Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-89802 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op Each bi... | 2026-10-21 |
| CVE-2026-89755 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: clear stale mapping after freeing swapcache __migra... | 2026-10-21 |
| CVE-2026-89739 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due... | 2026-10-21 |
| CVE-2026-89717 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps() Patch ser... | 2026-10-21 |
| CVE-2026-89705 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit pat... | 2026-10-21 |
| CVE-2026-89632 | high | 8.2 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_p... | 2026-10-21 |
| CVE-2026-89624 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails u... | 2026-10-21 |
| CVE-2026-89572 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() add... | 2026-10-21 |
| CVE-2026-89567 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shr... | 2026-10-21 |
| CVE-2026-89566 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy checkpoint buffers journ... | 2026-10-21 |
| CVE-2026-89467 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: fix use-after-free qcom_battmgr_pdr_notif... | 2026-10-21 |
| CVE-2026-89451 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle->dev before the SVA handle is visible iommu_atta... | 2026-10-21 |
| CVE-2026-89439 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[] To be consistent w... | 2026-10-21 |
| CVE-2026-80935 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE co... | 2026-10-21 |
| CVE-2026-80920 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when queued from a wakeup handler io... | 2026-10-21 |
| CVE-2026-80897 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfs_... | 2026-10-21 |
| CVE-2026-80862 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme uses page_frag_cache to pr... | 2026-10-21 |
| CVE-2026-80734 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes [BUG] When run... | 2026-10-21 |
| CVE-2026-100074 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUNT is not marked as a... | 2026-10-21 |
| CVE-2026-83886 | high | 7.0 | No | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 2026-10-21 |