Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90146 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install() bpf_xdp_link_updat... | 2026-10-30 |
| CVE-2026-90139 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fuse_fill_super_submount fuse_iget(... | 2026-10-30 |
| CVE-2026-90138 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's sk_err in vsock_accept() Syzbot repo... | 2026-10-30 |
| CVE-2026-90135 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() sashiko... | 2026-10-30 |
| CVE-2026-90129 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: virtio_balloon: quiesce balloon work before device shutdown Commit 8bd... | 2026-10-30 |
| CVE-2026-90125 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix request buffer leak in smb2_new_read_req() smb2_new_r... | 2026-10-30 |
| CVE-2026-90116 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: mtpav: shut down output timer before card teardown snd_mtpav_out... | 2026-10-30 |
| CVE-2026-90112 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loading The unified... | 2026-10-30 |
| CVE-2026-90111 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ip6mr: do not clone dst in ip6mr_cache_report() IPv6 input attaches a... | 2026-10-30 |
| CVE-2026-90109 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue gr... | 2026-10-30 |
| CVE-2026-90106 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha add... | 2026-10-30 |
| CVE-2026-90105 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently arp/neigh_reduce read neigh ha d... | 2026-10-30 |
| CVE-2026-90104 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decode_cb_sequence_... | 2026-10-30 |
| CVE-2026-90099 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations... | 2026-10-30 |
| CVE-2026-90097 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root parti... | 2026-10-30 |
| CVE-2026-90093 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since com... | 2026-10-30 |
| CVE-2026-90087 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a second LE connect is rejected... | 2026-10-30 |
| CVE-2026-90084 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize... | 2026-10-30 |
| CVE-2026-90083 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Only operate on Ethernet frames act_ife encapsulat... | 2026-10-30 |
| CVE-2026-90076 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fq_i... | 2026-10-30 |