Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-99045 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ibmveth: h_free logical LAN on open-fail after register ibmveth_open()... | 2026-10-30 |
| CVE-2026-99043 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ice: fix metadata_dst refcount handling on representor teardown ice_es... | 2026-10-30 |
| CVE-2026-99041 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ip6_gre: remove obsolete ERSPAN PMTU update A tc tunnel_key action can... | 2026-10-30 |
| CVE-2026-99040 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix add_key() race with keyring restriction __key_create_or_upda... | 2026-10-30 |
| CVE-2026-99039 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: memstick: core: wait for request completion before freeing card In mem... | 2026-10-30 |
| CVE-2026-99038 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: complete requests after eject instead of droppin... | 2026-10-30 |
| CVE-2026-99037 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dm-crypt: reject the lmk IV mode with AEAD ciphers A "capi:" table lin... | 2026-10-30 |
| CVE-2026-99036 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dm: fix reading free memory in do_resume When do_resume calls dm_table... | 2026-10-30 |
| CVE-2026-99035 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mmc: mtk-sd: Cancel request timeout work on remove The driver queues r... | 2026-10-30 |
| CVE-2026-99034 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enabl... | 2026-10-30 |
| CVE-2026-99033 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packet_rcv_spkt() packet_rcv_s... | 2026-10-30 |
| CVE-2026-99032 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lifetime in smc_getname smc_getname() derefer... | 2026-10-30 |
| CVE-2026-99031 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br_multicast_sg_de... | 2026-10-30 |
| CVE-2026-99027 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: team: stop reusing skb after queue override A nonzero dev_queue_x... | 2026-10-30 |
| CVE-2026-90991 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to allocation of resource... | 2026-10-30 |
| CVE-2026-99025 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production com... | 2026-10-30 |
| CVE-2026-99024 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: optee: register TEE devices only once fully initialized optee_probe()... | 2026-10-30 |
| CVE-2026-99022 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: regulator: ltc3676: don't read the write-only HRST and CLIRQ registers... | 2026-10-30 |
| CVE-2026-99019 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices ch_r... | 2026-10-30 |
| CVE-2026-99015 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Serialize dead-device detachment Rebinding an HCI... | 2026-10-30 |