Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-98265 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity... | 2026-10-30 |
| CVE-2026-98264 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: reset device before deleting virtqueues virtsnd_remove()... | 2026-10-30 |
| CVE-2026-98260 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread() A per-thread CPU ti... | 2026-10-30 |
| CVE-2026-98245 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: btrfs: take commit root semaphore when iterating in mark_block_group_to... | 2026-10-30 |
| CVE-2026-98198 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pwm-fan) Stop RPM timer before freeing tach data sample_timer(... | 2026-10-30 |
| CVE-2026-98193 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject TKIP frames without a full MIC libipw_michael_mic... | 2026-10-30 |
| CVE-2026-98192 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown w... | 2026-10-30 |
| CVE-2026-98173 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of iface in cifs_try_adding_channels()... | 2026-10-30 |
| CVE-2026-98172 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error... | 2026-10-30 |
| CVE-2026-98171 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDU... | 2026-10-30 |
| CVE-2026-98170 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() In m... | 2026-10-30 |
| CVE-2026-98169 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots() If snapsh... | 2026-10-30 |
| CVE-2026-97939 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+ne... | 2026-10-30 |
| CVE-2026-97935 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: tracing: Set the trace clock before registering the histogram trigger... | 2026-10-30 |
| CVE-2026-97925 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race 朱恺乾 reported and... | 2026-10-30 |
| CVE-2026-97924 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Don't destroy fields when event removal fails des... | 2026-10-30 |
| CVE-2026-97908 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev T... | 2026-10-30 |
| CVE-2026-97901 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink co... | 2026-10-30 |
| CVE-2026-97619 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: end write accounting from ->ki_complete Commit b000145e99... | 2026-10-30 |
| CVE-2026-97616 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release all action references on NEWACTION failure... | 2026-10-30 |