
| CVE-2026-89600 | LI Linux Linux | 7.8 | Sep 11 | fanotify: fix use-after-free of file range info |
| CVE-2026-89599 | LI Linux Linux | 8.4 | Sep 11 | fbdev: omapfb: panel-dsi-cm: initialize lock before registering display |
| CVE-2026-89597 | LI Linux Linux | 7.8 | Sep 11 | fbdev: uvesafb: unregister connector callback on init failure |
| CVE-2026-89596 | LI Linux Linux | 7.1 | Sep 11 | forcedeth: fix off-by-one when saving/restoring non-PCI config space |
| CVE-2026-89594 | LI Linux Linux | 7.8 | Sep 11 | hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device |
| CVE-2026-89593 | LI Linux Linux | 7.1 | Sep 11 | hugetlb: only adjust reservation during unmapping if mapcount is 0 |
| CVE-2026-89588 | LI Linux Linux | 8.4 | Sep 11 | ACPI: APEI: GHES: fix ARM section length accounting after header |
| CVE-2026-89587 | LI Linux Linux | 7.8 | Sep 11 | ACPI: pfr_update: fix stack buffer overflow in query_capability() |
| CVE-2026-89586 | LI Linux Linux | 8.2 | Sep 11 | ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes |
| CVE-2026-89585 | LI Linux Linux | 7.8 | Sep 11 | auxdisplay: charlcd: cancel backlight work on registration failure |
| CVE-2026-89584 | LI Linux Linux | 7.8 | Sep 11 | block: validate user space vectors during extraction |
| CVE-2026-89583 | LI Linux Linux | 8.1 | Sep 11 | Bluetooth: eir: Fix OOB read in eir_get_service_data() |
| CVE-2026-89581 | LI Linux Linux | 7.8 | Sep 11 | bpf, x86: Fix per-CPU address resolution into an extended register |
| CVE-2026-89580 | LI Linux Linux | 7.8 | Sep 11 | bpf: Disable preemption in __bpf_get_stack |
| CVE-2026-89579 | LI Linux Linux | 7.8 | Sep 11 | bpf: Harden bloom filter sizing and indexing on 32-bit kernels |
| CVE-2026-89574 | LI Linux Linux | 7.8 | Sep 11 | dm array: validate array block headers on read |
| CVE-2026-89573 | LI Linux Linux | 7.8 | Sep 11 | dm array: reject an array block whose value size is not the caller's |
| CVE-2026-89571 | LI Linux Linux | 7.1 | Sep 11 | cxl/features: bound fwctl command payload to the input buffer |
| CVE-2026-54135 | AI AirSane SimulPiscator | 7.5 | Sep 11 | AirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Server |
| CVE-2026-89570 | LI Linux Linux | 7.8 | Sep 11 | cxl/mce: Make the MCE notifier per-region |
| CVE-2026-89569 | LI Linux Linux | 8.8 | Sep 11 | Bluetooth: RFCOMM: serialize security confirmation handling |
| CVE-2026-89564 | LI Linux Linux | 7.8 | Sep 11 | ip: orphan prefetched skbs before multicast forwarding |
| CVE-2026-89563 | LI Linux Linux | 7.8 | Sep 11 | ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() |
| CVE-2026-89562 | LI Linux Linux | 7.8 | Sep 11 | ip6_gre: fix hardware header length for NBMA tunnels |
| CVE-2026-89561 | LI Linux Linux | 7.5 | Sep 11 | ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() |
| CVE-2026-89560 | LI Linux Linux | 8.4 | Sep 11 | landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation |
| CVE-2026-89559 | LI Linux Linux | 7.8 | Sep 11 | libnvdimm/labels: Prevent integer overflow in __nd_label_validate() |
| CVE-2026-89557 | LI Linux Linux | 7.8 | Sep 11 | md: do overflow check for sb->bblog_shift in super_1_load() |
| CVE-2026-89554 | LI Linux Linux | 8.2 | Sep 11 | mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction |
| CVE-2026-89553 | LI Linux Linux | 7.8 | Sep 11 | nouveau/gem: reserve the bo in the info ioctl around the vma lookup |
| CVE-2026-89549 | LI Linux Linux | 7.5 | Sep 11 | sunrpc: route to a populated pool in svc_pool_for_cpu() |
| CVE-2026-89548 | LI Linux Linux | 7.8 | Sep 11 | SUNRPC: always drain cache_cleaner before destroying a cache_detail |