CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98791Linux kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereferenceLinux
- CVE-2026-98790Linux kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task()Linux
- CVE-2026-98789Linux kernel: bpf: Fix objects stuck in free_by_rcu_ttraceLinux
- CVE-2026-98788Linux kernel: futex: Fix private hash use-after-free on resizeLinux
- CVE-2026-98787In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() bpf_mem_cache_free_rcu() uses this_cpu_ptr() which…Linux
- CVE-2026-98786Linux kernel: drm/amd/display: guard dc_sink dereferences in MST mode validationLinux
- CVE-2026-98785Linux kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspendLinux
- CVE-2026-98784Linux kernel: drm/amdgpu/gfx6: fix firmware leak on teardownLinux
- CVE-2026-98783Linux kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform deviceLinux
- CVE-2026-98782Linux kernel: drm/mediatek: Fix ovl adaptor platform device leakLinux
- CVE-2026-98781Linux kernel: drm/mediatek: Fix pdev reference leak in mtk_drm_bind()Linux
- CVE-2026-98780Linux kernel: drm/amdgpu: fix IP instance memory leak on kobject add failureLinux
- CVE-2026-98779Linux kernel: drm/amdgpu: fix ACP MFD device leak on init failureLinux
- CVE-2026-98778Linux kernel: binder: fix is_failure flag for superseded transaction cleanupLinux
- CVE-2026-98777Linux kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersedeLinux
- CVE-2026-98776Linux kernel: binderfs: fix UAF write in binder_add_deviceLinux
- CVE-2026-98775Linux kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failureLinux
- CVE-2026-98774Linux kernel: rust_binder: cancel deferred work items in thread exitLinux
- CVE-2026-98773Linux kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnectedLinux
- CVE-2026-98772Linux kernel: USB: serial: fix port tear down use-after-freeLinux
- CVE-2026-98771Linux kernel: usb: storage: sierra_ms: reject short SWoC info transfersLinux
- CVE-2026-98770Linux kernel: usb: gadget: midi2: Fix the jack descriptor array sizesLinux
- CVE-2026-98769Linux kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmdLinux
- CVE-2026-98768Linux kernel: usb: typec: anx7411 - stop the IRQ before destroying the workqueueLinux
- CVE-2026-98767Linux kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer countLinux
- CVE-2026-98766Linux kernel: usb: gadget: aspeed-vhub: cancel wake work on device removalLinux
- CVE-2026-98765Linux kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completionsLinux
- CVE-2026-98764Linux kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESCLinux
- CVE-2026-98763Linux kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpointsLinux
- CVE-2026-98762Linux kernel: USB: dwc2: shut down wakeup timer before freeing HCD stateLinux