{"metadata": {"count": 291265, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:28:38+00:00", "cve": "CVE-2025-61728", "id": "CVE-2025-61728", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61728.json", "version": "3", "product_status": {"fixed": 7014, "known_affected": 110, "known_not_affected": 4132}, "imported": 1787624918.0, "vulnerability_id": "CVE-2025-61728", "vulnerability_url": "/vuln/CVE-2025-61728"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:27:56+00:00", "cve": "CVE-2025-58183", "id": "CVE-2025-58183", "initial_release_date": "2025-10-29T22:10:14.376000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58183.json", "version": "3", "product_status": {"fixed": 8922, "known_affected": 126, "known_not_affected": 8349}, "imported": 1787624876.0, "vulnerability_id": "CVE-2025-58183", "vulnerability_url": "/vuln/CVE-2025-58183"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:26:13+00:00", "cve": "CVE-2026-33186", "id": "CVE-2026-33186", "initial_release_date": "2026-03-20T22:23:32.147000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "version": "3", "product_status": {"fixed": 3260, "known_affected": 380, "known_not_affected": 35985}, "imported": 1787624773.0, "vulnerability_id": "CVE-2026-33186", "vulnerability_url": "/vuln/CVE-2026-33186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:26:08+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 805, "known_affected": 254, "known_not_affected": 4413}, "imported": 1787624768.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:59+00:00", "cve": "CVE-2026-25681", "id": "CVE-2026-25681", "initial_release_date": "2026-05-22T15:01:21.975000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25681.json", "version": "3", "product_status": {"fixed": 822, "known_affected": 315, "known_not_affected": 3206}, "imported": 1787624759.0, "vulnerability_id": "CVE-2026-25681", "vulnerability_url": "/vuln/CVE-2026-25681"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:48+00:00", "cve": "CVE-2026-21441", "id": "CVE-2026-21441", "initial_release_date": "2026-01-07T22:09:01.936000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json", "version": "3", "product_status": {"fixed": 1947, "known_affected": 384, "known_not_affected": 2924, "under_investigation": 1}, "imported": 1787624748.0, "vulnerability_id": "CVE-2026-21441", "vulnerability_url": "/vuln/CVE-2026-21441"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:44+00:00", "cve": "CVE-2025-66506", "id": "CVE-2025-66506", "initial_release_date": "2025-12-04T22:04:41.637000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66506.json", "version": "3", "product_status": {"fixed": 329, "known_affected": 45, "known_not_affected": 1294}, "imported": 1787624744.0, "vulnerability_id": "CVE-2025-66506", "vulnerability_url": "/vuln/CVE-2025-66506"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:35+00:00", "cve": "CVE-2025-66471", "id": "CVE-2025-66471", "initial_release_date": "2025-12-05T16:06:08.531000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 Streaming API improperly handles highly compressed data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66471.json", "version": "3", "product_status": {"fixed": 1957, "known_affected": 347, "known_not_affected": 3325, "under_investigation": 1}, "imported": 1787624735.0, "vulnerability_id": "CVE-2025-66471", "vulnerability_url": "/vuln/CVE-2025-66471"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:27+00:00", "cve": "CVE-2025-66418", "id": "CVE-2025-66418", "initial_release_date": "2025-12-05T16:02:15.271000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66418.json", "version": "3", "product_status": {"fixed": 1941, "known_affected": 413, "known_not_affected": 2590, "under_investigation": 1}, "imported": 1787624727.0, "vulnerability_id": "CVE-2025-66418", "vulnerability_url": "/vuln/CVE-2025-66418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:22+00:00", "cve": "CVE-2025-64756", "id": "CVE-2025-64756", "initial_release_date": "2025-11-17T17:29:08.029000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64756.json", "version": "3", "product_status": {"fixed": 171, "known_affected": 115, "known_not_affected": 1097}, "imported": 1787624722.0, "vulnerability_id": "CVE-2025-64756", "vulnerability_url": "/vuln/CVE-2025-64756"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:12+00:00", "cve": "CVE-2025-61729", "id": "CVE-2025-61729", "initial_release_date": "2025-12-02T18:54:10.166000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61729.json", "version": "3", "product_status": {"fixed": 8083, "known_affected": 431, "known_not_affected": 4939, "under_investigation": 2}, "imported": 1787624712.0, "vulnerability_id": "CVE-2025-61729", "vulnerability_url": "/vuln/CVE-2025-61729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:05+00:00", "cve": "CVE-2025-52881", "id": "CVE-2025-52881", "initial_release_date": "2025-11-05T09:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-52881.json", "version": "3", "product_status": {"fixed": 2410, "known_affected": 45, "known_not_affected": 4360}, "imported": 1787624705.0, "vulnerability_id": "CVE-2025-52881", "vulnerability_url": "/vuln/CVE-2025-52881"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:25:03+00:00", "cve": "CVE-2025-30204", "id": "CVE-2025-30204", "initial_release_date": "2025-03-21T21:42:01.382000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30204.json", "version": "3", "product_status": {"fixed": 