# Vulnerabilities published in 2026


- [CVE-2026-93292](https://insights.sbomify.com/CVE-2026-93292/): SigNoz 0.88.0 before 0.142.1 - SQL Injection in Trace Funnel Analytics Query Builders (high 8.4)
- [CVE-2026-93291](https://insights.sbomify.com/CVE-2026-93291/): Improper certificate validation in Eufy Omni C20 (critical 9.3)
- [CVE-2026-93290](https://insights.sbomify.com/CVE-2026-93290/): Use of Hard-coded Credentials in Eufy Omni C20 (medium 6.8)
- [CVE-2026-93289](https://insights.sbomify.com/CVE-2026-93289/): OS command injection in Eufy Omni C20, Omni X10 Pro (critical 9.0)
- [CVE-2026-93288](https://insights.sbomify.com/CVE-2026-93288/): netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (high 7.8)
- [CVE-2026-93287](https://insights.sbomify.com/CVE-2026-93287/): i2c: smbus: reject oversized block transfers in the common path (high 7.8)
- [CVE-2026-93286](https://insights.sbomify.com/CVE-2026-93286/): net: appletalk: fix NULL pointer dereference in aarp_send_ddp() (not scored)
- [CVE-2026-93285](https://insights.sbomify.com/CVE-2026-93285/): f2fs: embed f2fs_gc_kthread in f2fs_sb_info (not scored)
- [CVE-2026-93284](https://insights.sbomify.com/CVE-2026-93284/): drm/pagemap: dma-unmap pages before handling migration errors (high 8.8)
- [CVE-2026-93283](https://insights.sbomify.com/CVE-2026-93283/): i3c: master: Fix device_register() error path (not scored)
- [CVE-2026-93282](https://insights.sbomify.com/CVE-2026-93282/): ksmbd: fix maximum allowed access checks (high 8.1)
- [CVE-2026-93281](https://insights.sbomify.com/CVE-2026-93281/): wifi: rtw89: fix HE extended capability length check (not scored)
- [CVE-2026-93280](https://insights.sbomify.com/CVE-2026-93280/): greybus: audio: bound the topology section sizes against the fetched size (high 8.8)
- [CVE-2026-93279](https://insights.sbomify.com/CVE-2026-93279/): staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown (not scored)
- [CVE-2026-93278](https://insights.sbomify.com/CVE-2026-93278/): staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown (not scored)
- [CVE-2026-93277](https://insights.sbomify.com/CVE-2026-93277/): RDMA/bnxt_re: Validate udata before executing commands (high 7.8)
- [CVE-2026-93276](https://insights.sbomify.com/CVE-2026-93276/): phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator (not scored)
- [CVE-2026-93275](https://insights.sbomify.com/CVE-2026-93275/): perf/x86/intel/pt: Fix stop/start with no update (not scored)
- [CVE-2026-93274](https://insights.sbomify.com/CVE-2026-93274/): pinctrl: bcm2835: Don't remove an unregistered GPIO chip (not scored)
- [CVE-2026-93273](https://insights.sbomify.com/CVE-2026-93273/): regulator: tps6594: Fix device node reference leaks in multiphase loop (not scored)
- [CVE-2026-93272](https://insights.sbomify.com/CVE-2026-93272/): remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 (not scored)
- [CVE-2026-93271](https://insights.sbomify.com/CVE-2026-93271/): wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate (not scored)
- [CVE-2026-93270](https://insights.sbomify.com/CVE-2026-93270/): bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn (not scored)
- [CVE-2026-9327](https://insights.sbomify.com/CVE-2026-9327/): IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities (medium 6.3)
- [CVE-2026-93269](https://insights.sbomify.com/CVE-2026-93269/): ext4: fix circular lock dependency in ext4_ext_migrate (not scored)
- [CVE-2026-93268](https://insights.sbomify.com/CVE-2026-93268/): ext4: skip extra isize expansion during mount to prevent deadlock (not scored)
- [CVE-2026-93267](https://insights.sbomify.com/CVE-2026-93267/): RDMA/core: Fix potential use after free in uverbs_free_dmah() (not scored)
- [CVE-2026-93266](https://insights.sbomify.com/CVE-2026-93266/): arm64: RSI: fix field-spanning write warning in attestation token init (not scored)
- [CVE-2026-93265](https://insights.sbomify.com/CVE-2026-93265/): PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node (high 7.7)
- [CVE-2026-93264](https://insights.sbomify.com/CVE-2026-93264/): RDMA/efa: Fix PBL chunk length computation (not scored)
- [CVE-2026-93263](https://insights.sbomify.com/CVE-2026-93263/): clk: eswin: Zero-initialize stack-allocated clk_init_data (not scored)
