Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92489 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix skb double-free in xfrm_dev_direct_output() A return value o... | 2026-10-19 |
| CVE-2026-92487 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: exfat: fix valid_size extension over a shared writable mapping When a... | 2026-10-19 |
| CVE-2026-92486 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix CFI mismatch in task work callback BPF subprograms use the bp... | 2026-10-19 |
| CVE-2026-92484 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix use-after-free in find_pos_and_ways() error path The e... | 2026-10-19 |
| CVE-2026-92483 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: liveupdate: Remember FLB retrieve() status LUO keeps track of successf... | 2026-10-19 |
| CVE-2026-92481 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: free EINT resources on unbind mtk_eint_do_init() cr... | 2026-10-19 |
| CVE-2026-92479 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags The... | 2026-10-19 |
| CVE-2026-92478 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane cou... | 2026-10-19 |
| CVE-2026-92477 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: debugfs: Reserve space for a string terminator ufs_saved_er... | 2026-10-19 |
| CVE-2026-92476 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: keembay - Initialize completion before requesting IRQ kmb_ocs_... | 2026-10-19 |
| CVE-2026-90435 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffer size set_user_buf_si... | 2026-10-19 |
| CVE-2026-90434 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofs_fill_pages() re... | 2026-10-19 |
| CVE-2026-90432 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Abort directly from the hardlockup handler scx_hardlockup()... | 2026-10-19 |
| CVE-2026-90431 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: remoteproc: Prevent crash handling to race with rproc_del() There's no... | 2026-10-19 |
| CVE-2026-90430 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initiali... | 2026-10-19 |
| CVE-2026-90429 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init... | 2026-10-19 |
| CVE-2026-90428 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vint... | 2026-10-19 |
| CVE-2026-90426 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs te... | 2026-10-19 |
| CVE-2026-90425 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra24... | 2026-10-19 |
| CVE-2026-90423 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix UAF in ODP init error-handling path rxe_odp_mr_init_user... | 2026-10-19 |