Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-98391 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardo... | 2026-10-19 |
| CVE-2026-98390 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtual... | 2026-10-19 |
| CVE-2026-98388 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_ex... | 2026-10-19 |
| CVE-2026-98387 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The re... | 2026-10-19 |
| CVE-2026-98384 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() sk_pr... | 2026-10-19 |
| CVE-2026-98380 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcf_action_... | 2026-10-19 |
| CVE-2026-98379 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without inet6_dev ip6_route_lo... | 2026-10-19 |
| CVE-2026-98372 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() iptfs_s... | 2026-10-19 |
| CVE-2026-98371 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner tot_len When t... | 2026-10-19 |
| CVE-2026-98370 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrm_state_netlink()... | 2026-10-19 |
| CVE-2026-98369 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for x... | 2026-10-19 |
| CVE-2026-98368 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the... | 2026-10-19 |
| CVE-2026-98367 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_ac... | 2026-10-19 |
| CVE-2026-98366 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxe_rereg_... | 2026-10-19 |
| CVE-2026-98365 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB acces... | 2026-10-19 |
| CVE-2026-98364 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU in bundle creation xfrm_bund... | 2026-10-19 |
| CVE-2026-98363 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS scpi_dvf... | 2026-10-19 |
| CVE-2026-98362 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate dvfs_get_id... | 2026-10-19 |
| CVE-2026-98361 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Commit 0b261d... | 2026-10-19 |
| CVE-2026-98360 | high | 7.0 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds... | 2026-10-19 |