Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-98469 high 7.1 No In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR handling The consolidation of the brea... 2026-10-24
CVE-2026-98466 high 8.2 No In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix_h... 2026-10-24
CVE-2026-98465 high 7.0 No In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device... 2026-10-24
CVE-2026-98464 critical 9.3 No In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc... 2026-10-24
CVE-2026-98442 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UAF due to extensions realloc While call... 2026-10-24
CVE-2026-98441 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifying shared unconfirmed ct entry In a ca... 2026-10-24
CVE-2026-98440 high 7.0 No In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruct... 2026-10-24
CVE-2026-98419 high 7.0 No In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in reset_per_cpu_data() In reset... 2026-10-24
CVE-2026-98405 high 8.1 No In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In par... 2026-10-24
CVE-2026-98401 high 7.5 No In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation... 2026-10-24
CVE-2026-98385 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently t... 2026-10-24
CVE-2026-98383 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL p... 2026-10-24
CVE-2026-98382 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices __bpf_offload_dev... 2026-10-24
CVE-2026-98381 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_chann... 2026-10-24
CVE-2026-98378 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_link_prime() inserts a... 2026-10-24
CVE-2026-98376 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map replacement p... 2026-10-24
CVE-2026-98374 high 8.8 No In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Wh... 2026-10-24
CVE-2026-76886 critical 9.8 No C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service 2026-10-24
CVE-2026-9205 critical 9.8 No IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function. 2026-10-24
CVE-2026-8470 critical 9.1 No IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic r... 2026-10-24