Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90204 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read [BUG] A corrupted ap... | 2026-10-30 |
| CVE-2026-90200 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster validation In ntfs_init_... | 2026-10-30 |
| CVE-2026-90187 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: null_blk: free zones array on device power-off null_init_zoned_dev() a... | 2026-10-30 |
| CVE-2026-90183 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when freeing policy data io.latency c... | 2026-10-30 |
| CVE-2026-90182 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freeing policy data iocg_kick_delay... | 2026-10-30 |
| CVE-2026-90179 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix deadlock in complain-mode change_hat The use of change_h... | 2026-10-30 |
| CVE-2026-90174 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() ksmbd_alloc_u... | 2026-10-30 |
| CVE-2026-90170 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ipc response length before dereferencing its fields ip... | 2026-10-30 |
| CVE-2026-90169 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: free preauth sessions on connection teardown SMB3.1.1 multichan... | 2026-10-30 |
| CVE-2026-90167 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize oplock close with pending break ownership close may a... | 2026-10-30 |
| CVE-2026-90166 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() See... | 2026-10-30 |
| CVE-2026-90162 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race... | 2026-10-30 |
| CVE-2026-90161 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlac... | 2026-10-30 |
| CVE-2026-90156 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferred locks When vfs_lock_file()... | 2026-10-30 |
| CVE-2026-90155 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests before freeing A file_lock retaine... | 2026-10-30 |
| CVE-2026-90153 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size smb_check_pe... | 2026-10-30 |
| CVE-2026-90152 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: smb/server: fix session leak in ksmbd_session_register() See the proce... | 2026-10-30 |
| CVE-2026-90150 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure bl_parse_concat()... | 2026-10-30 |
| CVE-2026-90149 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfil... | 2026-10-30 |
| CVE-2026-90148 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add... | 2026-10-30 |