Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-93042 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Terminate all descriptors without callbacks The DM... | 2026-10-30 |
| CVE-2026-92520 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/... | 2026-10-30 |
| CVE-2026-92506 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix requested device removal race scmi_protocol_de... | 2026-10-30 |
| CVE-2026-92503 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() Syzbot/stress... | 2026-10-30 |
| CVE-2026-92491 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Roll back partial protocol table registration scmi... | 2026-10-30 |
| CVE-2026-92490 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Unrequest devices if driver registration fails scm... | 2026-10-30 |
| CVE-2026-92488 | high | 7.0 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: complete object teardown when the destroy command fails er... | 2026-10-30 |
| CVE-2026-92485 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpf_tracing_link_release The trampoline could be c... | 2026-10-30 |
| CVE-2026-92482 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip The gpio... | 2026-10-30 |
| CVE-2026-92480 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate string descriptors The string descriptor len... | 2026-10-30 |
| CVE-2026-92389 | high | 8.1 | No | libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server response... | 2026-10-30 |
| CVE-2026-92388 | critical | 9.1 | No | When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback se... | 2026-10-30 |
| CVE-2026-90433 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: spi: oc-tiny: switch to managed controller allocation The controller i... | 2026-10-30 |
| CVE-2026-90421 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs... | 2026-10-30 |
| CVE-2026-90418 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch Sy... | 2026-10-30 |
| CVE-2026-90417 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() Wh... | 2026-10-30 |
| CVE-2026-90410 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: spi: davinci: switch to managed controller allocation The controller i... | 2026-10-30 |
| CVE-2026-90407 | high | 7.7 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_even... | 2026-10-30 |
| CVE-2026-90398 | high | 8.4 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() Currently, i... | 2026-10-30 |
| CVE-2026-90392 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link info In bpf_link_show_fdi... | 2026-10-30 |