CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 19:59 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89746 | LI Linux Linux | 7.8 | Sep 11 | tracing: Fix use-after-free with same-name named triggers |
| CVE-2026-89744 | LI Linux Linux | 8.4 | Sep 11 | device property: fix infinite loop in fwnode_for_each_child_node() |
| CVE-2026-89743 | LI Linux Linux | 7.7 | Sep 11 | misc: nsm: bound the device-reported response length |
| CVE-2026-89742 | LI Linux Linux | 7.8 | Sep 11 | rapidio: mport_cdev: fix use-after-free in dma_req_free() |
| CVE-2026-89741 | LI Linux Linux | 7.8 | Sep 11 | Revert "media: v4l2-dev: fix error handling in __video_register_device()" |
| CVE-2026-89738 | LI Linux Linux | 7.8 | Sep 11 | usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed |
| CVE-2026-89736 | LI Linux Linux | 7.8 | Sep 11 | usb: gadget: u_audio: Fix use-after-free on sound card disconnect |
| CVE-2026-89733 | LI Linux Linux | 7.8 | Sep 11 | usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() |
| CVE-2026-89731 | LI Linux Linux | 7.1 | Sep 11 | cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read |
| CVE-2026-89729 | LI Linux Linux | 8.8 | Sep 11 | HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature |
| CVE-2026-89725 | LI Linux Linux | 8.8 | Sep 11 | media: cec: stm32: prevent out-of-bounds write on RX overflow |
| CVE-2026-89724 | LI Linux Linux | 7.8 | Sep 11 | media: vicodec: fix out-of-bounds write in FWHT encoder |
| CVE-2026-89723 | LI Linux Linux | 7.8 | Sep 11 | nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation |
| CVE-2026-89720 | LI Linux Linux | 7.7 | Sep 11 | ubifs: fix out-of-bounds read in signature length check |
| CVE-2026-89711 | LI Linux Linux | 8.2 | Sep 11 | NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check |
| CVE-2026-89709 | LI Linux Linux | 8.1 | Sep 11 | lockd, nfsd: RCU-protect nlmsvc_ops dispatch |
| CVE-2026-89707 | LI Linux Linux | 7.5 | Sep 11 | nfsd: release path refs on follow_down() error |
| CVE-2026-89706 | LI Linux Linux | 7.5 | Sep 11 | nfsd: Reset write verifier when async COPY writeback fails |
| CVE-2026-89705 | LI Linux Linux | 7.1 | Sep 11 | nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths |
| CVE-2026-89704 | LI Linux Linux | 7.5 | Sep 11 | nfsd: sample writeback error cursor before async COPY loop |
| CVE-2026-89699 | LI Linux Linux | 7.5 | Sep 11 | nfsd: validate symlink target length in NFSv4 CREATE |
| CVE-2026-89696 | LI Linux Linux | 7.5 | Sep 11 | nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref |
| CVE-2026-89695 | LI Linux Linux | 7.5 | Sep 11 | nfsd: cap decoded POSIX ACL count to bound sort cost |
| CVE-2026-89692 | LI Linux Linux | 7.5 | Sep 11 | nfsd: clear CALLBACK_RUNNING on failed delegation recall queue |
| CVE-2026-89691 | LI Linux Linux | 7.1 | Sep 11 | nfsd: clear opcnt on compound arg release to prevent OOB read |
| CVE-2026-89690 | LI Linux Linux | 7.8 | Sep 11 | nfsd: defer vfree of compound ops to fix rpc_status UAF |
| CVE-2026-89687 | LI Linux Linux | 7.5 | Sep 11 | nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file |
| CVE-2026-89685 | LI Linux Linux | 7.5 | Sep 11 | nfsd: fix clock domain mismatch in clients_still_reclaiming() |
| CVE-2026-89684 | LI Linux Linux | 7.5 | Sep 11 | nfsd: fix cpntf publish race in nfs4_init_cp_state |
| CVE-2026-89682 | LI Linux Linux | 8.1 | Sep 11 | nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net |
| CVE-2026-89680 | LI Linux Linux | 7.5 | Sep 11 | nfsd: fix nfsd_file leak on inter-server COPY setup failure |
| CVE-2026-89679 | LI Linux Linux | 7.5 | Sep 11 | nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs |
| CVE-2026-89678 | LI Linux Linux | 7.5 | Sep 11 | nfsd: fix partial-write detection in nfsd_direct_write |
| CVE-2026-89670 | LI Linux Linux | 7.8 | Sep 11 | nfsd: hold rcu across localio cmpxchg retry |
| CVE-2026-89668 | LI Linux Linux | 7.8 | Sep 11 | nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() |
| CVE-2026-89667 | LI Linux Linux | 8.1 | Sep 11 | nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache |
| CVE-2026-89665 | LI Linux Linux | 8.2 | Sep 11 | nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE |
| CVE-2026-89664 | LI Linux Linux | 7.5 | Sep 11 | nfsd: release OPEN-decoded posix ACLs via op_release |
| CVE-2026-89663 | LI Linux Linux | 8.8 | Sep 11 | nfsd: revoke copy-notify stateids before dropping their reference |
| CVE-2026-89657 | LI Linux Linux | 7.5 | Sep 11 | libceph: validate OSD extent maps before cursor advance |
| CVE-2026-89648 | LI Linux Linux | 7.5 | Sep 11 | ceph: cap delegated inode count in ceph_parse_deleg_inos() |
| CVE-2026-89647 | LI Linux Linux | 7.5 | Sep 11 | ceph: do not repeat ceph_trim_dentries() if no progress possible |
| CVE-2026-89646 | LI Linux Linux | 7.8 | Sep 11 | ceph: fix leaked inode reference on writeback abort at umount |
| CVE-2026-89641 | LI Linux Linux | 7.8 | Sep 11 | cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() |
| CVE-2026-89640 | LI Linux Linux | 7.1 | Sep 11 | cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 |
| CVE-2026-89639 | LI Linux Linux | 7.1 | Sep 11 | cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC |
| CVE-2026-89638 | LI Linux Linux | 7.8 | Sep 11 | smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions |
| CVE-2026-89632 | LI Linux Linux | 8.2 | Sep 11 | smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() |
| CVE-2026-89626 | LI Linux Linux | 8.8 | Sep 11 | HID: sensor: custom: Fix field sysfs group cleanup on failure |
| CVE-2026-89624 | LI Linux Linux | 7.8 | Sep 11 | HID: universal-pidff: stop the device when force-feedback init fails |