Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-98967 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: cxgb4/ch_ktls: disable softirqs around tid_list erases chcr_ktls_cpl_a... | 2026-10-30 |
| CVE-2026-98964 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmet_r... | 2026-10-30 |
| CVE-2026-98956 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod_set_value() emits a... | 2026-10-30 |
| CVE-2026-98955 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of skb->len when computing thoff... | 2026-10-30 |
| CVE-2026-98950 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() bpf... | 2026-10-30 |
| CVE-2026-98944 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the re... | 2026-10-30 |
| CVE-2026-98940 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints Th... | 2026-10-30 |
| CVE-2026-98936 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: reset ar->num_stations on hardware start When (multiple)... | 2026-10-30 |
| CVE-2026-98935 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak... | 2026-10-30 |
| CVE-2026-98934 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Since commit... | 2026-10-30 |
| CVE-2026-98933 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: usb: hub: use shorter 120ms post resume hold for SS root hubs Holding... | 2026-10-30 |
| CVE-2026-98931 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "na... | 2026-10-30 |
| CVE-2026-98862 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_rules() kill_rules() removes mixed AUD... | 2026-10-30 |
| CVE-2026-98857 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lb... | 2026-10-30 |
| CVE-2026-98856 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86,... | 2026-10-30 |
| CVE-2026-98855 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds... | 2026-10-30 |
| CVE-2026-98854 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as registered of_overla... | 2026-10-30 |
| CVE-2026-98851 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable reference on init error pat... | 2026-10-30 |
| CVE-2026-98850 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TX_RING byte count overflow tpacket_snd() drains e... | 2026-10-30 |
| CVE-2026-98847 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_requ... | 2026-10-30 |