CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99052Linux kernel: selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_optsLinux
- CVE-2026-99051Linux kernel: fsverity: RCU-delay the freeing of struct fsverity_infoLinux
- CVE-2026-99050Linux kernel: gpio: mpsse: fix race when arming the IRQ poll workerLinux
- CVE-2026-99049Linux kernel: gpio: xilinx: fix runtime PM leak on request error pathLinux
- CVE-2026-99048Linux kernel: gve: fix napi_disable deadlock when attempting to disable XSK poolsLinux
- CVE-2026-99047Linux kernel: gve: fix XSK buffer leak when rings are stoppedLinux
- CVE-2026-99046Linux kernel: gve: fix XSK buffer leak on error descriptorLinux
- CVE-2026-99045Linux kernel: ibmveth: h_free logical LAN on open-fail after registerLinux
- CVE-2026-99044Linux kernel: ice: fix use-after-free in dynamic port cleanupLinux
- CVE-2026-99043Linux kernel: ice: fix metadata_dst refcount handling on representor teardownLinux
- CVE-2026-99042Linux kernel: io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6Linux
- CVE-2026-99041Linux kernel: ip6_gre: remove obsolete ERSPAN PMTU updateLinux
- CVE-2026-99040Linux kernel: KEYS: Fix add_key() race with keyring restrictionLinux
- CVE-2026-99039Linux kernel: memstick: core: wait for request completion before freeing cardLinux
- CVE-2026-99038Linux kernel: memstick: rtsx_usb_ms: complete requests after eject instead of dropping themLinux
- CVE-2026-99037Linux kernel: dm-crypt: reject the lmk IV mode with AEAD ciphersLinux
- CVE-2026-99036Linux kernel: dm: fix reading free memory in do_resumeLinux
- CVE-2026-99035Linux kernel: mmc: mtk-sd: Cancel request timeout work on removeLinux
- CVE-2026-99034Linux kernel: mmc: sdhci-sprd: disable runtime PM on removeLinux
- CVE-2026-99033Linux kernel: net/packet: guard the ll header push in packet_rcv_spkt()Linux
- CVE-2026-99032Linux kernel: net/smc: protect clcsock lifetime in smc_getnameLinux
- CVE-2026-99031Linux kernel: net: bridge: avoid recursive multicast port cleanupLinux
- CVE-2026-99030Linux kernel: net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()Linux
- CVE-2026-99029Linux kernel: net: sparx5: free the matchall entry on destroyLinux
- CVE-2026-99028Linux kernel: net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stopLinux
- CVE-2026-99027Linux kernel: net: team: stop reusing skb after queue overrideLinux
- CVE-2026-99026Linux kernel: net: team: free skb when broadcast has no txable portLinux
- CVE-2026-55422conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboardconda-forge.github.io
- CVE-2026-99025Linux kernel: openvswitch: fix soft lockup in the netlink flow dumpLinux
- CVE-2026-99024Linux kernel: optee: register TEE devices only once fully initializedLinux