CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 13:28 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89471 | LI Linux Linux | 8.4 | Sep 11 | power: supply: cros_usbpd-charger: bound the EC-reported port count |
| CVE-2026-89470 | LI Linux Linux | 8.4 | Sep 11 | power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS |
| CVE-2026-89469 | LI Linux Linux | 8.4 | Sep 11 | power: supply: lp8727: fix use-after-free in lp8727_release_irq() |
| CVE-2026-89466 | LI Linux Linux | 7.7 | Sep 11 | power: supply: qcom_battmgr: terminate the strings from firmware |
| CVE-2026-89465 | LI Linux Linux | 8.4 | Sep 11 | power: supply: rt9455: quiesce delayed work before teardown |
| CVE-2026-89459 | LI Linux Linux | 7.0 | Sep 11 | s390/percpu: Fix MVIY_PERCPU() with older binutils |
| CVE-2026-89456 | LI Linux Linux | 7.0 | Sep 11 | s390/dasd: Propagate partial completion length across ERP recovery |
| CVE-2026-89452 | LI Linux Linux | 8.4 | Sep 11 | iommu/msm: Unwind probe state on registration failure |
| CVE-2026-89450 | LI Linux Linux | 8.8 | Sep 11 | iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field |
| CVE-2026-89445 | LI Linux Linux | 8.8 | Sep 11 | iommufd: Fix UAF in selftest IOPF reporting |
| CVE-2026-89443 | LI Linux Linux | 7.1 | Sep 11 | platform/x86: ISST: Validate level in perf mask ioctls |
| CVE-2026-89442 | LI Linux Linux | 7.8 | Sep 11 | platform/x86: ISST: Validate socket ID in clos_assoc ioctl |
| CVE-2026-89441 | LI Linux Linux | 7.8 | Sep 11 | mmc: via-sdmmc: cancel card-detect work on remove |
| CVE-2026-89440 | LI Linux Linux | 7.8 | Sep 11 | mmc: via-sdmmc: stop card-detect handling on probe failure |
| CVE-2026-89436 | LI Linux Linux | 7.8 | Sep 11 | platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] |
| CVE-2026-81017 | LI Linux Linux | 8.4 | Sep 11 | platform/chrome: sensorhub: Bound the EC-reported sensor number |
| CVE-2026-81016 | LI Linux Linux | 7.7 | Sep 11 | platform/x86/amd/pmc: Propagate SMU errors and validate S2D address |
| CVE-2026-81015 | LI Linux Linux | 7.8 | Sep 11 | platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails |
| CVE-2026-81012 | LI Linux Linux | 8.4 | Sep 11 | platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() |
| CVE-2026-81011 | LI Linux Linux | 7.1 | Sep 11 | platform/x86: hp-bioscfg: pass validated element count to package parsers |
| CVE-2026-81010 | LI Linux Linux | 7.8 | Sep 11 | io_uring/waitid: honor task_work cancellation |
| CVE-2026-81008 | LI Linux Linux | 7.8 | Sep 11 | interconnect: Fix use after free in icc_get() and of_icc_get_by_index() |
| CVE-2026-81007 | LI Linux Linux | 7.1 | Sep 11 | ipmi: ipmb: validate write message length |
| CVE-2026-81006 | LI Linux Linux | 7.8 | Sep 11 | ipmi: Remove all sysfs files on registration failure |
| CVE-2026-81004 | LI Linux Linux | 8.4 | Sep 11 | ipmi:msghandler: Cancel work cleanly on an error |
| CVE-2026-81003 | LI Linux Linux | 8.1 | Sep 11 | net/iucv: filter frames in afiucv_hs_rcv() by ingress device |
| CVE-2026-81001 | LI Linux Linux | 7.8 | Sep 11 | slip: fix use-after-free in sl_sync() |
| CVE-2026-81000 | LI Linux Linux | 7.8 | Sep 11 | net: tun: bound receive headroom |
| CVE-2026-80998 | LI Linux Linux | 7.5 | Sep 11 | net: bnxt: ring the doorbell when SW USO exits early |
| CVE-2026-80997 | LI Linux Linux | 7.5 | Sep 11 | net: ipa: fix stalled modem TX queue after runtime resume |
| CVE-2026-80995 | LI Linux Linux | 7.8 | Sep 11 | net: mctp: hold a reference to the route device in mctp_route_lookup() |
| CVE-2026-80994 | LI Linux Linux | 7.8 | Sep 11 | net: openvswitch: fix flow mask use-after-free on flow deletion |
| CVE-2026-80992 | LI Linux Linux | 7.8 | Sep 11 | net: ravb: avoid dereferencing an invalid PTP clock |
| CVE-2026-80991 | LI Linux Linux | 7.8 | Sep 11 | net: ravb: serialize PTP clock teardown |
| CVE-2026-80989 | LI Linux Linux | 8.8 | Sep 11 | net: thunderbolt: Mark the connection down when bringing it up fails |
| CVE-2026-80987 | LI Linux Linux | 7.5 | Sep 11 | NTB: ntb_transport: Reject oversized TX buffers |
| CVE-2026-80985 | LI Linux Linux | 8.2 | Sep 11 | net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry |
| CVE-2026-80982 | LI Linux Linux | 7.8 | Sep 11 | net/smc: fix use-after-free in smc_rx_pipe_buf_release() |
| CVE-2026-80979 | LI Linux Linux | 7.8 | Sep 11 | net/smc: unregister the connection before draining the rx tasklet |
| CVE-2026-80978 | LI Linux Linux | 7.8 | Sep 11 | net: cap advertised IP tunnel headroom |
| CVE-2026-80977 | LI Linux Linux | 7.8 | Sep 11 | net: skbuff: don't touch shared zerocopy state in skb_tx_error() |
| CVE-2026-80975 | LI Linux Linux | 7.8 | Sep 11 | mfd: qnap-mcu: keep the reply buffer alive past a command timeout |
| CVE-2026-80971 | LI Linux Linux | 7.8 | Sep 11 | ALSA: bcd2000: clear the URB pointers on disconnect |
| CVE-2026-80967 | LI Linux Linux | 8.4 | Sep 11 | ALSA: pcxhr: initialize mutexes before requesting threaded IRQ |
| CVE-2026-80962 | LI Linux Linux | 7.8 | Sep 11 | dm-pcache: validate geometry fields from on-disk cache_info |
| CVE-2026-80961 | LI Linux Linux | 7.8 | Sep 11 | dm-pcache: validate kset key_num and intra-segment bounds |
| CVE-2026-80959 | LI Linux Linux | 7.8 | Sep 11 | dm-pcache: bound the persisted tail-position offset |
| CVE-2026-80958 | LI Linux Linux | 7.1 | Sep 11 | dm-pcache: clamp the tail kset read to the segment data region |
| CVE-2026-80955 | LI Linux Linux | 7.8 | Sep 11 | dm-pcache: fix use-after-free and invalid seg operations in kset_replay() |
| CVE-2026-80954 | LI Linux Linux | 7.8 | Sep 11 | i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() |
