Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-99012 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Serialize concurrent connect calls iso_sock_connect()... | 2026-10-30 |
| CVE-2026-99010 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: free the skb when the DLC has no owner rfcomm_recv_... | 2026-10-30 |
| CVE-2026-99009 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex An... | 2026-10-30 |
| CVE-2026-99008 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown... | 2026-10-30 |
| CVE-2026-99007 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAI... | 2026-10-30 |
| CVE-2026-99006 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec array boundary It is possible... | 2026-10-30 |
| CVE-2026-99005 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Unmask interrupts only when ACTIVE is true There is a sma... | 2026-10-30 |
| CVE-2026-99002 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, a... | 2026-10-30 |
| CVE-2026-98993 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNT_UMOUNT in clone_mnt() MNT_UMOUNT gets rai... | 2026-10-30 |
| CVE-2026-98992 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: namespace: don't copy an unmounted mount tree may_copy_tree() accepts... | 2026-10-30 |
| CVE-2026-98990 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: namespace: check a submount for references right before unmounting it... | 2026-10-30 |
| CVE-2026-98985 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: namespace: check the mounts before reading their parents in pivot_root(... | 2026-10-30 |
| CVE-2026-98984 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dcache: don't put a mountpoint on a dentry that's being removed rmdir(... | 2026-10-30 |
| CVE-2026-98981 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink(),... | 2026-10-30 |
| CVE-2026-98979 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: namespace: refuse an automount below a mount that is in no namespace I... | 2026-10-30 |
| CVE-2026-98977 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: namespace: handle mount locking for automounts correctly If mounts are... | 2026-10-30 |
| CVE-2026-98971 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: gpio: exar: initialize the ID before registering its cleanup devm_add_... | 2026-10-30 |
| CVE-2026-98970 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy(... | 2026-10-30 |
| CVE-2026-98969 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/sched: em_text: reject unterminated algo before autoload This is a... | 2026-10-30 |
| CVE-2026-98968 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: amt: send the relay's General Query directly from the receive path An... | 2026-10-30 |

