CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 12:49 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-99140 New | LI Linux Linux | – | Oct 28 | tracing: Fix hist trigger timestamps for buffered events |
| CVE-2026-99139 New | LI Linux Linux | – | Oct 28 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) |
| CVE-2026-99138 New | LI Linux Linux | – | Oct 28 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) |
| CVE-2026-99137 New | LI Linux Linux | – | Oct 28 | cifs: don't update i_size in cifs_do_truncate without a cached handle |
| CVE-2026-99136 New | LI Linux Linux | – | Oct 28 | dm-crypt: fix a tiny race condition in crypt_dec_pending |
| CVE-2026-99135 New | LI Linux Linux | – | Oct 28 | dm-integrity: fix infinite loop on discard with large tag size |
| CVE-2026-99134 New | LI Linux Linux | – | Oct 28 | mac802154: fix data race and NULL deref on local->assoc_dev |
| CVE-2026-99133 New | LI Linux Linux | – | Oct 28 | net/iucv: fix the recvmsg window update |
| CVE-2026-99132 New | LI Linux Linux | – | Oct 28 | xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf |
| CVE-2026-99131 New | LI Linux Linux | – | Oct 28 | xfs: fix capability check in xfs |
| CVE-2026-99130 New | LI Linux Linux | – | Oct 28 | io_uring/cancel: don't spin on local work the task can't run |
| CVE-2026-99129 New | LI Linux Linux | – | Oct 28 | selinux: fix BPF token permission checks |
| CVE-2026-99128 New | LI Linux Linux | – | Oct 28 | sctp: validate chunk length in the inqueue parser |
| CVE-2026-99127 New | LI Linux Linux | – | Oct 28 | page_pool: keep frag_offset aligned for odd-sized requests |
| CVE-2026-99126 New | LI Linux Linux | – | Oct 28 | s390/ctcm: Prevent XID null dereference |
| CVE-2026-99125 New | LI Linux Linux | – | Oct 28 | s390/pai: Handle multiple PMU stop callback invocations |
| CVE-2026-99124 New | LI Linux Linux | – | Oct 28 | s390/pci: Fix leak of uninitialized kernel data in SCLP report |
| CVE-2026-99123 New | LI Linux Linux | – | Oct 28 | vsock/virtio: validate packet source for connected sockets |
| CVE-2026-99122 New | LI Linux Linux | – | Oct 28 | vsock/vmci: validate packet source for connected sockets |
| CVE-2026-99121 New | LI Linux Linux | – | Oct 28 | ipv4: avoid divide by zero in fib_rebalance |
| CVE-2026-99120 New | LI Linux Linux | – | Oct 28 | KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes |
| CVE-2026-99119 New | LI Linux Linux | – | Oct 28 | drm/amdgpu/userq: actually validate userq BOs |
| CVE-2026-99118 New | LI Linux Linux | – | Oct 28 | drm/i915/dmc: Harden DMC firmware payload parsing |
| CVE-2026-99117 New | LI Linux Linux | – | Oct 28 | net: bridge: mcast: don't truncate the port group walk on teardown |
| CVE-2026-99116 New | LI Linux Linux | – | Oct 28 | net: psp: do not inherit the Rx association on clone |
| CVE-2026-99115 New | LI Linux Linux | – | Oct 28 | ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION |
| CVE-2026-99114 New | LI Linux Linux | – | Oct 28 | ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION |
| CVE-2026-99113 New | LI Linux Linux | – | Oct 28 | ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in |
| CVE-2026-99112 New | LI Linux Linux | – | Oct 28 | net/sched: cls_flower: validate mask pointer after nla_next() |
| CVE-2026-99111 New | LI Linux Linux | – | Oct 28 | smb: client: fix data corruption with concurrent writes and O_TRUNC |
| CVE-2026-99110 New | LI Linux Linux | – | Oct 28 | smb: client: fix heap overflow in cifs_do_set_acl() |
| CVE-2026-99109 New | LI Linux Linux | – | Oct 28 | smb: client: reject SetEA requests that do not fit the request buffer |
| CVE-2026-99108 New | LI Linux Linux | – | Oct 28 | ntfs: fix FITRIM range alignment |
| CVE-2026-99107 New | LI Linux Linux | – | Oct 28 | ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize |
| CVE-2026-99106 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: free the userptr ranges when a CS fails after parser_bos |
| CVE-2026-99105 New | LI Linux Linux | – | Oct 28 | sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ |
| CVE-2026-99104 New | LI Linux Linux | – | Oct 28 | sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor |
| CVE-2026-99103 New | LI Linux Linux | – | Oct 28 | workqueue: Fix unbound pool lifetime for pending pwqs |
| CVE-2026-99102 New | LI Linux Linux | – | Oct 28 | ntfs: take invalidate_lock in ntfs_setattr_size() |
| CVE-2026-99101 New | LI Linux Linux | – | Oct 28 | ntfs: move attribute payload before shrinking its record |
| CVE-2026-110541 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-101272 New | Product not mapped yet | 2.3 | Oct 28 | Incorrect session validation for API-created shredder exports |
| CVE-2026-101274 New | Product not mapped yet | 6.9 | Oct 28 | When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an… |
| CVE-2026-110540 New | PD PowerProtect Data Domain Management Center Dell | 7.1 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-101273 New | Product not mapped yet | 5.3 | Oct 28 | Giftcard enumeration |
| CVE-2026-103792 New | PD PowerProtect Data Domain Management Center Dell | 9.6 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-103779 New | PD PowerProtect Data Domain Dell | 8.3 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-112198 New | ND NoviGest Desktop App Tactis | 8.3 | Oct 28 | Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App |
| CVE-2026-103799 New | PD PowerProtect Data Domain Management Center Dell | 9.6 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-112197 New | ND NoviGest Desktop App Tactis | 9.4 | Oct 28 | Missing Authentication for Critical Function in Tactis' NoviGest Desktop App |