Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-121)

critical Nessus Plugin ID 379876

Synopsis

The remote Amazon Linux 2 host is missing a security update.

Description

The version of kernel installed on the remote host is prior to 5.15.224-160.263. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-121 advisory.

In the Linux kernel, the following vulnerability has been resolved:

net: bonding: fix use-after-free in bond_xmit_broadcast() (CVE-2026-31419)

In the Linux kernel, the following vulnerability has been resolved:

security/keys: fix missed RCU read section on lookup

Nicholas Carlini reports that the keyring code calls assoc_array_find()in find_key_to_update() without holding the RCU read lock, while theassoc_array_gc() code really is designed around removing the node fromthe tree and then freeing it after an RCU grace-period.

The regular key handling doesn't see this because holding the keyringsemaphore hides any lifetime issues, but the persistent key handlinguses a different model.

Instead of extending the keyring locking, just do the simple RCU lockingthat the assoc_array was designed for. (CVE-2026-64015)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). (CVE-2026-74406)

In the Linux kernel, the following vulnerability has been resolved:

mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF (CVE-2026-74672)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_u32: skip hash tables in u32_bind_class() (CVE-2026-74739)

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: bail out of setup if the controller is inaccessible (CVE-2026-80861)

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: reject duplicate CREDS_VALUE options (CVE-2026-89539)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: fix gssx_dec_option_array error path bugs (CVE-2026-89544)

In the Linux kernel, the following vulnerability has been resolved:

params: fix charp corruption on allocation failure (CVE-2026-89552)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (CVE-2026-89633)

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (CVE-2026-89640)

In the Linux kernel, the following vulnerability has been resolved:

ceph: bound copied dentry name length in NFS export get_name

ceph_get_name() copies the MDS-supplied name into the caller'sNAME_MAX-sized buffer with memcpy(name, rinfo->dname, rinfo->dname_len)and then writes name[rinfo->dname_len] = 0, without checking dname_lenagainst NAME_MAX. A malicious or buggy MDS that returns a LOOKUPNAME replywith dname_len > NAME_MAX overflows the buffer. __get_snap_name() copiesrde->name / rde->name_len the same unchecked way.

Impact: a malicious or compromised Ceph MDS overflows the NAME_MAX namebuffer in a client's NFS-export get_name path, a slab out-of-bounds writereported by KASAN. Reachable when a CephFS mount is re-exported over NFS.

Add ceph_export_copy_name(), which rejects lengths above NAME_MAX with-ENAMETOOLONG before the copy, and use it in both ceph_get_name() and__get_snap_name(). (CVE-2026-89652)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix nfsd_file leak on inter-server COPY setup failure (CVE-2026-89680)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix clock domain mismatch in clients_still_reclaiming() (CVE-2026-89685)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: size fh_verify server sockaddr slot by xpt_locallen (CVE-2026-89702)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: release path refs on follow_down() error (CVE-2026-89707)

In the Linux kernel, the following vulnerability has been resolved:

device property: fix infinite loop in fwnode_for_each_child_node() (CVE-2026-89744)

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix TPM teardown ordering (CVE-2026-89763)

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: transfer the pmd dirty bit to the folio on zap (CVE-2026-89987)

In the Linux kernel, the following vulnerability has been resolved:

kprobes: Protect kprobe_blacklist with RCU (CVE-2026-89988)

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Take trace_array reference before accessing its ftrace_ops (CVE-2026-90002)

In the Linux kernel, the following vulnerability has been resolved:

lockd: fix swapped arguments in nlmsvc_match_ip() (CVE-2026-93231)

In the Linux kernel, the following vulnerability has been resolved:

arm64: mm: Fix the lockless page-table walk in show_pte() (CVE-2026-93239)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix heap overflow in DACL owner/group rewrite (CVE-2026-97555)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: avoid leaking refcount when cifs_sb_tlink() fails (CVE-2026-97556)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: avoid leaking refcount in cifs_queue_oplock_break() (CVE-2026-97557)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix cifsFileInfo reference leak in deferred close (CVE-2026-97558)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: reject userspace cifs.idmap descriptions (CVE-2026-97564)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_api: release all action references on NEWACTION failure (CVE-2026-97616)

In the Linux kernel, the following vulnerability has been resolved:

io_uring/rw: end write accounting from ->ki_complete (CVE-2026-97619)

