CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99023Linux kernel: power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()Linux
- CVE-2026-99022Linux kernel: regulator: ltc3676: don't read the write-only HRST and CLIRQ registersLinux
- CVE-2026-99021Linux kernel: regulator: of: fill in supply names in of_regulator_bulk_get_all()Linux
- CVE-2026-99020Linux kernel: regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4Linux
- CVE-2026-99019Linux kernel: scsi: ch: Do not keep references to data transfer element devicesLinux
- CVE-2026-99018Linux kernel: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tpLinux
- CVE-2026-99017Linux kernel: riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITELinux
- CVE-2026-99016Linux kernel: riscv: futex: untag the user pointer before the atomic accessLinux
- CVE-2026-99015Linux kernel: Bluetooth: hci_sock: Serialize dead-device detachmentLinux
- CVE-2026-99014Linux kernel: Bluetooth: hci_sync: Fix command skb lifetime during scan setupLinux
- CVE-2026-99013Linux kernel: Bluetooth: ISO: Reject concurrent BIS listener setupLinux
- CVE-2026-99012Linux kernel: Bluetooth: ISO: Serialize concurrent connect callsLinux
- CVE-2026-99011Linux kernel: Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()Linux
- CVE-2026-99010Linux kernel: Bluetooth: RFCOMM: free the skb when the DLC has no ownerLinux
- CVE-2026-99009Linux kernel: Bluetooth: RFCOMM: connect the session socket without rfcomm_mutexLinux
- CVE-2026-99008Linux kernel: Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdownLinux
- CVE-2026-99007Linux kernel: drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAINLinux
- CVE-2026-99006Linux kernel: drm/i915/gem: Prevent overstepping exec array boundaryLinux
- CVE-2026-99005Linux kernel: drm/i915/gt: Unmask interrupts only when ACTIVE is trueLinux
- CVE-2026-99004Linux kernel: drm/imagination: Size page table preallocation by device addressLinux
- CVE-2026-99003Linux kernel: drm/panthor: validate userspace queue count against initialized firmware slot countLinux
- CVE-2026-99002Linux kernel: drm/vmwgfx: validate pitch coming from userspaceLinux
- CVE-2026-99001Linux kernel: drm/xe/i2c: cancel the client work on removeLinux
- CVE-2026-99000Linux kernel: drm/xe: Fix shrinker accounting double-subtraction on nested external pinsLinux
- CVE-2026-98999Linux kernel: drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpinLinux
- CVE-2026-98998Linux kernel: drm/bridge: th1520-dw-hdmi: Fix remove() callbackLinux
- CVE-2026-98997Linux kernel: drm/amdgpu/userq: only accept doorbell BOs as queue doorbellLinux
- CVE-2026-98996Linux kernel: fs: don't silently unmount busy mountsLinux
- CVE-2026-98995Linux kernel: namespace: reset the old parent's ->overmount in mnt_change_mountpoint()Linux
- CVE-2026-98994Linux kernel: statmount: read the parent of an unmounted mount under mount_lockLinux