Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90260 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't clobber the extent buffer when zeroing it out On a... | 2026-10-21 |
| CVE-2026-90256 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_in... | 2026-10-21 |
| CVE-2026-90240 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down alia... | 2026-10-21 |
| CVE-2026-90231 | high | 8.4 | No | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a... | 2026-10-21 |
| CVE-2026-90217 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slo... | 2026-10-21 |
| CVE-2026-90177 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verificati... | 2026-10-21 |
| CVE-2026-90154 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbd_all_conn... | 2026-10-21 |
| CVE-2026-90144 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL deref in dpll_device_ops() during teardown race When th... | 2026-10-21 |
| CVE-2026-90142 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP socket is attached... | 2026-10-21 |
| CVE-2026-90086 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDP_TX_METADATA in zero-copy path The zero-copy path reads... | 2026-10-21 |
| CVE-2026-90060 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol L... | 2026-10-21 |
| CVE-2026-90042 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc() buffers The fscrypt subs... | 2026-10-21 |
| CVE-2026-90036 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-lock reaping A bare... | 2026-10-21 |
| CVE-2026-90030 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer The forceRM bit of t... | 2026-10-21 |
| CVE-2026-89929 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When... | 2026-10-21 |
| CVE-2026-89913 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tabl... | 2026-10-21 |
| CVE-2026-89906 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old... | 2026-10-21 |
| CVE-2026-89827 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid force-completing uninitialized UVD rings uvd_v7_0_sw... | 2026-10-21 |
| CVE-2026-89812 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the MES ring fences on reset The MES schedu... | 2026-10-21 |
| CVE-2026-89806 | high | 8.4 | No | In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation The fram... | 2026-10-21 |