Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-72106 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->... | 2026-10-30 |
| CVE-2026-72098 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer ove... | 2026-10-30 |
| CVE-2026-72028 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word f... | 2026-10-30 |
| CVE-2026-72009 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The... | 2026-10-30 |
| CVE-2026-72007 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ER... | 2026-10-30 |
| CVE-2026-68471 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211_mle_common_... | 2026-10-30 |
| CVE-2026-68453 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validation... | 2026-10-30 |
| CVE-2026-68449 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanni... | 2026-10-30 |
| CVE-2026-68448 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with src mounter creds Com... | 2026-10-30 |
| CVE-2026-68445 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4_gem_obj... | 2026-10-30 |
| CVE-2026-68441 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC f... | 2026-10-30 |
| CVE-2026-68435 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup Whe... | 2026-10-30 |
| CVE-2026-68426 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals a GSO segment skb_... | 2026-10-30 |
| CVE-2026-68418 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously,... | 2026-10-30 |
| CVE-2026-68409 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percpu free to RCU sta_remove_link... | 2026-10-30 |
| CVE-2026-68408 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock Whe... | 2026-10-30 |
| CVE-2026-68404 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: use wiphy work for socket owner autodisconnect nl80211... | 2026-10-30 |
| CVE-2026-68401 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()... | 2026-10-30 |
| CVE-2026-68399 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts Similar to recent commit 9b5... | 2026-10-30 |
| CVE-2026-68381 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2_oplock_bre... | 2026-10-30 |