In the Linux kernel, the following vulnerability has been resolved:

genetlink: pin family module during policy dump (CVE-2026-97901)

In the Linux kernel, the following vulnerability has been resolved:

tick/broadcast: Plug clockevents replacement race (CVE-2026-97925)

In the Linux kernel, the following vulnerability has been resolved:

ipmr: account multicast table and route memory (CVE-2026-97939)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential OOB read in smb3_enum_snapshots() (CVE-2026-98169)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (CVE-2026-98170)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (CVE-2026-98171)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() (CVE-2026-98245)

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: drop RX packets with a short Ethernet header (CVE-2026-98375)

In the Linux kernel, the following vulnerability has been resolved:

vlan: require the MAC header to be present in __vlan_insert_inner_tag() (CVE-2026-98377)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: close completed creates on compound wait errors (CVE-2026-98450)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: use finish_no_open() for non-regular inodes (CVE-2026-98451)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: close handle after create-context parsing failure (CVE-2026-98453)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix create context out-of-bounds reads (CVE-2026-98454)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: skip expired catchall elements on insert and delete (CVE-2026-98484)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: conntrack: fix helper UAF due to extensions realloc (CVE-2026-98490)

In the Linux kernel, the following vulnerability has been resolved:

mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (CVE-2026-98507)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: use one headroom snapshot for neighbour replies (CVE-2026-98568)

In the Linux kernel, the following vulnerability has been resolved:

perf: Require kernel access for text poke events (CVE-2026-98655)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (CVE-2026-98681)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: discard post-EOF pagecache when extending a file via zero range (CVE-2026-98686)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix ioctl hangup race (CVE-2026-98695)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix driver deregistration order (CVE-2026-98696)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix dynamic id driver deregistration race (CVE-2026-98697)

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted (CVE-2026-98716)

In the Linux kernel, the following vulnerability has been resolved:

tty: fix saved termios reset race (CVE-2026-98750)

In the Linux kernel, the following vulnerability has been resolved:

tty: abort break signalling on hangup (CVE-2026-98751)

In the Linux kernel, the following vulnerability has been resolved:

tty: port: fix tty_port_tty_vhangup() race (CVE-2026-98752)

In the Linux kernel, the following vulnerability has been resolved:

tty: tty_port: restore TTY_IO_ERROR on activation failure (CVE-2026-98753)

In the Linux kernel, the following vulnerability has been resolved:

usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (CVE-2026-98763)

In the Linux kernel, the following vulnerability has been resolved:

usb: storage: sierra_ms: reject short SWoC info transfers (CVE-2026-98771)

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: fix port tear down use-after-free (CVE-2026-98772)

In the Linux kernel, the following vulnerability has been resolved:

perf: Fix race between perf_event_exit_task() and perf_pending_task() (CVE-2026-98790)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: filter some flags received in the backup server (CVE-2026-98794)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_api: reclaim an empty proto on the error path (CVE-2026-98811)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: don't leak fragment references when changeset init fails (CVE-2026-98831)

In the Linux kernel, the following vulnerability has been resolved:

vt: skip screen update for DEC alignment test on backgroup consoles (CVE-2026-98838)

In the Linux kernel, the following vulnerability has been resolved:

vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (CVE-2026-98840)

In the Linux kernel, the following vulnerability has been resolved:

sctp: check RCV_SHUTDOWN after the sendmsg connect wait (CVE-2026-98846)

In the Linux kernel, the following vulnerability has been resolved:

net/packet: prevent TX_RING byte count overflow (CVE-2026-98850)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_flow_offload: drop flowtable reference on init error path (CVE-2026-98851)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: only treat a positive changeset id as registered (CVE-2026-98854)

In the Linux kernel, the following vulnerability has been resolved:

of/overlay: put property on deadprops only after changeset add succeeds (CVE-2026-98855)

In the Linux kernel, the following vulnerability has been resolved:

kprobes: Skip disarmed probes when checking optkprobe overlap (CVE-2026-98856)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: bound LBLCR and LBLC cache growth (CVE-2026-98857)

In the Linux kernel, the following vulnerability has been resolved:

audit: fix exe mark UAF in kill_rules() (CVE-2026-98862)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: use shorter 120ms post resume hold for SS root hubs (CVE-2026-98933)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() (CVE-2026-98934)

In the Linux kernel, the following vulnerability has been resolved:

flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() (CVE-2026-98950)

