Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90210 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure Whe... | 2026-10-19 |
| CVE-2026-90209 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix deadlock during unregister Unregistering an s390dbf de... | 2026-10-19 |
| CVE-2026-90207 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize input teardown with event_input snd_midi_in... | 2026-10-19 |
| CVE-2026-90203 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If a negative offset is r... | 2026-10-19 |
| CVE-2026-90202 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers _base_releas... | 2026-10-19 |
| CVE-2026-90201 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg... | 2026-10-19 |
| CVE-2026-90199 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mi_enum_attr() In mi_enum_attr()... | 2026-10-19 |
| CVE-2026-90198 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in snd_card_do_free() A use-after-free... | 2026-10-19 |
| CVE-2026-90197 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: HID: haptic: don't write an uninitialized value to unhandled usages fi... | 2026-10-19 |
| CVE-2026-90196 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats... | 2026-10-19 |
| CVE-2026-90195 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc arg... | 2026-10-19 |
| CVE-2026-90194 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on device_add() failures When device_ad... | 2026-10-19 |
| CVE-2026-90193 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler qcom_... | 2026-10-19 |
| CVE-2026-90192 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mailbox: qcom-cpucp: handle NULL data in send_data callback mailbox_cl... | 2026-10-19 |
| CVE-2026-90191 | high | 8.4 | No | In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI re... | 2026-10-19 |
| CVE-2026-90190 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: null_blk: use DEFINE_MUTEX for the file-scope mutex In null_init(), mu... | 2026-10-19 |
| CVE-2026-90189 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: null_blk: register configfs subsystem after creating default devices I... | 2026-10-19 |
| CVE-2026-90188 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: null_blk: free global tag_set on init error path If shared_tags is ena... | 2026-10-19 |
| CVE-2026-90186 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: null_blk: reject per-device queue resize for shared tag set When share... | 2026-10-19 |
| CVE-2026-90185 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute stores with the lock The NULLB_... | 2026-10-19 |