Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-89652 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_... | 2026-10-30 |
| CVE-2026-89650 | critical | 9.1 | No | In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_export_targets array for mds info v2/v3 ceph_mdsmap_de... | 2026-10-30 |
| CVE-2026-89648 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos() ceph_parse_... | 2026-10-30 |
| CVE-2026-89647 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no progress possible ceph_... | 2026-10-30 |
| CVE-2026-89645 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During reloc... | 2026-10-30 |
| CVE-2026-89644 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_b... | 2026-10-30 |
| CVE-2026-89642 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in cifs_setsize() when extending... | 2026-10-30 |
| CVE-2026-89640 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 Wi... | 2026-10-30 |
| CVE-2026-89638 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/... | 2026-10-30 |
| CVE-2026-89633 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce... | 2026-10-30 |
| CVE-2026-89631 | critical | 9.1 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too sma... | 2026-10-30 |
| CVE-2026-89625 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind For GH... | 2026-10-30 |
| CVE-2026-89622 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcp_i2c_s... | 2026-10-30 |
| CVE-2026-89601 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext... | 2026-10-30 |
| CVE-2026-89598 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev... | 2026-10-30 |
| CVE-2026-89580 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_perf_callchain() return... | 2026-10-30 |
| CVE-2026-89574 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array_block_check() val... | 2026-10-30 |
| CVE-2026-89564 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding IPv4 and IPv6 i... | 2026-10-30 |
| CVE-2026-89561 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() ipv6_rpl... | 2026-10-30 |
| CVE-2026-89553 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In... | 2026-10-30 |