CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98610Linux kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budgetLinux
- CVE-2026-98609Linux kernel: drm/virtio: fix object leak when drm_gem_handle_create() failsLinux
- CVE-2026-98608Linux kernel: drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()Linux
- CVE-2026-98607Linux kernel: drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()Linux
- CVE-2026-98606Linux kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errorsLinux
- CVE-2026-98605Linux kernel: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attachLinux
- CVE-2026-98604Linux kernel: ovpn: replace bind when learning local endpointLinux
- CVE-2026-98603Linux kernel: ovpn: replace bind when clearing stale local sourceLinux
- CVE-2026-98602Linux kernel: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthroughLinux
- CVE-2026-98601Linux kernel: Bluetooth: btintel_pcie: validate device-supplied DMA indicesLinux
- CVE-2026-98600Linux kernel: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()Linux
- CVE-2026-98599Linux kernel: bpf: Reject non-negative offsets in stack_slot_obj_get_spi()Linux
- CVE-2026-98598In the Linux kernel, the following vulnerability has been resolved: ipv6: Prevent rt6_insert_exception() for dying fib6_infoLinux
- CVE-2026-98597Linux kernel: net: usb: sr9700: include receive overhead in the length checkLinux
- CVE-2026-98596In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6_route_output_flags(), ip6_rt_put_flags(), and ip6_dst_check() detect an uncached route…Linux
- CVE-2026-98595Linux kernel: udp: remove a disconnected socket from the 4-tuple hash tableLinux
- CVE-2026-98594Linux kernel: tg3: clean up PHYLIB resources on probe failureLinux
- CVE-2026-98593Linux kernel: s390/debug: Fix NULL pointer dereference in debug_info_copy()Linux
- CVE-2026-98592Linux kernel: net: spacemit: clear TX descriptor on fragment mapping failureLinux
- CVE-2026-98591Linux kernel: bpf: Fix bounds check for skb-backed dynptrsLinux
- CVE-2026-98590Linux kernel: bpf: Fix bpf_sock context code generationLinux
- CVE-2026-98589Linux kernel: bpf: Reject pkt arguments in mutating subprogsLinux
- CVE-2026-98588Linux kernel: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_allocLinux
- CVE-2026-98587Linux kernel: firewire: cdev: fix back-transition for iso_resource_auto client resourceLinux
- CVE-2026-98586Linux kernel: sctp: hold asoc or transport before mod_timer() in timer handlersLinux
- CVE-2026-98585Linux kernel: eth: fbnic: Avoid rounding zero ring sizesLinux
- CVE-2026-98584Linux kernel: net/sched: fix potential stack infoleak in em_text_dump()Linux
- CVE-2026-98583Linux kernel: nfc: nfcmrvl: validate helper command length before pullLinux
- CVE-2026-98582Linux kernel: nfc: st21nfca: validate received frame sizeLinux
- CVE-2026-98581Linux kernel: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()Linux