3850, "known_affected": 66, "known_not_affected": 11715}, "imported": 1787624703.0, "vulnerability_id": "CVE-2025-30204", "vulnerability_url": "/vuln/CVE-2025-30204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:24:53+00:00", "cve": "CVE-2025-22869", "id": "CVE-2025-22869", "initial_release_date": "2025-02-26T03:07:48.855000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22869.json", "version": "3", "product_status": {"fixed": 2839, "known_affected": 53, "known_not_affected": 6259, "under_investigation": 1}, "imported": 1787624693.0, "vulnerability_id": "CVE-2025-22869", "vulnerability_url": "/vuln/CVE-2025-22869"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:24:51+00:00", "cve": "CVE-2025-22868", "id": "CVE-2025-22868", "initial_release_date": "2025-02-26T03:07:49.012000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json", "version": "3", "product_status": {"fixed": 2199, "known_affected": 93, "known_not_affected": 8426}, "imported": 1787624691.0, "vulnerability_id": "CVE-2025-22868", "vulnerability_url": "/vuln/CVE-2025-22868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:24:48+00:00", "cve": "CVE-2025-12816", "id": "CVE-2025-12816", "initial_release_date": "2025-11-25T19:15:50.243000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12816.json", "version": "3", "product_status": {"fixed": 460, "known_affected": 37, "known_not_affected": 2169}, "imported": 1787624688.0, "vulnerability_id": "CVE-2025-12816", "vulnerability_url": "/vuln/CVE-2025-12816"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:19:13+00:00", "cve": "CVE-2026-5367", "id": "CVE-2026-5367", "initial_release_date": "2026-04-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ovn: OVN: Information disclosure via crafted DHCPv6 packets", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5367.json", "version": "3", "product_status": {"fixed": 333, "known_affected": 30, "known_not_affected": 37}, "imported": 1787624353.0, "vulnerability_id": "CVE-2026-5367", "vulnerability_url": "/vuln/CVE-2026-5367"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:14:55+00:00", "cve": "CVE-2024-24786", "id": "CVE-2024-24786", "initial_release_date": "2024-03-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-24786.json", "version": "3", "product_status": {"fixed": 2152, "known_affected": 112, "known_not_affected": 11937, "under_investigation": 57}, "imported": 1787624095.0, "vulnerability_id": "CVE-2024-24786", "vulnerability_url": "/vuln/CVE-2024-24786"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:14:39+00:00", "cve": "CVE-2022-30631", "id": "CVE-2022-30631", "initial_release_date": "2022-07-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: compress/gzip: stack exhaustion in Reader.Read", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-30631.json", "version": "3", "product_status": {"fixed": 4253, "known_affected": 91, "known_not_affected": 2159}, "imported": 1787624079.0, "vulnerability_id": "CVE-2022-30631", "vulnerability_url": "/vuln/CVE-2022-30631"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:10:34+00:00", "cve": "CVE-2023-39325", "id": "CVE-2023-39325", "initial_release_date": "2023-10-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39325.json", "version": "3", "product_status": {"fixed": 6046, "known_affected": 223, "known_not_affected": 30360}, "imported": 1787623834.0, "vulnerability_id": "CVE-2023-39325", "vulnerability_url": "/vuln/CVE-2023-39325"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:09:07+00:00", "cve": "CVE-2026-15307", "id": "CVE-2026-15307", "initial_release_date": "2026-08-04T15:48:18.829000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "django: Django: Remote code execution via GeoDjango spatial lookups", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15307.json", "version": "3", "product_status": {"fixed": 24, "known_affected": 34, "known_not_affected": 326}, "imported": 1787623747.0, "vulnerability_id": "CVE-2026-15307", "vulnerability_url": "/vuln/CVE-2026-15307"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:07:38+00:00", "cve": "CVE-2026-42502", "id": "CVE-2026-42502", "initial_release_date": "2026-05-22T15:01:21.649000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42502.json", "version": "3", "product_status": {"fixed": 237, "known_affected": 325, "known_not_affected": 964}, "imported": 1787623658.0, "vulnerability_id": "CVE-2026-42502", "vulnerability_url": "/vuln/CVE-2026-42502"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:06:34+00:00", "cve": "CVE-2021-20329", "id": "CVE-2021-20329", "initial_release_date": "2021-03-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mongo-go-driver: specific cstrings input may not be properly validated", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-20329.json", "version": "3", "product_status": {"fixed": 252, "known_affected": 69, "known_not_affected": 3782}, "imported": 1787623594.0, "vulnerability_id": "CVE-2021-20329", "vulnerability_url": "/vuln/CVE-2021-20329"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:05:53+00:00", "cve": "CVE-2026-56434", "id": "CVE-2026-56434", "initial_release_date": "2026-07-15T14:33:46.142000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nginx: NGINX: Heap buffer over-read allows memory modification or denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56434.json", "version": "3", "product_status": {"fixed": 162, "known_affected": 34, "known_not_affected": 1}, "imported": 1787623553.0, "vulnerability_id": "CVE-2026-56434", "vulnerability_url": "/vuln/CVE-2026-56434"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:04:41+00:00", "cve": "CVE-2026-68410", "id": "CVE-2026-68410", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: libertas: fix memory leak in helper_firmware_cb()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68410.