In the Linux kernel, the following vulnerability has been resolved:

flow_dissector: avoid u16 truncation of skb->len when computing thoff (CVE-2026-98955)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: em_text: reject unterminated algo before autoload (CVE-2026-98969)

In the Linux kernel, the following vulnerability has been resolved:

namespace: handle mount locking for automounts correctly (CVE-2026-98977)

In the Linux kernel, the following vulnerability has been resolved:

namespace: refuse an automount below a mount that is in no namespace (CVE-2026-98979)

In the Linux kernel, the following vulnerability has been resolved:

namespace: unhash a dentry before detaching the mounts on it (CVE-2026-98981)

In the Linux kernel, the following vulnerability has been resolved:

dcache: don't put a mountpoint on a dentry that's being removed (CVE-2026-98984)

In the Linux kernel, the following vulnerability has been resolved:

namespace: check the mounts before reading their parents in pivot_root() (CVE-2026-98985)

In the Linux kernel, the following vulnerability has been resolved:

namespace: check a submount for references right before unmounting it (CVE-2026-98990)

In the Linux kernel, the following vulnerability has been resolved:

namespace: don't copy an unmounted mount tree (CVE-2026-98992)

In the Linux kernel, the following vulnerability has been resolved:

namespace: don't inherit MNT_UMOUNT in clone_mnt() (CVE-2026-98993)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gt: Unmask interrupts only when ACTIVE is true (CVE-2026-99005)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gem: Prevent overstepping exec array boundary (CVE-2026-99006)

In the Linux kernel, the following vulnerability has been resolved:

drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (CVE-2026-99007)

In the Linux kernel, the following vulnerability has been resolved:

scsi: ch: Do not keep references to data transfer element devices (CVE-2026-99019)

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix soft lockup in the netlink flow dump (CVE-2026-99025)

In the Linux kernel, the following vulnerability has been resolved:

net: team: stop reusing skb after queue override (CVE-2026-99027)

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: avoid recursive multicast port cleanup (CVE-2026-99031)

In the Linux kernel, the following vulnerability has been resolved:

net/packet: guard the ll header push in packet_rcv_spkt() (CVE-2026-99033)

In the Linux kernel, the following vulnerability has been resolved:

dm: fix reading free memory in do_resume (CVE-2026-99036)

In the Linux kernel, the following vulnerability has been resolved:

dm-crypt: reject the lmk IV mode with AEAD ciphers (CVE-2026-99037)

In the Linux kernel, the following vulnerability has been resolved:

KEYS: Fix add_key() race with keyring restriction (CVE-2026-99040)

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: remove obsolete ERSPAN PMTU update (CVE-2026-99041)

In the Linux kernel, the following vulnerability has been resolved:

selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts (CVE-2026-99052)

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: don't leak the skb when xennet_fill_frags() fails (CVE-2026-99057)

In the Linux kernel, the following vulnerability has been resolved:

workqueue: Fix NULL current_pwq deref in chained work check (CVE-2026-99058)

In the Linux kernel, the following vulnerability has been resolved:

wireguard: noise: reject response consumption after intermediate initiation (CVE-2026-99059)

In the Linux kernel, the following vulnerability has been resolved:

dm ioctl: don't let data_start run past the buffer (CVE-2026-99063)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() (CVE-2026-99067)

In the Linux kernel, the following vulnerability has been resolved:

ipv6: do not warn on route notification size race (CVE-2026-99070)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: do not warn on route notification size race (CVE-2026-99071)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: stop route notification sizing when nexthop group shrinks (CVE-2026-99072)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: stop PMTU walk when nexthop group shrinks (CVE-2026-99074)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: udp: Create exceptions before socket matching (CVE-2026-99077)

In the Linux kernel, the following vulnerability has been resolved:

fs: Free any excess xarray nodes in clear_inode() (CVE-2026-99080)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Use active memslots for the per-vCPU MMIO cache (CVE-2026-99082)

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: validate transport header presence in set_ipv6_addr (CVE-2026-99088)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: cls_flower: validate mask pointer after nla_next() (CVE-2026-99112)

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: mcast: don't truncate the port group walk on teardown (CVE-2026-99117)

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/dmc: Harden DMC firmware payload parsing (CVE-2026-99118)

In the Linux kernel, the following vulnerability has been resolved:

ipv4: avoid divide by zero in fib_rebalance (CVE-2026-99121)

