CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98701Linux kernel: wifi: mac80211: release mesh path quota on failed additionsLinux
- CVE-2026-98700Linux kernel: wifi: mac80211: set info->band for 802.3 encap offload framesLinux
- CVE-2026-98699Linux kernel: wifi: mac80211: fix mesh fast xmit path deletion UAFLinux
- CVE-2026-98698Linux kernel: wifi: mac80211: handle empty FILS association request payloadLinux
- CVE-2026-98697Linux kernel: USB: serial: fix dynamic id driver deregistration raceLinux
- CVE-2026-98696Linux kernel: USB: serial: fix driver deregistration orderLinux
- CVE-2026-98695Linux kernel: USB: serial: fix ioctl hangup raceLinux
- CVE-2026-98694Linux kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceledLinux
- CVE-2026-98693Linux kernel: thunderbolt: Hold a router reference for each allocated HopIDLinux
- CVE-2026-98692Linux kernel: thunderbolt: Make the DP tunnel activation callback mandatoryLinux
- CVE-2026-98691Linux kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stoppedLinux
- CVE-2026-98690Linux kernel: thunderbolt: Fix domain reference leak when DPRX read is canceledLinux
- CVE-2026-98689Linux kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceledLinux
- CVE-2026-98688Linux kernel: thunderbolt: Fix NULL dereference in tb_remove_work()Linux
- CVE-2026-98687Linux kernel: thunderbolt: Reject oversized XDomain properties responsesLinux
- CVE-2026-98686Linux kernel: smb: client: discard post-EOF pagecache when extending a file via zero rangeLinux
- CVE-2026-98685Linux kernel: smb: client: discard post-EOF pagecache when extending a file via clone rangeLinux
- CVE-2026-98684Linux kernel: smb: client: flush and commit data before querying allocated rangesLinux
- CVE-2026-98683Linux kernel: smb: client: flush dirty data before zeroing a rangeLinux
- CVE-2026-98682Linux kernel: smb: client: drain and invalidate before server-side copy/cloneLinux
- CVE-2026-98681Linux kernel: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW racesLinux
- CVE-2026-98680Linux kernel: iio: accel: kionix-kx022a: Prevent memory leak and fix stateLinux
- CVE-2026-98679Linux kernel: iio: accel: kxcjk-1013: reject duplicate event disableLinux
- CVE-2026-98678Linux kernel: iio: adc: ad4030: fix invalid oversampling_ratio validationLinux
- CVE-2026-98677Linux kernel: iio: adc: ad_sigma_delta: fix use-after-free on unbindLinux
- CVE-2026-98676Linux kernel: iio: adc: ade9000: fix NULL pointer dereference in clkout registrationLinux
- CVE-2026-98675Linux kernel: iio: adc: ade9000: handle Phase C dip events in IRQ1 handlerLinux
- CVE-2026-98674Linux kernel: iio: adc: adi-axi-adc: Initialize state mutexLinux
- CVE-2026-98673Linux kernel: iio: adc: pac1934: check ACPI label duplicationLinux
- CVE-2026-98672Linux kernel: iio: adc: stm32-adc: fix possible division by zero in processed channelLinux