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623481.0, "vulnerability_id": "CVE-2026-68410", "vulnerability_url": "/vuln/CVE-2026-68410"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:04:23+00:00", "cve": "CVE-2026-68369", "id": "CVE-2026-68369", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: gadget: printer: fix infinite loop in printer_read()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68369.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623463.0, "vulnerability_id": "CVE-2026-68369", "vulnerability_url": "/vuln/CVE-2026-68369"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:03:54+00:00", "cve": "CVE-2026-68321", "id": "CVE-2026-68321", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: txgbe: fix FDIR filter leak on remove", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68321.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623434.0, "vulnerability_id": "CVE-2026-68321", "vulnerability_url": "/vuln/CVE-2026-68321"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:03:44+00:00", "cve": "CVE-2026-59886", "id": "CVE-2026-59886", "initial_release_date": "2026-07-14T16:38:29.691000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59886.json", "version": "3", "product_status": {"fixed": 1188, "known_affected": 74, "known_not_affected": 864, "under_investigation": 93}, "imported": 1787623424.0, "vulnerability_id": "CVE-2026-59886", "vulnerability_url": "/vuln/CVE-2026-59886"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:03:39+00:00", "cve": "CVE-2026-39835", "id": "CVE-2026-39835", "initial_release_date": "2026-05-22T02:31:26.982000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json", "version": "3", "product_status": {"fixed": 853, "known_affected": 92, "known_not_affected": 2046}, "imported": 1787623419.0, "vulnerability_id": "CVE-2026-39835", "vulnerability_url": "/vuln/CVE-2026-39835"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:03:27+00:00", "cve": "CVE-2026-39828", "id": "CVE-2026-39828", "initial_release_date": "2026-05-22T02:31:26.883000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json", "version": "3", "product_status": {"fixed": 427, "known_affected": 93, "known_not_affected": 2274}, "imported": 1787623407.0, "vulnerability_id": "CVE-2026-39828", "vulnerability_url": "/vuln/CVE-2026-39828"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T02:03:11+00:00", "cve": "CVE-2026-34986", "id": "CVE-2026-34986", "initial_release_date": "2026-04-06T16:22:45.353000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "version": "3", "product_status": {"fixed": 2740, "known_affected": 156, "known_not_affected": 13124, "under_investigation": 1}, "imported": 1787623391.0, "vulnerability_id": "CVE-2026-34986", "vulnerability_url": "/vuln/CVE-2026-34986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:03:02+00:00", "cve": "CVE-2026-68270", "id": "CVE-2026-68270", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/sysfb: Avoid possible truncation with calculating visible size", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68270.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1787623382.0, "vulnerability_id": "CVE-2026-68270", "vulnerability_url": "/vuln/CVE-2026-68270"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:54+00:00", "cve": "CVE-2026-68247", "id": "CVE-2026-68247", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/i915/bios: range check LFP Data Block panel_type2", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68247.json", "version": "3", "product_status": {"known_affected": 233, "known_not_affected": 43}, "imported": 1787623374.0, "vulnerability_id": "CVE-2026-68247", "vulnerability_url": "/vuln/CVE-2026-68247"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:48+00:00", "cve": "CVE-2026-68244", "id": "CVE-2026-68244", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/i915/gem: Do not leak siblings[] on proto context error", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68244.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 44}, "imported": 1787623368.0, "vulnerability_id": "CVE-2026-68244", "vulnerability_url": "/vuln/CVE-2026-68244"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:42+00:00", "cve": "CVE-2026-68233", "id": "CVE-2026-68233", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/vc4: Shut down BO cache timer before teardown", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68233.json", "version": "3", "product_status": {"known_affected": 2, "known_not_affected": 274}, "imported": 1787623362.0, "vulnerability_id": "CVE-2026-68233", "vulnerability_url": "/vuln/CVE-2026-68233"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:36+00:00", "cve": "CVE-2026-68231", "id": "CVE-2026-68231", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: airspy: Return queued buffers on start_streaming() failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68231.