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: validate packet source for connected sockets (CVE-2026-99123)

In the Linux kernel, the following vulnerability has been resolved:

page_pool: keep frag_offset aligned for odd-sized requests (CVE-2026-99127)

In the Linux kernel, the following vulnerability has been resolved:

sctp: validate chunk length in the inqueue parser (CVE-2026-99128)

In the Linux kernel, the following vulnerability has been resolved:

dm-integrity: fix infinite loop on discard with large tag size (CVE-2026-99135)

In the Linux kernel, the following vulnerability has been resolved:

dm-crypt: fix a tiny race condition in crypt_dec_pending (CVE-2026-99136)

In the Linux kernel, the following vulnerability has been resolved:

tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) (CVE-2026-99138)

In the Linux kernel, the following vulnerability has been resolved:

scsi: libiscsi: Validate the ITT reflected in a Reject PDU (CVE-2026-99153)

In the Linux kernel, the following vulnerability has been resolved:

scsi: st: Fix use-after-free race between st_remove() and st_open() (CVE-2026-99156)

In the Linux kernel, the following vulnerability has been resolved:

sctp: revalidate output stream after association connect wait (CVE-2026-99165)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: fix use-after-free in __tcf_action_put() (CVE-2026-99167)

In the Linux kernel, the following vulnerability has been resolved:

futex: Fix mm reuse handling for FUT_OFF_MMSHARED (CVE-2026-99169)

In the Linux kernel, the following vulnerability has been resolved:

fsnotify: prevent mark additions during connector teardown (CVE-2026-99175)

In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (CVE-2026-99176)

In the Linux kernel, the following vulnerability has been resolved:

autofs: ignore notification errors from a replaced pipe (CVE-2026-99181)

In the Linux kernel, the following vulnerability has been resolved:

netlink: avoid hashing the network namespace pointer (CVE-2026-99201)

In the Linux kernel, the following vulnerability has been resolved:

pipe: preserve existing fasync readers on writer setup failure (CVE-2026-99203)

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: iscsi: Fix race in discovery auth updates (CVE-2026-99206)

In the Linux kernel, the following vulnerability has been resolved:

netlink: reset skb headers before unicast and multicast filtering (CVE-2026-99211)

In the Linux kernel, the following vulnerability has been resolved:

vsock: treat TCP_CLOSING as once-established (CVE-2026-99213)

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: Don't reset VMBus connection state on error/exit paths (CVE-2026-99216)

In the Linux kernel, the following vulnerability has been resolved:

keys: Protect the read method check against type removal (CVE-2026-99222)

In the Linux kernel, the following vulnerability has been resolved:

keys: make keyring indexes independent of kernel addresses (CVE-2026-99223)

In the Linux kernel, the following vulnerability has been resolved:

keys: Check the authorization payload in process keyring searches (CVE-2026-99225)

In the Linux kernel, the following vulnerability has been resolved:

keys: Avoid the owner account dereference in named keyring lookup (CVE-2026-99226)

In the Linux kernel, the following vulnerability has been resolved:

tracing: Reject incomplete event filter expressions (CVE-2026-99236)

In the Linux kernel, the following vulnerability has been resolved:

KEYS: Fix key_reject_and_link() race with keyring restriction (CVE-2026-99245)

In the Linux kernel, the following vulnerability has been resolved:

dm cache: fix issue with background work locking (CVE-2026-99256)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Run 'yum update kernel' or or 'yum update --advisory ALAS2KERNEL-5.15-2026-121' to update your system.

Plugin Details

Severity: Critical

ID: 379876

File Name: al2_ALASKERNEL-5_15-2026-121.nasl

Version: 1.1

Type: Local

Agent: unix

Family: Amazon Linux Local Security Checks

Published: 11/12/2026

Updated: 11/12/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.6

Percentile: 98.11

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-99153

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:amazon:linux:2, p-cpe:/a:amazon:linux:bpftool-debuginfo, p-cpe:/a:amazon:linux:bpftool, p-cpe:/a:amazon:linux:kernel-debuginfo-common-aarch64, p-cpe:/a:amazon:linux:kernel-debuginfo-common-x86_64, p-cpe:/a:amazon:linux:kernel-debuginfo, p-cpe:/a:amazon:linux:kernel-devel, p-cpe:/a:amazon:linux:kernel-headers, p-cpe:/a:amazon:linux:kernel-livepatch-5.15.224-160.263, p-cpe:/a:amazon:linux:kernel-tools-debuginfo, p-cpe:/a:amazon:linux:kernel-tools-devel, p-cpe:/a:amazon:linux:kernel-tools, p-cpe:/a:amazon:linux:kernel, p-cpe:/a:amazon:linux:perf-debuginfo, p-cpe:/a:amazon:linux:perf, p-cpe:/a:amazon:linux:python-perf-debuginfo, p-cpe:/a:amazon:linux:python-perf

Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/12/2026

Vulnerability Publication Date: 4/13/2026

Reference Information

CVE: CVE-2026-31419, CVE-2026-64015, CVE-2026-74406, CVE-2026-74672, CVE-2026-74739, CVE-2026-80861, CVE-2026-89481, CVE-2026-89539, CVE-2026-89544, CVE-2026-89552, CVE-2026-89633, CVE-2026-89640, CVE-2026-89652, CVE-2026-89680, CVE-2026-89685, CVE-2026-89702, CVE-2026-89707, CVE-2026-89744, CVE-2026-89763, CVE-2026-89987, CVE-2026-89988, CVE-2026-90002, CVE-2026-93231, CVE-2026-93239, CVE-2026-97555, CVE-2026-97556, CVE-2026-97557, CVE-2026-97558, CVE-2026-97564, CVE-2026-97616, CVE-2026-97619, CVE-2026-97901, CVE-2026-97925, CVE-2026-97939, CVE-2026-98169, CVE-2026-98170, CVE-2026-98171, CVE-2026-98245, CVE-2026-98375, CVE-2026-98377, CVE-2026-98450, CVE-2026-98451, CVE-2026-98453, CVE-2026-98454, CVE-2026-98484, CVE-2026-98490, CVE-2026-98507, CVE-2026-98568, CVE-2026-98655, CVE-2026-98681, CVE-2026-98686, CVE-2026-98695, CVE-2026-98696, CVE-2026-98697, CVE-2026-98716, CVE-2026-98750, CVE-2026-98751, CVE-2026-98752, CVE-2026-98753, CVE-2026-98763, CVE-2026-98771, CVE-2026-98772, CVE-2026-98790, CVE-2026-98794, CVE-2026-98811, CVE-2026-98831, CVE-2026-98838, CVE-2026-98840, CVE-2026-98846, CVE-2026-98850, CVE-2026-98851, CVE-2026-98854, CVE-2026-98855, CVE-2026-98856, CVE-2026-98857, CVE-2026-98862, CVE-2026-98933, CVE-2026-98934, CVE-2026-98950, CVE-2026-98955, CVE-2026-98969, CVE-2026-98977, CVE-2026-98979, CVE-2026-98981, CVE-2026-98984, CVE-2026-98985, CVE-2026-98990, CVE-2026-98992, CVE-2026-98993, CVE-2026-99005, CVE-2026-99006, CVE-2026-99007, CVE-2026-99019, CVE-2026-99025, CVE-2026-99027, CVE-2026-99031, CVE-2026-99033, CVE-2026-99036, CVE-2026-99037, CVE-2026-99040, CVE-2026-99041, CVE-2026-99052, CVE-2026-99057, CVE-2026-99058, CVE-2026-99059, CVE-2026-99063, CVE-2026-99067, CVE-2026-99070, CVE-2026-99071, CVE-2026-99072, CVE-2026-99074, CVE-2026-99077, CVE-2026-99080, CVE-2026-99082, CVE-2026-99088, CVE-2026-99112, CVE-2026-99117, CVE-2026-99118, CVE-2026-99121, CVE-2026-99123, CVE-2026-99127, CVE-2026-99128, CVE-2026-99135, CVE-2026-99136, CVE-2026-99138, CVE-2026-99153, CVE-2026-99156, CVE-2026-99165, CVE-2026-99167, CVE-2026-99169, CVE-2026-99175, CVE-2026-99176, CVE-2026-99181, CVE-2026-99201, CVE-2026-99203, CVE-2026-99206, CVE-2026-99211, CVE-2026-99213, CVE-2026-99216, CVE-2026-99222, CVE-2026-99223, CVE-2026-99225, CVE-2026-99226, CVE-2026-99236, CVE-2026-99245, CVE-2026-99256

Detections

Analytics