CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 21:15 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89547 | LI Linux Linux | 8.1 | Sep 11 | SUNRPC: Check svc pool percpu counter allocation |
| CVE-2026-89545 | LI Linux Linux | 7.8 | Sep 11 | sunrpc: defer rq_argp and rq_resp free until after RCU grace period |
| CVE-2026-89544 | LI Linux Linux | 7.5 | Sep 11 | SUNRPC: fix gssx_dec_option_array error path bugs |
| CVE-2026-89540 | LI Linux Linux | 7.8 | Sep 11 | sunrpc: init gssp_lock before publishing proc entry |
| CVE-2026-89535 | LI Linux Linux | 8.1 | Sep 11 | svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id |
| CVE-2026-89534 | LI Linux Linux | 8.8 | Sep 11 | svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails |
| CVE-2026-89528 | LI Linux Linux | 7.5 | Sep 11 | svcrdma: Reject Read lists that exceed the page budget |
| CVE-2026-89524 | LI Linux Linux | 8.1 | Sep 11 | wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets |
| CVE-2026-89523 | LI Linux Linux | 7.8 | Sep 11 | wifi: mt76: mt7925: cancel pending mlo_pm_work |
| CVE-2026-89522 | LI Linux Linux | 7.8 | Sep 11 | media: staging/ipu7: fix async notifier UAF on probe error path |
| CVE-2026-89521 | LI Linux Linux | 7.3 | Sep 11 | sched/core: Handle pick_task() releasing the rq lock |
| CVE-2026-89520 | LI Linux Linux | 7.8 | Sep 11 | sched/core: Make core-sched flips wait for in-flight selections |
| CVE-2026-89513 | LI Linux Linux | 8.8 | Sep 11 | RISC-V: KVM: Fix PMU event info array size overflow |
| CVE-2026-89511 | LI Linux Linux | 7.5 | Sep 11 | qede: Fix NULL pointer dereference in TPA fragment processing |
| CVE-2026-89510 | LI Linux Linux | 7.8 | Sep 11 | RDMA/cxgb4: Cancel reg_work before freeing device on remove |
| CVE-2026-89508 | LI Linux Linux | 7.8 | Sep 11 | RDMA/ucma: Lock the handler in ucma_set_ib_path() |
| CVE-2026-89507 | LI Linux Linux | 7.8 | Sep 11 | RDMA/ucma: Lock the handler in ucma_write_cm_event() |
| CVE-2026-89504 | LI Linux Linux | 8.4 | Sep 11 | regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer |
| CVE-2026-89503 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() |
| CVE-2026-89501 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Hold cpu_buffer::lock when resizing a subbuf |
| CVE-2026-89500 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page |
| CVE-2026-89499 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Stop remote reader update when page swap fails |
| CVE-2026-89497 | LI Linux Linux | 7.8 | Sep 11 | orangefs: skip leading spaces before parsing client debug masks |
| CVE-2026-89493 | LI Linux Linux | 8.8 | Sep 11 | ocfs2: validate rl_used against rl_count in refcount block validator |
| CVE-2026-89489 | LI Linux Linux | 7.8 | Sep 11 | openrisc: fix arbitrary kernel memory access via or1k_atomic syscall |
| CVE-2026-89488 | LI Linux Linux | 7.8 | Sep 11 | openvswitch: Fix CT limit teardown use-after-free |
| CVE-2026-89487 | LI Linux Linux | 7.8 | Sep 11 | openvswitch: only skb_tx_error() a packet we are about to drop |
| CVE-2026-89486 | LI Linux Linux | 7.8 | Sep 11 | ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() |
| CVE-2026-89483 | LI Linux Linux | 7.5 | Sep 11 | nvme: zero the discard fallback page |
| CVE-2026-89481 | LI Linux Linux | 7.5 | Sep 11 | nvme-tcp: fix host memory disclosure on R2T for a read command |
| CVE-2026-89480 | LI Linux Linux | 7.5 | Sep 11 | nvme-tcp: reject a read that transferred too few bytes |
| CVE-2026-89477 | LI Linux Linux | 7.5 | Sep 11 | sctp: fix NULL deref on untransmitted RECONF completion |
| CVE-2026-89476 | LI Linux Linux | 7.5 | Sep 11 | sctp: fix stream->outcnt underflow on duplicate RECONF responses |
| CVE-2026-89472 | LI Linux Linux | 7.8 | Sep 11 | power: supply: charger-manager: register regulators before exposing sysfs |
| CVE-2026-89471 | LI Linux Linux | 8.4 | Sep 11 | power: supply: cros_usbpd-charger: bound the EC-reported port count |
| CVE-2026-89470 | LI Linux Linux | 8.4 | Sep 11 | power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS |
| CVE-2026-89469 | LI Linux Linux | 8.4 | Sep 11 | power: supply: lp8727: fix use-after-free in lp8727_release_irq() |
| CVE-2026-89466 | LI Linux Linux | 7.7 | Sep 11 | power: supply: qcom_battmgr: terminate the strings from firmware |
| CVE-2026-89465 | LI Linux Linux | 8.4 | Sep 11 | power: supply: rt9455: quiesce delayed work before teardown |
| CVE-2026-89459 | LI Linux Linux | 7.0 | Sep 11 | s390/percpu: Fix MVIY_PERCPU() with older binutils |
| CVE-2026-89456 | LI Linux Linux | 7.0 | Sep 11 | s390/dasd: Propagate partial completion length across ERP recovery |
| CVE-2026-89452 | LI Linux Linux | 8.4 | Sep 11 | iommu/msm: Unwind probe state on registration failure |
| CVE-2026-89450 | LI Linux Linux | 8.8 | Sep 11 | iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field |
| CVE-2026-89445 | LI Linux Linux | 8.8 | Sep 11 | iommufd: Fix UAF in selftest IOPF reporting |
| CVE-2026-89443 | LI Linux Linux | 7.1 | Sep 11 | platform/x86: ISST: Validate level in perf mask ioctls |
| CVE-2026-89442 | LI Linux Linux | 7.8 | Sep 11 | platform/x86: ISST: Validate socket ID in clos_assoc ioctl |
| CVE-2026-89441 | LI Linux Linux | 7.8 | Sep 11 | mmc: via-sdmmc: cancel card-detect work on remove |
| CVE-2026-89440 | LI Linux Linux | 7.8 | Sep 11 | mmc: via-sdmmc: stop card-detect handling on probe failure |
| CVE-2026-89436 | LI Linux Linux | 7.8 | Sep 11 | platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] |
| CVE-2026-81017 | LI Linux Linux | 8.4 | Sep 11 | platform/chrome: sensorhub: Bound the EC-reported sensor number |