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623356.0, "vulnerability_id": "CVE-2026-68231", "vulnerability_url": "/vuln/CVE-2026-68231"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:28+00:00", "cve": "CVE-2026-68222", "id": "CVE-2026-68222", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: msi2500: Return queued buffers on start_streaming() failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68222.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623348.0, "vulnerability_id": "CVE-2026-68222", "vulnerability_url": "/vuln/CVE-2026-68222"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:18+00:00", "cve": "CVE-2026-68214", "id": "CVE-2026-68214", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: rtl2832: fix use-after-free in rtl2832_remove()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68214.json", "version": "3", "product_status": {"known_affected": 49, "known_not_affected": 227}, "imported": 1787623338.0, "vulnerability_id": "CVE-2026-68214", "vulnerability_url": "/vuln/CVE-2026-68214"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:07+00:00", "cve": "CVE-2026-68211", "id": "CVE-2026-68211", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: stm32-dcmipp: Return queued buffers on start_streaming() failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68211.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623327.0, "vulnerability_id": "CVE-2026-68211", "vulnerability_url": "/vuln/CVE-2026-68211"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:02:01+00:00", "cve": "CVE-2026-68210", "id": "CVE-2026-68210", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: stm32: dcmi: unregister notifier on probe failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68210.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623321.0, "vulnerability_id": "CVE-2026-68210", "vulnerability_url": "/vuln/CVE-2026-68210"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:01:50+00:00", "cve": "CVE-2026-68204", "id": "CVE-2026-68204", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: vivid: check for vb2_is_busy() when toggling caps", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68204.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623310.0, "vulnerability_id": "CVE-2026-68204", "vulnerability_url": "/vuln/CVE-2026-68204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:01:45+00:00", "cve": "CVE-2026-68178", "id": "CVE-2026-68178", "initial_release_date": "2026-08-10T11:59:49.344000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: misc: nsm: pin the module while the device is open", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68178.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623305.0, "vulnerability_id": "CVE-2026-68178", "vulnerability_url": "/vuln/CVE-2026-68178"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:01:37+00:00", "cve": "CVE-2026-68141", "id": "CVE-2026-68141", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68141.json", "version": "3", "product_status": {"known_affected": 261, "known_not_affected": 15}, "imported": 1787623297.0, "vulnerability_id": "CVE-2026-68141", "vulnerability_url": "/vuln/CVE-2026-68141"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:01:32+00:00", "cve": "CVE-2026-68134", "id": "CVE-2026-68134", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ptp: ptp_s390: Add missing facility check", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68134.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 200}, "imported": 1787623292.0, "vulnerability_id": "CVE-2026-68134", "vulnerability_url": "/vuln/CVE-2026-68134"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:01:27+00:00", "cve": "CVE-2026-68127", "id": "CVE-2026-68127", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ila: reload IPv6 header after pskb_may_pull in checksum adjust", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68127.json", "version": "3", "product_status": {"known_affected": 139, "known_not_affected": 137}, "imported": 1787623287.0, "vulnerability_id": "CVE-2026-68127", "vulnerability_url": "/vuln/CVE-2026-68127"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:01:13+00:00", "cve": "CVE-2026-68114", "id": "CVE-2026-68114", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68114.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1787623273.0, "vulnerability_id": "CVE-2026-68114", "vulnerability_url": "/vuln/CVE-2026-68114"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:00:53+00:00", "cve": "CVE-2026-68424", "id": "CVE-2026-68424", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68424.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623253.0, "vulnerability_id": "CVE-2026-68424", "vulnerability_url": "/vuln/CVE-2026-68424"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:00:40+00:00", "cve": "CVE-2026-68423", "id": "CVE-2026-68423", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68423.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623240.0, "vulnerability_id": "CVE-2026-68423", "vulnerability_url": "/vuln/CVE-2026-68423"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T02:00:32+00:00", "cve": "CVE-2026-68421", "id": "CVE-2026-68421", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68421.