CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98490Linux kernel use-after-free in Open vSwitch conntrack helpersLinux
- CVE-2026-98489Linux kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons readLinux
- CVE-2026-98488Linux kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean readLinux
- CVE-2026-98487Linux kernel: net: bridge: mdb: restart port group walk after deletionLinux
- CVE-2026-98486Linux kernel: net: ena: fix MMIO read buffer leak on probe failureLinux
- CVE-2026-98485Linux kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds readLinux
- CVE-2026-98484Linux kernel: netfilter: nf_tables: skip expired catchall elements on insert and deleteLinux
- CVE-2026-98483Linux kernel: nfc: fix use-after-free in nfc_get_local_general_bytesLinux
- CVE-2026-98482Linux kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()Linux
- CVE-2026-98481Linux kernel: nfc: port100: reject frames whose declared length exceeds the received dataLinux
- CVE-2026-98480Linux kernel: nfc: trf7970a: power down on startup RX gain failureLinux
- CVE-2026-98479Linux kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDULinux
- CVE-2026-98478Linux kernel: scsi: ufs: core: Keep internal commands dispatchable during error handlingLinux
- CVE-2026-98477Linux kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()Linux
- CVE-2026-98476Linux kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()Linux
- CVE-2026-98475Linux kernel: s390/cmf: Fix virtual vs physical address confusionLinux
- CVE-2026-98474Linux kernel: s390/pci: Fix missing device lock in zpci_report_status()Linux
- CVE-2026-98473Linux kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host configLinux
- CVE-2026-98472Linux kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEVLinux
- CVE-2026-98471Linux kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migrationLinux
- CVE-2026-98470Linux kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected modeLinux
- CVE-2026-98469Linux kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handlingLinux
- CVE-2026-98468Linux kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown raceLinux
- CVE-2026-98467Linux kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown raceLinux
- CVE-2026-98466Linux kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2Linux
- CVE-2026-98465Linux kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migrationLinux
- CVE-2026-98464Linux kernel use-after-free in RISC-V KVM hrtimer callbackLinux
- CVE-2026-98463Linux kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flagsLinux
- CVE-2026-98462Linux kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuseLinux
- CVE-2026-98461Linux kernel: Bluetooth: hci_sock: validate event length before filteringLinux