Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-89962 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Prevent kexec range truncation Sashiko AI review p... | 2026-10-30 |
| CVE-2026-89960 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_... | 2026-10-30 |
| CVE-2026-89958 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NUL... | 2026-10-30 |
| CVE-2026-89956 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mde... | 2026-10-30 |
| CVE-2026-89955 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in status_show() during queue probe When... | 2026-10-30 |
| CVE-2026-89944 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: hdac_hda: Fix hlink refcount leak on component registration failu... | 2026-10-30 |
| CVE-2026-89934 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: iio: light: ltrf216a: fix runtime PM reference leak in error path ltrf... | 2026-10-30 |
| CVE-2026-89933 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When... | 2026-10-30 |
| CVE-2026-89930 | critical | 9.3 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM ser... | 2026-10-30 |
| CVE-2026-89926 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix length check __import_wp_info() struct kvm_hw_breakpoin... | 2026-10-30 |
| CVE-2026-89921 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for inject_pfault_token __k... | 2026-10-30 |
| CVE-2026-89920 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks... | 2026-10-30 |
| CVE-2026-89912 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save... | 2026-10-30 |
| CVE-2026-89884 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the... | 2026-10-30 |
| CVE-2026-89877 | high | 8.4 | No | In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164_dev... | 2026-10-30 |
| CVE-2026-89870 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_device twice zoran_init... | 2026-10-30 |
| CVE-2026-89860 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_... | 2026-10-30 |
| CVE-2026-89859 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x0... | 2026-10-30 |
| CVE-2026-89848 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Quiesce response IRQ before freeing request queue qla2x... | 2026-10-30 |
| CVE-2026-89840 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate MOVE_RANGE destination size F2FS_IOC_MOVE_RANGE checks... | 2026-10-30 |