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623232.0, "vulnerability_id": "CVE-2026-68421", "vulnerability_url": "/vuln/CVE-2026-68421"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:59:56+00:00", "cve": "CVE-2026-68417", "id": "CVE-2026-68417", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: RDMA/siw: publish QP after initialization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68417.json", "version": "3", "product_status": {"known_affected": 156, "known_not_affected": 120}, "imported": 1787623196.0, "vulnerability_id": "CVE-2026-68417", "vulnerability_url": "/vuln/CVE-2026-68417"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:59:49+00:00", "cve": "CVE-2026-68385", "id": "CVE-2026-68385", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: s390/checksum: Fix csum_partial() without vector facility", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68385.json", "version": "3", "product_status": {"known_affected": 185, "known_not_affected": 91}, "imported": 1787623189.0, "vulnerability_id": "CVE-2026-68385", "vulnerability_url": "/vuln/CVE-2026-68385"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:59:37+00:00", "cve": "CVE-2026-68384", "id": "CVE-2026-68384", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68384.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1787623177.0, "vulnerability_id": "CVE-2026-68384", "vulnerability_url": "/vuln/CVE-2026-68384"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:59:31+00:00", "cve": "CVE-2026-68383", "id": "CVE-2026-68383", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/xe/guc: Keep scheduler timeline name alive", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68383.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1787623171.0, "vulnerability_id": "CVE-2026-68383", "vulnerability_url": "/vuln/CVE-2026-68383"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:59:16+00:00", "cve": "CVE-2026-68371", "id": "CVE-2026-68371", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: musb: omap2430: Do not put borrowed of_node in probe", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68371.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623156.0, "vulnerability_id": "CVE-2026-68371", "vulnerability_url": "/vuln/CVE-2026-68371"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:59:11+00:00", "cve": "CVE-2026-68367", "id": "CVE-2026-68367", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: gadget: f_tcm: synchronize delayed set_alt with teardown", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68367.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623151.0, "vulnerability_id": "CVE-2026-68367", "vulnerability_url": "/vuln/CVE-2026-68367"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:57+00:00", "cve": "CVE-2026-68364", "id": "CVE-2026-68364", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd/display: Fix ISM dc_lock deadlock during suspend", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68364.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1787623137.0, "vulnerability_id": "CVE-2026-68364", "vulnerability_url": "/vuln/CVE-2026-68364"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:49+00:00", "cve": "CVE-2026-68360", "id": "CVE-2026-68360", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68360.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623129.0, "vulnerability_id": "CVE-2026-68360", "vulnerability_url": "/vuln/CVE-2026-68360"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:34+00:00", "cve": "CVE-2026-68358", "id": "CVE-2026-68358", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68358.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623114.0, "vulnerability_id": "CVE-2026-68358", "vulnerability_url": "/vuln/CVE-2026-68358"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:28+00:00", "cve": "CVE-2026-68356", "id": "CVE-2026-68356", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: watchdog: airoha: Prevent division by zero when clock frequency is zero", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68356.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623108.0, "vulnerability_id": "CVE-2026-68356", "vulnerability_url": "/vuln/CVE-2026-68356"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:22+00:00", "cve": "CVE-2026-68347", "id": "CVE-2026-68347", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: iommu/amd: Fix IRQ unsafe locking in gdom allocation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68347.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 200}, "imported": 1787623102.0, "vulnerability_id": "CVE-2026-68347", "vulnerability_url": "/vuln/CVE-2026-68347"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:15+00:00", "cve": "CVE-2026-68342", "id": "CVE-2026-68342", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ovpn: avoid putting unrelated P2P peer on socket release", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68342.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623095.0, "vulnerability_id": "CVE-2026-68342", "vulnerability_url": "/vuln/CVE-2026-68342"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:08+00:00", "cve": "CVE-2026-68341", "id": "CVE-2026-68341", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ovpn: fix use after free in unlock_ovpn()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68341.