CVE-2026-99083Published
ksmbd: fix heap out-of-bounds write in krb5_authenticate()
cve-program ·
Vendor product: Linux · Vendor product: Linux
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
677579 source statements · aliases may refer to the same vulnerabilityCVE-2026-99082Published
KVM: x86: Use active memslots for the per-vCPU MMIO cache
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99081Published
bnxt_en: fix DMA mapping length for padded small packets
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99079Published
net/mlx5e: Prevent stale XSK buffer release on refill retry
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99078Published
net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99077Published
ipv4: udp: Create exceptions before socket matching
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99064Published
cipso: adjust cached option offsets when removing CIPSO
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99059Published
wireguard: noise: reject response consumption after intermediate initiation
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99056Published
strparser: make sure __strp_recv isn't running before tearing down the parser
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99054Published
tipc: destroy topsrv workqueues before closing connections
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99053Published
tipc: hold a reference to nodes found by link name
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99051Published
fsverity: RCU-delay the freeing of struct fsverity_info
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99050Published
gpio: mpsse: fix race when arming the IRQ poll worker
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99046Published
gve: fix XSK buffer leak on error descriptor
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99042Published
io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99032Published
net/smc: protect clcsock lifetime in smc_getname
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99030Published
net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99018Published
riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99017Published
riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99016Published
riscv: futex: untag the user pointer before the atomic access
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99014Published
Bluetooth: hci_sync: Fix command skb lifetime during scan setup
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99013Published
Bluetooth: ISO: Reject concurrent BIS listener setup
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99012Published
Bluetooth: ISO: Serialize concurrent connect calls
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99011Published
Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99006Published
drm/i915/gem: Prevent overstepping exec array boundary
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-99002Published
drm/vmwgfx: validate pitch coming from userspace
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98999Published
drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98995Published
namespace: reset the old parent's ->overmount in mnt_change_mountpoint()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98993Published
namespace: don't inherit MNT_UMOUNT in clone_mnt()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98991Published
namespace: queue a mount only once for mount notifications
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98988Published
namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98982Published
namespace: don't let a pseudo dentry become the root of a mount
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98981Published
namespace: unhash a dentry before detaching the mounts on it
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98980Published
namei: don't reveal overmounted entries in refwalk
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98978Published
namespace: never expire a locked mount
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98976Published
namespace: keep the lock on a mount that a propagated copy is moved beneath
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98975Published
xfs: stop exchanging reflink flags when exchanging mappings
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98974Published
xfs: fix exchange-range-to-eof file size exchange
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98968Published
amt: send the relay's General Query directly from the receive path
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98965Published
ice: Restore Ordered MMIO Writes for Tx Doorbells
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98964Published
nvmet: use the local P2P device on metadata allocation failure
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98959Published
btrfs: fix xattr replace when multiple xattrs are packed in the same item
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98952Published
pfcp: make sure the SEID is linear before reading it
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98945Published
HID: steam: Rearrange teardown sequence
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98944Published
HID: steam: Refactor registration
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98941Published
ext4: don't enable large folios on encrypted inodes
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98932Published
EDAC/altera: Fix use-after-free in error paths
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98927Published
KVM: arm64: nv: Fix life cycle of the nested_mmus array
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98911Published
dpaa2-switch: fix the error path in dpaa2_switch_rx()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98899Published
netfilter: ipset: mark the rcu locked areas properly
cve-program ·
Vendor product: Linux · Vendor product: Linux
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.