Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-80937 high 8.8 No In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE co... 2026-10-30
CVE-2026-80925 not reported — No In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload Togg... 2026-10-30
CVE-2026-80907 not reported — No In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use... 2026-10-30
CVE-2026-80905 not reported — No In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transport_header when sending VLAN-tagged frame In... 2026-10-30
CVE-2026-80884 not reported — No In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API require... 2026-10-30
CVE-2026-80883 not reported — No In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X cli... 2026-10-30
CVE-2026-80866 not reported — No In the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tipc_exit_net() Blamed commit introduced a... 2026-10-30
CVE-2026-80864 not reported — No In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp rxe_... 2026-10-30
CVE-2026-80861 not reported — No In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible xhci_ge... 2026-10-30
CVE-2026-80856 not reported — No In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback failure fuse_do_se... 2026-10-30
CVE-2026-80855 not reported — No In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open O_TRUNC DAX failure fuse_open()... 2026-10-30
CVE-2026-80852 not reported — No In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tls_append_frag() Found with s... 2026-10-30
CVE-2026-80851 not reported — No In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through... 2026-10-30
CVE-2026-80847 not reported — No In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP_MIN_MSS tcp_select_initial_window() ass... 2026-10-30
CVE-2026-80841 not reported — No In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TX_RING free until skbs finish AF_PACKET TX_... 2026-10-30
CVE-2026-80837 not reported — No In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't queue packet path object notifications All... 2026-10-30
CVE-2026-80836 not reported — No In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtio_crypto_dataq_... 2026-10-30
CVE-2026-80786 not reported — No In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_var() in helper Handle fbcon... 2026-10-30
CVE-2026-80771 not reported — No In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set input_... 2026-10-30
CVE-2026-80761 not reported — No In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname iso_s... 2026-10-30