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623088.0, "vulnerability_id": "CVE-2026-68341", "vulnerability_url": "/vuln/CVE-2026-68341"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:58:01+00:00", "cve": "CVE-2026-68330", "id": "CVE-2026-68330", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: airoha: Fix DMA direction for NPU mailbox buffer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68330.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623081.0, "vulnerability_id": "CVE-2026-68330", "vulnerability_url": "/vuln/CVE-2026-68330"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:57:55+00:00", "cve": "CVE-2026-68317", "id": "CVE-2026-68317", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: pds_core: fix auxiliary device add/del races", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68317.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623075.0, "vulnerability_id": "CVE-2026-68317", "vulnerability_url": "/vuln/CVE-2026-68317"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:57:46+00:00", "cve": "CVE-2026-68283", "id": "CVE-2026-68283", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: tracing: Fix use-after-free freeing trigger private data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68283.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623066.0, "vulnerability_id": "CVE-2026-68283", "vulnerability_url": "/vuln/CVE-2026-68283"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:57:39+00:00", "cve": "CVE-2026-68275", "id": "CVE-2026-68275", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68275.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1787623059.0, "vulnerability_id": "CVE-2026-68275", "vulnerability_url": "/vuln/CVE-2026-68275"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:57:33+00:00", "cve": "CVE-2026-68272", "id": "CVE-2026-68272", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68272.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 92}, "imported": 1787623053.0, "vulnerability_id": "CVE-2026-68272", "vulnerability_url": "/vuln/CVE-2026-68272"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:57:19+00:00", "cve": "CVE-2026-68262", "id": "CVE-2026-68262", "initial_release_date": "2026-08-10T12:01:36.582000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/imagination: Fix user array stride in pvr_set_uobj_array()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68262.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1787623039.0, "vulnerability_id": "CVE-2026-68262", "vulnerability_url": "/vuln/CVE-2026-68262"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:57:14+00:00", "cve": "CVE-2026-68229", "id": "CVE-2026-68229", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: cedrus: skip invalid H.264 reference list entries", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68229.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623034.0, "vulnerability_id": "CVE-2026-68229", "vulnerability_url": "/vuln/CVE-2026-68229"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:56:48+00:00", "cve": "CVE-2026-68228", "id": "CVE-2026-68228", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: chips-media: wave5: Move src_buf Removal to finish_encode", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68228.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787623008.0, "vulnerability_id": "CVE-2026-68228", "vulnerability_url": "/vuln/CVE-2026-68228"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:56:41+00:00", "cve": "CVE-2026-68224", "id": "CVE-2026-68224", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: mali-c55: Fix possible ERR_PTR in enable_streams", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68224.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787623001.0, "vulnerability_id": "CVE-2026-68224", "vulnerability_url": "/vuln/CVE-2026-68224"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:56:25+00:00", "cve": "CVE-2026-68215", "id": "CVE-2026-68215", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: radio-si476x: Unregister v4l2_device on probe failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68215.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787622985.0, "vulnerability_id": "CVE-2026-68215", "vulnerability_url": "/vuln/CVE-2026-68215"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:56:20+00:00", "cve": "CVE-2026-68209", "id": "CVE-2026-68209", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: sun4i-csi: Return queued buffers on start_streaming() failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68209.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787622980.0, "vulnerability_id": "CVE-2026-68209", "vulnerability_url": "/vuln/CVE-2026-68209"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:56:03+00:00", "cve": "CVE-2026-68208", "id": "CVE-2026-68208", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68208.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787622963.0, "vulnerability_id": "CVE-2026-68208", "vulnerability_url": "/vuln/CVE-2026-68208"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:56+00:00", "cve": "CVE-2026-68207", "id": "CVE-2026-68207", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: ti: vpe: unwind v4l2 device registration on probe error", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68207.