Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80881 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2_read_blocks() In ocfs2_read... | 2026-09-04 |
| CVE-2026-80880 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr Due to all the child m... | 2026-09-04 |
| CVE-2026-80879 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write A cir... | 2026-09-04 |
| CVE-2026-80877 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: afs: Fix vllist leak Fix a leak of the new vllist in afs_update_cell()... | 2026-09-04 |
| CVE-2026-80876 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte alignment When RB_FOR... | 2026-09-04 |
| CVE-2026-80875 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handli... | 2026-09-04 |
| CVE-2026-80874 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5... | 2026-09-04 |
| CVE-2026-80873 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions kv... | 2026-09-04 |
| CVE-2026-80872 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA... | 2026-09-04 |
| CVE-2026-80871 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove crypto_rng interface Implementing the cry... | 2026-09-04 |
| CVE-2026-80870 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Validate CRIU-restored IDs before idr_alloc The KFD CRIU r... | 2026-09-04 |
| CVE-2026-80869 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfs_read_inode_mount() The $M... | 2026-09-04 |
| CVE-2026-80868 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_data using alloc_page This fixes a BUG re... | 2026-09-04 |
| CVE-2026-80867 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Cur... | 2026-09-04 |
| CVE-2026-80865 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_syms As reported by sashi... | 2026-09-04 |
| CVE-2026-57777 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQ... | 2026-09-04 |
| CVE-2026-78604 | high | 7.8 | No | Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries... | 2026-09-04 |
| CVE-2026-78609 | medium | 5.4 | No | Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via Metadata Spoofing (... | 2026-09-04 |
| CVE-2026-56855 | high | 7.5 | No | Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. No... | 2026-09-04 |
| CVE-2026-78662 | high | 7.5 | No | Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's... | 2026-09-04 |