CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 16:03 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89574 | LI Linux Linux | 7.8 | Sep 11 | dm array: validate array block headers on read |
| CVE-2026-89573 | LI Linux Linux | 7.8 | Sep 11 | dm array: reject an array block whose value size is not the caller's |
| CVE-2026-89571 | LI Linux Linux | 7.1 | Sep 11 | cxl/features: bound fwctl command payload to the input buffer |
| CVE-2026-54135 | AI AirSane SimulPiscator | 7.5 | Sep 11 | AirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Server |
| CVE-2026-89570 | LI Linux Linux | 7.8 | Sep 11 | cxl/mce: Make the MCE notifier per-region |
| CVE-2026-89569 | LI Linux Linux | 8.8 | Sep 11 | Bluetooth: RFCOMM: serialize security confirmation handling |
| CVE-2026-89564 | LI Linux Linux | 7.8 | Sep 11 | ip: orphan prefetched skbs before multicast forwarding |
| CVE-2026-89563 | LI Linux Linux | 7.8 | Sep 11 | ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() |
| CVE-2026-89562 | LI Linux Linux | 7.8 | Sep 11 | ip6_gre: fix hardware header length for NBMA tunnels |
| CVE-2026-89561 | LI Linux Linux | 7.5 | Sep 11 | ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() |
| CVE-2026-89560 | LI Linux Linux | 8.4 | Sep 11 | landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation |
| CVE-2026-89559 | LI Linux Linux | 7.8 | Sep 11 | libnvdimm/labels: Prevent integer overflow in __nd_label_validate() |
| CVE-2026-89557 | LI Linux Linux | 7.8 | Sep 11 | md: do overflow check for sb->bblog_shift in super_1_load() |
| CVE-2026-89554 | LI Linux Linux | 8.2 | Sep 11 | mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction |
| CVE-2026-89553 | LI Linux Linux | 7.8 | Sep 11 | nouveau/gem: reserve the bo in the info ioctl around the vma lookup |
| CVE-2026-89549 | LI Linux Linux | 7.5 | Sep 11 | sunrpc: route to a populated pool in svc_pool_for_cpu() |
| CVE-2026-89548 | LI Linux Linux | 7.8 | Sep 11 | SUNRPC: always drain cache_cleaner before destroying a cache_detail |
| CVE-2026-89547 | LI Linux Linux | 8.1 | Sep 11 | SUNRPC: Check svc pool percpu counter allocation |
| CVE-2026-89545 | LI Linux Linux | 7.8 | Sep 11 | sunrpc: defer rq_argp and rq_resp free until after RCU grace period |
| CVE-2026-89544 | LI Linux Linux | 7.5 | Sep 11 | SUNRPC: fix gssx_dec_option_array error path bugs |
| CVE-2026-89540 | LI Linux Linux | 7.8 | Sep 11 | sunrpc: init gssp_lock before publishing proc entry |
| CVE-2026-89535 | LI Linux Linux | 8.1 | Sep 11 | svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id |
| CVE-2026-89534 | LI Linux Linux | 8.8 | Sep 11 | svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails |
| CVE-2026-89528 | LI Linux Linux | 7.5 | Sep 11 | svcrdma: Reject Read lists that exceed the page budget |
| CVE-2026-89524 | LI Linux Linux | 8.1 | Sep 11 | wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets |
| CVE-2026-89523 | LI Linux Linux | 7.8 | Sep 11 | wifi: mt76: mt7925: cancel pending mlo_pm_work |
| CVE-2026-89522 | LI Linux Linux | 7.8 | Sep 11 | media: staging/ipu7: fix async notifier UAF on probe error path |
| CVE-2026-89521 | LI Linux Linux | 7.3 | Sep 11 | sched/core: Handle pick_task() releasing the rq lock |
| CVE-2026-89520 | LI Linux Linux | 7.8 | Sep 11 | sched/core: Make core-sched flips wait for in-flight selections |
| CVE-2026-89513 | LI Linux Linux | 8.8 | Sep 11 | RISC-V: KVM: Fix PMU event info array size overflow |
| CVE-2026-89511 | LI Linux Linux | 7.5 | Sep 11 | qede: Fix NULL pointer dereference in TPA fragment processing |
| CVE-2026-89510 | LI Linux Linux | 7.8 | Sep 11 | RDMA/cxgb4: Cancel reg_work before freeing device on remove |
| CVE-2026-89508 | LI Linux Linux | 7.8 | Sep 11 | RDMA/ucma: Lock the handler in ucma_set_ib_path() |
| CVE-2026-89507 | LI Linux Linux | 7.8 | Sep 11 | RDMA/ucma: Lock the handler in ucma_write_cm_event() |
| CVE-2026-89504 | LI Linux Linux | 8.4 | Sep 11 | regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer |
| CVE-2026-89503 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() |
| CVE-2026-89501 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Hold cpu_buffer::lock when resizing a subbuf |
| CVE-2026-89500 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page |
| CVE-2026-89499 | LI Linux Linux | 7.8 | Sep 11 | ring-buffer: Stop remote reader update when page swap fails |
| CVE-2026-89497 | LI Linux Linux | 7.8 | Sep 11 | orangefs: skip leading spaces before parsing client debug masks |
| CVE-2026-89493 | LI Linux Linux | 8.8 | Sep 11 | ocfs2: validate rl_used against rl_count in refcount block validator |
| CVE-2026-89489 | LI Linux Linux | 7.8 | Sep 11 | openrisc: fix arbitrary kernel memory access via or1k_atomic syscall |
| CVE-2026-89488 | LI Linux Linux | 7.8 | Sep 11 | openvswitch: Fix CT limit teardown use-after-free |
| CVE-2026-89487 | LI Linux Linux | 7.8 | Sep 11 | openvswitch: only skb_tx_error() a packet we are about to drop |
| CVE-2026-89486 | LI Linux Linux | 7.8 | Sep 11 | ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() |
| CVE-2026-89483 | LI Linux Linux | 7.5 | Sep 11 | nvme: zero the discard fallback page |
| CVE-2026-89481 | LI Linux Linux | 7.5 | Sep 11 | nvme-tcp: fix host memory disclosure on R2T for a read command |
| CVE-2026-89480 | LI Linux Linux | 7.5 | Sep 11 | nvme-tcp: reject a read that transferred too few bytes |
| CVE-2026-89477 | LI Linux Linux | 7.5 | Sep 11 | sctp: fix NULL deref on untransmitted RECONF completion |
| CVE-2026-89476 | LI Linux Linux | 7.5 | Sep 11 | sctp: fix stream->outcnt underflow on duplicate RECONF responses |