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787622956.0, "vulnerability_id": "CVE-2026-68207", "vulnerability_url": "/vuln/CVE-2026-68207"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:51+00:00", "cve": "CVE-2026-68194", "id": "CVE-2026-68194", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68194.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 44}, "imported": 1787622951.0, "vulnerability_id": "CVE-2026-68194", "vulnerability_url": "/vuln/CVE-2026-68194"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:46+00:00", "cve": "CVE-2026-68190", "id": "CVE-2026-68190", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68190.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787622946.0, "vulnerability_id": "CVE-2026-68190", "vulnerability_url": "/vuln/CVE-2026-68190"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:35+00:00", "cve": "CVE-2026-68182", "id": "CVE-2026-68182", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: comedi: comedi_parport: deal with premature interrupt", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68182.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787622935.0, "vulnerability_id": "CVE-2026-68182", "vulnerability_url": "/vuln/CVE-2026-68182"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:24+00:00", "cve": "CVE-2026-68180", "id": "CVE-2026-68180", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: intel_th: fix MSC output device reference leak", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68180.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787622924.0, "vulnerability_id": "CVE-2026-68180", "vulnerability_url": "/vuln/CVE-2026-68180"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:18+00:00", "cve": "CVE-2026-68172", "id": "CVE-2026-68172", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: arm64: make huge_ptep_get handled unaligned addresses", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68172.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 200}, "imported": 1787622918.0, "vulnerability_id": "CVE-2026-68172", "vulnerability_url": "/vuln/CVE-2026-68172"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:11+00:00", "cve": "CVE-2026-68119", "id": "CVE-2026-68119", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: tcp: initialize standalone TCP-AO response padding", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68119.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1787622911.0, "vulnerability_id": "CVE-2026-68119", "vulnerability_url": "/vuln/CVE-2026-68119"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:55:04+00:00", "cve": "CVE-2026-68113", "id": "CVE-2026-68113", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68113.json", "version": "3", "product_status": {"known_affected": 276}, "imported": 1787622904.0, "vulnerability_id": "CVE-2026-68113", "vulnerability_url": "/vuln/CVE-2026-68113"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:54:58+00:00", "cve": "CVE-2026-68111", "id": "CVE-2026-68111", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68111.json", "version": "3", "product_status": {"known_affected": 275, "known_not_affected": 1}, "imported": 1787622898.0, "vulnerability_id": "CVE-2026-68111", "vulnerability_url": "/vuln/CVE-2026-68111"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:54:52+00:00", "cve": "CVE-2026-68106", "id": "CVE-2026-68106", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: fix division by zero with invalid uvd dimensions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68106.json", "version": "3", "product_status": {"known_affected": 275, "known_not_affected": 1}, "imported": 1787622892.0, "vulnerability_id": "CVE-2026-68106", "vulnerability_url": "/vuln/CVE-2026-68106"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:54:41+00:00", "cve": "CVE-2026-68098", "id": "CVE-2026-68098", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ksmbd: bound DACL dedup walk to copied ACEs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68098.json", "version": "3", "product_status": {"known_affected": 156, "known_not_affected": 120}, "imported": 1787622881.0, "vulnerability_id": "CVE-2026-68098", "vulnerability_url": "/vuln/CVE-2026-68098"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:54:16+00:00", "cve": "CVE-2026-68428", "id": "CVE-2026-68428", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: KVM: x86/mmu: Fix use-after-free on vendor module reload", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68428.json", "version": "3", "product_status": {"known_affected": 233, "known_not_affected": 43}, "imported": 1787622856.0, "vulnerability_id": "CVE-2026-68428", "vulnerability_url": "/vuln/CVE-2026-68428"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T01:53:41+00:00", "cve": "CVE-2026-9323", "id": "CVE-2026-9323", "initial_release_date": "2026-07-18T13:51:06.021000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9323.json", "version": "3", "product_status": {"fixed": 105, "known_affected": 2}, "imported": 1787622821.0, "vulnerability_id": "CVE-2026-9323", "vulnerability_url": "/vuln/CVE-2026-9323"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T01:52:17+00:00", "cve": "CVE-2026-60005", "id": "CVE-2026-60005", "initial_release_date": "2026-07-15T15:04:21.040000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60005.json", "version": "3", "product_status": {"fixed": 162, "known_affected": 34, "known_not_affected": 1}, "imported": 1787622737.0, "vulnerability_id": "CVE-2026-60005", "vulnerability_url": "/vuln/CVE-2026-60005"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:57+00:00", "cve": "CVE-2026-68395", "id": "CVE-2026-68395", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68395.