CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 11:20 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-99172 New | LI Linux Linux | – | Oct 28 | ipc: drop the mqueue mount with kern_unmount() on setup failure |
| CVE-2026-99171 New | LI Linux Linux | – | Oct 28 | ntfs3: free the sbi after a grace period |
| CVE-2026-99170 New | LI Linux Linux | – | Oct 28 | namespace: a mount that copy_tree() leaves out can't take over a lock |
| CVE-2026-99169 New | LI Linux Linux | – | Oct 28 | futex: Fix mm reuse handling for FUT_OFF_MMSHARED |
| CVE-2026-99168 New | LI Linux Linux | – | Oct 28 | mshv_vtl: Check per-CPU register page before mmap |
| CVE-2026-99167 New | LI Linux Linux | – | Oct 28 | net/sched: fix use-after-free in __tcf_action_put() |
| CVE-2026-99166 New | LI Linux Linux | – | Oct 28 | net: rds: fix uninitialized trans dereference in CM event handler |
| CVE-2026-99165 New | LI Linux Linux | – | Oct 28 | sctp: revalidate output stream after association connect wait |
| CVE-2026-99164 New | LI Linux Linux | – | Oct 28 | spi: imx: fix slab corruption from undersized DMA bounce buffers |
| CVE-2026-99163 New | LI Linux Linux | – | Oct 28 | tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields |
| CVE-2026-99162 New | LI Linux Linux | – | Oct 28 | gpio: shared: fix use-after-free bug when adding shared proxies |
| CVE-2026-99161 New | LI Linux Linux | – | Oct 28 | i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() |
| CVE-2026-99160 New | LI Linux Linux | – | Oct 28 | ring-buffer: Do not show buffer_meta for CPUs without a buffer |
| CVE-2026-99159 New | LI Linux Linux | – | Oct 28 | ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() |
| CVE-2026-99158 New | LI Linux Linux | – | Oct 28 | ring-buffer: Fix false warning in ring_buffer_map_get_reader() |
| CVE-2026-99157 New | LI Linux Linux | – | Oct 28 | scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies |
| CVE-2026-99156 New | LI Linux Linux | – | Oct 28 | scsi: st: Fix use-after-free race between st_remove() and st_open() |
| CVE-2026-99155 New | LI Linux Linux | – | Oct 28 | scsi: xen/scsifront: Check for a NULL shadow entry on a backend response |
| CVE-2026-99154 New | LI Linux Linux | – | Oct 28 | scsi: libiscsi: Reject a negative task index from parse_pdu_itt |
| CVE-2026-99153 New | LI Linux Linux | – | Oct 28 | scsi: libiscsi: Validate the ITT reflected in a Reject PDU |
| CVE-2026-99152 New | LI Linux Linux | – | Oct 28 | scsi: libiscsi: Validate the task named by a management response |
| CVE-2026-99151 New | LI Linux Linux | – | Oct 28 | drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions |
| CVE-2026-99150 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr |
| CVE-2026-99149 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl |
| CVE-2026-99148 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: keep the eviction fence until the last handle is closed |
| CVE-2026-99147 New | LI Linux Linux | – | Oct 28 | drm/exec: don't immediately add prelocked obj to array of locked objs |
| CVE-2026-99146 New | LI Linux Linux | – | Oct 28 | drm/i915/dmc: Add sanity check for DMC load address |
| CVE-2026-99145 New | LI Linux Linux | – | Oct 28 | drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change |
| CVE-2026-99144 New | LI Linux Linux | – | Oct 28 | sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue |
| CVE-2026-99143 New | LI Linux Linux | – | Oct 28 | tracing: Keep the predicate limit separate from program capacity |
| CVE-2026-99142 New | LI Linux Linux | – | Oct 28 | tracing: Check operator stack capacity before pushing |
| CVE-2026-99141 New | LI Linux Linux | – | Oct 28 | tracing: Fix crash in print_graph_function_event() |
| CVE-2026-99140 New | LI Linux Linux | – | Oct 28 | tracing: Fix hist trigger timestamps for buffered events |
| CVE-2026-99139 New | LI Linux Linux | – | Oct 28 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) |
| CVE-2026-99138 New | LI Linux Linux | – | Oct 28 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) |
| CVE-2026-99137 New | LI Linux Linux | – | Oct 28 | cifs: don't update i_size in cifs_do_truncate without a cached handle |
| CVE-2026-99136 New | LI Linux Linux | – | Oct 28 | dm-crypt: fix a tiny race condition in crypt_dec_pending |
| CVE-2026-99135 New | LI Linux Linux | – | Oct 28 | dm-integrity: fix infinite loop on discard with large tag size |
| CVE-2026-99134 New | LI Linux Linux | – | Oct 28 | mac802154: fix data race and NULL deref on local->assoc_dev |
| CVE-2026-99133 New | LI Linux Linux | – | Oct 28 | net/iucv: fix the recvmsg window update |
| CVE-2026-99132 New | LI Linux Linux | – | Oct 28 | xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf |
| CVE-2026-99131 New | LI Linux Linux | – | Oct 28 | xfs: fix capability check in xfs |
| CVE-2026-99130 New | LI Linux Linux | – | Oct 28 | io_uring/cancel: don't spin on local work the task can't run |
| CVE-2026-99129 New | LI Linux Linux | – | Oct 28 | selinux: fix BPF token permission checks |
| CVE-2026-99128 New | LI Linux Linux | – | Oct 28 | sctp: validate chunk length in the inqueue parser |
| CVE-2026-99127 New | LI Linux Linux | – | Oct 28 | page_pool: keep frag_offset aligned for odd-sized requests |
| CVE-2026-99126 New | LI Linux Linux | – | Oct 28 | s390/ctcm: Prevent XID null dereference |
| CVE-2026-99125 New | LI Linux Linux | – | Oct 28 | s390/pai: Handle multiple PMU stop callback invocations |
| CVE-2026-99124 New | LI Linux Linux | – | Oct 28 | s390/pci: Fix leak of uninitialized kernel data in SCLP report |
| CVE-2026-99123 New | LI Linux Linux | – | Oct 28 | vsock/virtio: validate packet source for connected sockets |