Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97449 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions Add package limit... | 2026-10-03 |
| CVE-2026-97448 | high | 7.7 | No | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path() Add... | 2026-10-03 |
| CVE-2026-97446 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() acpi_... | 2026-10-03 |
| CVE-2026-97445 | high | 7.7 | No | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Enha... | 2026-10-03 |
| CVE-2026-97444 | high | 7.7 | No | In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpi_... | 2026-10-03 |
| CVE-2026-97442 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi... | 2026-10-03 |
| CVE-2026-97441 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports When an AHCI... | 2026-10-03 |
| CVE-2026-97440 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtr_se... | 2026-10-03 |
| CVE-2026-97439 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib [BUG] A... | 2026-10-03 |
| CVE-2026-97438 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate index entry key bounds [BUG] A malformed NTFS direc... | 2026-10-03 |
| CVE-2026-97437 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() The... | 2026-10-03 |
| CVE-2026-97436 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge... | 2026-10-03 |
| CVE-2026-97435 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsa_port_from_ne... | 2026-10-03 |
| CVE-2026-97434 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI ins... | 2026-10-03 |
| CVE-2026-97430 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to q... | 2026-10-03 |
| CVE-2026-97429 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix UAF race in destroy_queue_cpsch wait_on_destroy_queue(... | 2026-10-03 |
| CVE-2026-97427 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy The powerplay path allo... | 2026-10-03 |
| CVE-2026-97421 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pg... | 2026-10-03 |
| CVE-2026-97420 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, proc... | 2026-10-03 |
| CVE-2026-97419 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The... | 2026-10-03 |