Search
565 CVEs · published 2026-09-24 to 2026-09-24
CVEs (565, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 251–275 of 565 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-93797 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length i… | |
| CVE-2026-93796 | HIGH | 7.0 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwl_pcie_tx_init() fails after RX init, nic init… | |
| CVE-2026-93795 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix leaks and online flag on radix_tree_insert failure When radix_tree_insert() fails in b… | |
| CVE-2026-93794 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may l… | |
| CVE-2026-93793 | HIGH | 8.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TX_CMD response layout TX_CMD parsing uses frame_count to walk status ent… | |
| CVE-2026-93792 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware about the length of the w… | |
| CVE-2026-93791 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware ba_notif->tid is a firmware-contro… | |
| CVE-2026-93790 | HIGH | 8.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif mvmsta->tid_data was indexed by the … | |
| CVE-2026-93789 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining par… | |
| CVE-2026-93788 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate WGDS table revision index Check tbl_rev bounds before BIT(tbl_rev) to av… | |
| CVE-2026-93787 | HIGH | 8.1 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir cifs_filldir() copies the e… | |
| CVE-2026-93786 | HIGH | 8.1 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's… | |
| CVE-2026-93785 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in key->data… | |
| CVE-2026-93784 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() The KASAN allocation trace shows that a malfo… | |
| CVE-2026-93783 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame rfcomm_recv_frame() casts skb->data to str… | |
| CVE-2026-93782 | HIGH | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into us… | |
| CVE-2026-93781 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi_eh_lock_door() scsi_eh_lock_door() is called from s… | |
| CVE-2026-93545 | MEDIUM | Patched | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
| CVE-2026-93544 | MEDIUM | Patched | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client. |
| CVE-2026-93543 | HIGH | Patched | 7.4 | 2026-09-24 | An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. |
| CVE-2026-93542 | MEDIUM | Patched | 6.5 | 2026-09-24 | An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client. |
| CVE-2026-93288 | HIGH | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state sashiko reports: "nfnl… | |
| CVE-2026-93287 | HIGH | 7.8 | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data->… | |
| CVE-2026-93286 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarp_send_ddp() aarp_send_ddp() calls atalk_find_dev_a… | |
| CVE-2026-93285 | NONE | — | 2026-09-24 | In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in f2fs_sb_info Instead of allocating f2fs_gc_kthread dynamically, embed i… |