CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98640Linux kernel: HID: amd_sfh: Validate PCI BAR size before mappingLinux
- CVE-2026-98639Linux kernel: KVM: riscv: Fix NACL hfence entry update orderLinux
- CVE-2026-98638Linux kernel: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()Linux
- CVE-2026-98637Linux kernel: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failureLinux
- CVE-2026-98636Linux kernel: squashfs: Add dictionary size range check to prevent shift-out-of-boundsLinux
- CVE-2026-98635Linux kernel: scsi: block: Fix zones_cond out-of-bounds write on zone reportLinux
- CVE-2026-98634Linux kernel: scsi: sd_zbc: Reject disks with too many zonesLinux
- CVE-2026-98633Linux kernel: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()Linux
- CVE-2026-98632Linux kernel: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancelLinux
- CVE-2026-98631Linux kernel: xsk: Use a 32-bit compare in xsk_map_gen_lookupLinux
- CVE-2026-98630Linux kernel: eth: fbnic: Fix payload page pool error cleanupLinux
- CVE-2026-98629Linux kernel: net/sched: cls_u32: fix manual hash table handle IDR aliasingLinux
- CVE-2026-98628Linux kernel: bpf: Make post-verification instruction rewrites killableLinux
- CVE-2026-98627Linux kernel: bpf: Preserve packet pointer class displacement in regsafe()Linux
- CVE-2026-98626Linux kernel: bpf: Restrict CO-RE poisoning to relocatable instructionsLinux
- CVE-2026-98625Linux kernel: netfilter: flowtable: publish HW_DEAD after worker is doneLinux
- CVE-2026-98624Linux kernel: netfilter: nfnetlink_queue: hold nfnl mutex in event notifierLinux
- CVE-2026-98623Linux kernel: drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_updateLinux
- CVE-2026-98622Linux kernel: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failureLinux
- CVE-2026-98621Linux kernel: net: gue: reject invalid REMCSUM offsetsLinux
- CVE-2026-98620Linux kernel: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failureLinux
- CVE-2026-98619Linux kernel: net: ethtool: keep rtnl_lock for the ioctl self testLinux
- CVE-2026-98618Linux kernel: eth: fbnic: Handle maximum standalone channelsLinux
- CVE-2026-98617Linux kernel: eth: fbnic: use the Rx queue napi pointer to find the napi vectorLinux
- CVE-2026-98616Linux kernel: eth: fbnic: reset num_napi when the napi vectors are freedLinux
- CVE-2026-98615Linux kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailboxLinux
- CVE-2026-98614Linux kernel: sctp: avoid livelock while updating retransmit pathLinux
- CVE-2026-98613Linux kernel: bpf: Bound ownership depth through local kptrs and graph rootsLinux
- CVE-2026-98612Linux kernel: net: usb: catc: bound the RX packet length in catc_rx_done()Linux
- CVE-2026-98611Linux kernel: bpf: Check params size before reading reserved fieldsLinux