CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99181autofs: ignore notification errors from a replaced pipeLinux
- CVE-2026-99180unicode: free the map after a grace periodLinux
- CVE-2026-99179watch_queue: Fix note pool publication race in watch_queue_set_size()Linux
- CVE-2026-99178x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI contextLinux
- CVE-2026-99177KVM: SEV: Fix page dirtying in sev_gmem_post_populate()Linux
- CVE-2026-99176KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-EntryLinux
- CVE-2026-99175fsnotify: prevent mark additions during connector teardownLinux
- CVE-2026-99174ext4: free the sbi after a grace periodLinux
- CVE-2026-99173eventfs: Free the eventfs_inode after an rcu grace period tooLinux
- CVE-2026-99172ipc: drop the mqueue mount with kern_unmount() on setup failureLinux
- CVE-2026-99171ntfs3: free the sbi after a grace periodLinux
- CVE-2026-99170namespace: a mount that copy_tree() leaves out can't take over a lockLinux
- CVE-2026-99169futex: Fix mm reuse handling for FUT_OFF_MMSHAREDLinux
- CVE-2026-99168mshv_vtl: Check per-CPU register page before mmapLinux
- CVE-2026-99167net/sched: fix use-after-free in __tcf_action_put()Linux
- CVE-2026-99166net: rds: fix uninitialized trans dereference in CM event handlerLinux
- CVE-2026-99165sctp: revalidate output stream after association connect waitLinux
- CVE-2026-99164spi: imx: fix slab corruption from undersized DMA bounce buffersLinux
- CVE-2026-99163tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fieldsLinux
- CVE-2026-99162gpio: shared: fix use-after-free bug when adding shared proxiesLinux
- CVE-2026-99161i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()Linux
- CVE-2026-99160ring-buffer: Do not show buffer_meta for CPUs without a bufferLinux
- CVE-2026-99159ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()Linux
- CVE-2026-99158ring-buffer: Fix false warning in ring_buffer_map_get_reader()Linux
- CVE-2026-99157scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB repliesLinux
- CVE-2026-99156scsi: st: Fix use-after-free race between st_remove() and st_open()Linux
- CVE-2026-99155scsi: xen/scsifront: Check for a NULL shadow entry on a backend responseLinux
- CVE-2026-99154scsi: libiscsi: Reject a negative task index from parse_pdu_ittLinux
- CVE-2026-99153scsi: libiscsi: Validate the ITT reflected in a Reject PDULinux
- CVE-2026-99152scsi: libiscsi: Validate the task named by a management responseLinux