CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 19:37 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89521 | LI Linux Linux | 7.3 | Sep 11 | sched/core: Handle pick_task() releasing the rq lock |
| CVE-2026-89520 | LI Linux Linux | 7.8 | Sep 11 | sched/core: Make core-sched flips wait for in-flight selections |
| CVE-2026-89513 | LI Linux Linux | 8.8 | Sep 11 | RISC-V: KVM: Fix PMU event info array size overflow |
| CVE-2026-89511 | LI Linux Linux | 7.5 | Sep 11 | qede: Fix NULL pointer dereference in TPA fragment processing |
| CVE-2026-89510 | LI Linux Linux | 7.8 | Sep 11 | RDMA/cxgb4: Cancel reg_work before freeing device on remove |
| CVE-2026-89508 | LI Linux Linux | 7.8 | Sep 11 | RDMA/ucma: Lock the handler in ucma_set_ib_path() |
| CVE-2026-89507 | LI Linux Linux | 7.8 | Sep 11 | RDMA/ucma: Lock the handler in ucma_write_cm_event() |
| CVE-2026-89504 | LI Linux Linux | 8.4 | Sep 11 | regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer |
| CVE-2026-89503 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() |
| CVE-2026-89501 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Hold cpu_buffer::lock when resizing a subbuf |
| CVE-2026-89500 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page |
| CVE-2026-89499 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Stop remote reader update when page swap fails |
| CVE-2026-89497 | LI Linux Linux | 7.8 | Sep 11 | orangefs: skip leading spaces before parsing client debug masks |
| CVE-2026-89493 | LI Linux Linux | 8.8 | Sep 11 | ocfs2: validate rl_used against rl_count in refcount block validator |
| CVE-2026-89489 | LI Linux Linux | 7.8 | Sep 11 | openrisc: fix arbitrary kernel memory access via or1k_atomic syscall |
| CVE-2026-89488 | LI Linux Linux | 7.8 | Sep 11 | openvswitch: Fix CT limit teardown use-after-free |
| CVE-2026-89487 | LI Linux Linux | 7.8 | Sep 11 | openvswitch: only skb_tx_error() a packet we are about to drop |
| CVE-2026-89486 | LI Linux Linux | 7.8 | Sep 11 | ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() |
| CVE-2026-89483 | LI Linux Linux | 7.5 | Sep 11 | nvme: zero the discard fallback page |
| CVE-2026-89481 | LI Linux Linux | 7.5 | Sep 11 | nvme-tcp: fix host memory disclosure on R2T for a read command |
| CVE-2026-89480 | LI Linux Linux | 7.5 | Sep 11 | nvme-tcp: reject a read that transferred too few bytes |
| CVE-2026-89477 | LI Linux Linux | 7.5 | Sep 11 | sctp: fix NULL deref on untransmitted RECONF completion |
| CVE-2026-89476 | LI Linux Linux | 7.5 | Sep 11 | sctp: fix stream->outcnt underflow on duplicate RECONF responses |
| CVE-2026-89472 | LI Linux Linux | 7.8 | Sep 11 | power: supply: charger-manager: register regulators before exposing sysfs |
| CVE-2026-89471 | LI Linux Linux | 8.4 | Sep 11 | power: supply: cros_usbpd-charger: bound the EC-reported port count |
| CVE-2026-89470 | LI Linux Linux | 8.4 | Sep 11 | power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS |
| CVE-2026-89469 | LI Linux Linux | 8.4 | Sep 11 | power: supply: lp8727: fix use-after-free in lp8727_release_irq() |
| CVE-2026-89466 | LI Linux Linux | 7.7 | Sep 11 | power: supply: qcom_battmgr: terminate the strings from firmware |
| CVE-2026-89465 | LI Linux Linux | 8.4 | Sep 11 | power: supply: rt9455: quiesce delayed work before teardown |
| CVE-2026-89459 | LI Linux Linux | 7.0 | Sep 11 | s390/percpu: Fix MVIY_PERCPU() with older binutils |
| CVE-2026-89456 | LI Linux Linux | 7.0 | Sep 11 | s390/dasd: Propagate partial completion length across ERP recovery |
| CVE-2026-89452 | LI Linux Linux | 8.4 | Sep 11 | iommu/msm: Unwind probe state on registration failure |
| CVE-2026-89450 | LI Linux Linux | 8.8 | Sep 11 | iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field |
| CVE-2026-89445 | LI Linux Linux | 8.8 | Sep 11 | iommufd: Fix UAF in selftest IOPF reporting |
| CVE-2026-89443 | LI Linux Linux | 7.1 | Sep 11 | platform/x86: ISST: Validate level in perf mask ioctls |
| CVE-2026-89442 | LI Linux Linux | 7.8 | Sep 11 | platform/x86: ISST: Validate socket ID in clos_assoc ioctl |
| CVE-2026-89441 | LI Linux Linux | 7.8 | Sep 11 | mmc: via-sdmmc: cancel card-detect work on remove |
| CVE-2026-89440 | LI Linux Linux | 7.8 | Sep 11 | mmc: via-sdmmc: stop card-detect handling on probe failure |
| CVE-2026-89436 | LI Linux Linux | 7.8 | Sep 11 | platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] |
| CVE-2026-81017 | LI Linux Linux | 8.4 | Sep 11 | platform/chrome: sensorhub: Bound the EC-reported sensor number |
| CVE-2026-81016 | LI Linux Linux | 7.7 | Sep 11 | platform/x86/amd/pmc: Propagate SMU errors and validate S2D address |
| CVE-2026-81015 | LI Linux Linux | 7.8 | Sep 11 | platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails |
| CVE-2026-81012 | LI Linux Linux | 8.4 | Sep 11 | platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() |
| CVE-2026-81011 | LI Linux Linux | 7.1 | Sep 11 | platform/x86: hp-bioscfg: pass validated element count to package parsers |
| CVE-2026-81010 | LI Linux Linux | 7.8 | Sep 11 | io_uring/waitid: honor task_work cancellation |
| CVE-2026-81008 | LI Linux Linux | 7.8 | Sep 11 | interconnect: Fix use after free in icc_get() and of_icc_get_by_index() |
| CVE-2026-81007 | LI Linux Linux | 7.1 | Sep 11 | ipmi: ipmb: validate write message length |
| CVE-2026-81006 | LI Linux Linux | 7.8 | Sep 11 | ipmi: Remove all sysfs files on registration failure |
| CVE-2026-81004 | LI Linux Linux | 8.4 | Sep 11 | ipmi:msghandler: Cancel work cleanly on an error |
| CVE-2026-81003 | LI Linux Linux | 8.1 | Sep 11 | net/iucv: filter frames in afiucv_hs_rcv() by ingress device |