CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99151drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functionsLinux
- CVE-2026-99150drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gprLinux
- CVE-2026-99149drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctlLinux
- CVE-2026-99148drm/amdgpu: keep the eviction fence until the last handle is closedLinux
- CVE-2026-99147drm/exec: don't immediately add prelocked obj to array of locked objsLinux
- CVE-2026-99146drm/i915/dmc: Add sanity check for DMC load addressLinux
- CVE-2026-99145drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state changeLinux
- CVE-2026-99144sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueueLinux
- CVE-2026-99143tracing: Keep the predicate limit separate from program capacityLinux
- CVE-2026-99142tracing: Check operator stack capacity before pushingLinux
- CVE-2026-99141tracing: Fix crash in print_graph_function_event()Linux
- CVE-2026-99140tracing: Fix hist trigger timestamps for buffered eventsLinux
- CVE-2026-99139tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)Linux
- CVE-2026-99138tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)Linux
- CVE-2026-99137cifs: don't update i_size in cifs_do_truncate without a cached handleLinux
- CVE-2026-99136dm-crypt: fix a tiny race condition in crypt_dec_pendingLinux
- CVE-2026-99135dm-integrity: fix infinite loop on discard with large tag sizeLinux
- CVE-2026-99134mac802154: fix data race and NULL deref on local->assoc_devLinux
- CVE-2026-99133net/iucv: fix the recvmsg window updateLinux
- CVE-2026-99132xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_bufLinux
- CVE-2026-99131xfs: fix capability check in xfsLinux
- CVE-2026-99130io_uring/cancel: don't spin on local work the task can't runLinux
- CVE-2026-99129selinux: fix BPF token permission checksLinux
- CVE-2026-99128sctp: validate chunk length in the inqueue parserLinux
- CVE-2026-99127page_pool: keep frag_offset aligned for odd-sized requestsLinux
- CVE-2026-99126s390/ctcm: Prevent XID null dereferenceLinux
- CVE-2026-99125s390/pai: Handle multiple PMU stop callback invocationsLinux
- CVE-2026-99124s390/pci: Fix leak of uninitialized kernel data in SCLP reportLinux
- CVE-2026-99123vsock/virtio: validate packet source for connected socketsLinux
- CVE-2026-99122vsock/vmci: validate packet source for connected socketsLinux