CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 02:57 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-99195 New | LI Linux Linux | – | Oct 28 | net: ethoc: move setting of netops to fix crash |
| CVE-2026-99194 New | LI Linux Linux | – | Oct 28 | net: ethernet: aeroflex: move setting of netops to fix crash |
| CVE-2026-99193 New | LI Linux Linux | – | Oct 28 | net: ti: icssm-prueth: Move setting of netops to fix crash |
| CVE-2026-99192 New | LI Linux Linux | – | Oct 28 | net: bcmgenet: unshare the skb before writing the control block |
| CVE-2026-99191 New | LI Linux Linux | – | Oct 28 | calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() |
| CVE-2026-99190 New | LI Linux Linux | – | Oct 28 | gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths |
| CVE-2026-99189 New | LI Linux Linux | – | Oct 28 | gpio: mxc: fix race between chained IRQ handler install and probe completion |
| CVE-2026-99188 New | LI Linux Linux | – | Oct 28 | net: stmmac: dwmac1000: clear the RGMII status interrupt |
| CVE-2026-99187 New | LI Linux Linux | – | Oct 28 | perf: Fix perf_pmu_migrate_context() leaving events behind |
| CVE-2026-99186 New | LI Linux Linux | – | Oct 28 | x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx() |
| CVE-2026-99185 New | LI Linux Linux | – | Oct 28 | firewire: core: fix race condition in split transaction handling |
| CVE-2026-99184 New | LI Linux Linux | – | Oct 28 | accel/rocket: search every core slot when a core is removed |
| CVE-2026-99183 New | LI Linux Linux | – | Oct 28 | accel/rocket: search every core slot when looking up a scheduler |
| CVE-2026-99182 New | LI Linux Linux | – | Oct 28 | ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture |
| CVE-2026-99181 New | LI Linux Linux | – | Oct 28 | autofs: ignore notification errors from a replaced pipe |
| CVE-2026-99180 New | LI Linux Linux | – | Oct 28 | unicode: free the map after a grace period |
| CVE-2026-99179 New | LI Linux Linux | – | Oct 28 | watch_queue: Fix note pool publication race in watch_queue_set_size() |
| CVE-2026-99178 New | LI Linux Linux | – | Oct 28 | x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context |
| CVE-2026-99177 New | LI Linux Linux | – | Oct 28 | KVM: SEV: Fix page dirtying in sev_gmem_post_populate() |
| CVE-2026-99176 New | LI Linux Linux | – | Oct 28 | KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry |
| CVE-2026-99175 New | LI Linux Linux | – | Oct 28 | fsnotify: prevent mark additions during connector teardown |
| CVE-2026-99174 New | LI Linux Linux | – | Oct 28 | ext4: free the sbi after a grace period |
| CVE-2026-99173 New | LI Linux Linux | – | Oct 28 | eventfs: Free the eventfs_inode after an rcu grace period too |
| CVE-2026-99172 New | LI Linux Linux | – | Oct 28 | ipc: drop the mqueue mount with kern_unmount() on setup failure |
| CVE-2026-99171 New | LI Linux Linux | – | Oct 28 | ntfs3: free the sbi after a grace period |
| CVE-2026-99170 New | LI Linux Linux | – | Oct 28 | namespace: a mount that copy_tree() leaves out can't take over a lock |
| CVE-2026-99169 New | LI Linux Linux | – | Oct 28 | futex: Fix mm reuse handling for FUT_OFF_MMSHARED |
| CVE-2026-99168 New | LI Linux Linux | – | Oct 28 | mshv_vtl: Check per-CPU register page before mmap |
| CVE-2026-99167 New | LI Linux Linux | – | Oct 28 | net/sched: fix use-after-free in __tcf_action_put() |
| CVE-2026-99166 New | LI Linux Linux | – | Oct 28 | net: rds: fix uninitialized trans dereference in CM event handler |
| CVE-2026-99165 New | LI Linux Linux | – | Oct 28 | sctp: revalidate output stream after association connect wait |
| CVE-2026-99164 New | LI Linux Linux | – | Oct 28 | spi: imx: fix slab corruption from undersized DMA bounce buffers |
| CVE-2026-99163 New | LI Linux Linux | – | Oct 28 | tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields |
| CVE-2026-99162 New | LI Linux Linux | – | Oct 28 | gpio: shared: fix use-after-free bug when adding shared proxies |
| CVE-2026-99161 New | LI Linux Linux | – | Oct 28 | i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() |
| CVE-2026-99160 New | LI Linux Linux | – | Oct 28 | ring-buffer: Do not show buffer_meta for CPUs without a buffer |
| CVE-2026-99159 New | LI Linux Linux | – | Oct 28 | ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx() |
| CVE-2026-99158 New | LI Linux Linux | – | Oct 28 | ring-buffer: Fix false warning in ring_buffer_map_get_reader() |
| CVE-2026-99157 New | LI Linux Linux | – | Oct 28 | scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies |
| CVE-2026-99156 New | LI Linux Linux | – | Oct 28 | scsi: st: Fix use-after-free race between st_remove() and st_open() |
| CVE-2026-99155 New | LI Linux Linux | – | Oct 28 | scsi: xen/scsifront: Check for a NULL shadow entry on a backend response |
| CVE-2026-99154 New | LI Linux Linux | – | Oct 28 | scsi: libiscsi: Reject a negative task index from parse_pdu_itt |
| CVE-2026-99153 New | LI Linux Linux | – | Oct 28 | scsi: libiscsi: Validate the ITT reflected in a Reject PDU |
| CVE-2026-99152 New | LI Linux Linux | – | Oct 28 | scsi: libiscsi: Validate the task named by a management response |
| CVE-2026-99151 New | LI Linux Linux | – | Oct 28 | drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions |
| CVE-2026-99150 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr |
| CVE-2026-99149 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl |
| CVE-2026-99148 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: keep the eviction fence until the last handle is closed |
| CVE-2026-99147 New | LI Linux Linux | – | Oct 28 | drm/exec: don't immediately add prelocked obj to array of locked objs |
| CVE-2026-99146 New | LI Linux Linux | – | Oct 28 | drm/i915/dmc: Add sanity check for DMC load address |