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787621637.0, "vulnerability_id": "CVE-2026-68395", "vulnerability_url": "/vuln/CVE-2026-68395"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:52+00:00", "cve": "CVE-2026-68366", "id": "CVE-2026-68366", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68366.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787621632.0, "vulnerability_id": "CVE-2026-68366", "vulnerability_url": "/vuln/CVE-2026-68366"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:47+00:00", "cve": "CVE-2026-68362", "id": "CVE-2026-68362", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68362.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 44}, "imported": 1787621627.0, "vulnerability_id": "CVE-2026-68362", "vulnerability_url": "/vuln/CVE-2026-68362"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:42+00:00", "cve": "CVE-2026-68354", "id": "CVE-2026-68354", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: firewire: net: Fix fragmented datagram reassembly", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68354.json", "version": "3", "product_status": {"known_affected": 91, "known_not_affected": 185}, "imported": 1787621622.0, "vulnerability_id": "CVE-2026-68354", "vulnerability_url": "/vuln/CVE-2026-68354"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:35+00:00", "cve": "CVE-2026-68348", "id": "CVE-2026-68348", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ASoC: tas2781: bound firmware description string parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68348.json", "version": "3", "product_status": {"known_affected": 182, "known_not_affected": 94}, "imported": 1787621615.0, "vulnerability_id": "CVE-2026-68348", "vulnerability_url": "/vuln/CVE-2026-68348"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:30+00:00", "cve": "CVE-2026-68332", "id": "CVE-2026-68332", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: airoha: Fix potential use-after-free in airoha_ppe_deinit()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68332.json", "version": "3", "product_status": {"known_affected": 260, "known_not_affected": 16}, "imported": 1787621610.0, "vulnerability_id": "CVE-2026-68332", "vulnerability_url": "/vuln/CVE-2026-68332"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:25+00:00", "cve": "CVE-2026-68319", "id": "CVE-2026-68319", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: pds_core: fix deadlock between reset thread and remove", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68319.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 275}, "imported": 1787621605.0, "vulnerability_id": "CVE-2026-68319", "vulnerability_url": "/vuln/CVE-2026-68319"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:21+00:00", "cve": "CVE-2026-68318", "id": "CVE-2026-68318", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: pds_core: fix use-after-free on workqueue during remove", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68318.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 199}, "imported": 1787621601.0, "vulnerability_id": "CVE-2026-68318", "vulnerability_url": "/vuln/CVE-2026-68318"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:15+00:00", "cve": "CVE-2026-68307", "id": "CVE-2026-68307", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: mt76: mt7925: fix crash in reset link replay", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68307.json", "version": "3", "product_status": {"known_affected": 183, "known_not_affected": 93}, "imported": 1787621595.0, "vulnerability_id": "CVE-2026-68307", "vulnerability_url": "/vuln/CVE-2026-68307"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:07+00:00", "cve": "CVE-2026-68306", "id": "CVE-2026-68306", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68306.json", "version": "3", "product_status": {"known_not_affected": 276}, "imported": 1787621587.0, "vulnerability_id": "CVE-2026-68306", "vulnerability_url": "/vuln/CVE-2026-68306"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:33:02+00:00", "cve": "CVE-2026-68287", "id": "CVE-2026-68287", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drop_monitor: fix size calculations for 64-bit attributes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68287.json", "version": "3", "product_status": {"known_affected": 233, "known_not_affected": 43}, "imported": 1787621582.0, "vulnerability_id": "CVE-2026-68287", "vulnerability_url": "/vuln/CVE-2026-68287"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T01:32:57+00:00", "cve": "CVE-2026-68279", "id": "CVE-2026-68279", "initial_release_date": "2026-08-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68279.json", "version": "3", "product_status": {"known_affected": 233, "known_not_affected": 43}, "imported": 1787621577.0, "vulnerability_id": "CVE-2026-68279", "vulnerability_url": "/vuln/CVE-2026-68279"}]}