- [CVE-2026-93262](https://insights.sbomify.com/CVE-2026-93262/): md/raid5-ppl: fix use-after-free in ppl_do_flush() (high 7.8)
- [CVE-2026-93261](https://insights.sbomify.com/CVE-2026-93261/): locking/lockdep: Fix NULL pointer dereference in __lock_set_class() (not scored)
- [CVE-2026-93260](https://insights.sbomify.com/CVE-2026-93260/): powerpc/xive: propagate IPI init errors to prevent use-after-free (high 7.4)
- [CVE-2026-93259](https://insights.sbomify.com/CVE-2026-93259/): powerpc/irq: Fix missing r2 clobber in PCREL inline assembly (not scored)
- [CVE-2026-93258](https://insights.sbomify.com/CVE-2026-93258/): ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full() (not scored)
- [CVE-2026-93257](https://insights.sbomify.com/CVE-2026-93257/): block: handle nogenerate/noverify properly in fs-integrity (not scored)
- [CVE-2026-93256](https://insights.sbomify.com/CVE-2026-93256/): arm64: hibernate: mask DAIF before restoring hibernated kernel (not scored)
- [CVE-2026-93255](https://insights.sbomify.com/CVE-2026-93255/): btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock (not scored)
- [CVE-2026-93254](https://insights.sbomify.com/CVE-2026-93254/): arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit (not scored)
- [CVE-2026-93253](https://insights.sbomify.com/CVE-2026-93253/): sched/isolation: Defer freeing of cpumask memblock memory to initcall (not scored)
- [CVE-2026-93252](https://insights.sbomify.com/CVE-2026-93252/): ocfs2: fix circular locking dependency in ocfs2_init_acl() (not scored)
- [CVE-2026-93251](https://insights.sbomify.com/CVE-2026-93251/): ACPI: bus: Introduce acpi_bus_get_primary_device() (not scored)
- [CVE-2026-93250](https://insights.sbomify.com/CVE-2026-93250/): vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (high 7.8)
- [CVE-2026-93249](https://insights.sbomify.com/CVE-2026-93249/): spi: amlogic-spisg: Make sure clk_init_data is fully initialized (not scored)
- [CVE-2026-93248](https://insights.sbomify.com/CVE-2026-93248/): drm/xe: don't WARN on kernel job timeout when device already wedged (not scored)
- [CVE-2026-93247](https://insights.sbomify.com/CVE-2026-93247/): Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference (not scored)
- [CVE-2026-93246](https://insights.sbomify.com/CVE-2026-93246/): octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity (not scored)
- [CVE-2026-93245](https://insights.sbomify.com/CVE-2026-93245/): apparmor: policy_int make sure list heads are initialized before fail path (not scored)
- [CVE-2026-93244](https://insights.sbomify.com/CVE-2026-93244/): drm/sysfb: simpledrm: Improve stride validation (not scored)
- [CVE-2026-93243](https://insights.sbomify.com/CVE-2026-93243/): mm/secretmem: properly account locked pages (not scored)
- [CVE-2026-93242](https://insights.sbomify.com/CVE-2026-93242/): scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (not scored)
- [CVE-2026-93241](https://insights.sbomify.com/CVE-2026-93241/): memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done (not scored)
- [CVE-2026-93240](https://insights.sbomify.com/CVE-2026-93240/): memcg: make the v1 soft limit knob inert (not scored)
- [CVE-2026-93239](https://insights.sbomify.com/CVE-2026-93239/): arm64: mm: Fix the lockless page-table walk in show_pte() (not scored)
- [CVE-2026-93238](https://insights.sbomify.com/CVE-2026-93238/): s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (not scored)
- [CVE-2026-93237](https://insights.sbomify.com/CVE-2026-93237/): LoongArch: Add DIRECT_MAP_PHYSMEM_END definition (high 7.8)
- [CVE-2026-93236](https://insights.sbomify.com/CVE-2026-93236/): media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common (not scored)
- [CVE-2026-93235](https://insights.sbomify.com/CVE-2026-93235/): f2fs: fix to zero post-EOF data when extending file size (not scored)
- [CVE-2026-93234](https://insights.sbomify.com/CVE-2026-93234/): drm/gud: validate TV mode names before creating enum property (not scored)
- [CVE-2026-93233](https://insights.sbomify.com/CVE-2026-93233/): drm/nouveau/dmem: fix callocated underflow on large folio split (not scored)
- [CVE-2026-93232](https://insights.sbomify.com/CVE-2026-93232/): mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages (not scored)
- [CVE-2026-93231](https://insights.sbomify.com/CVE-2026-93231/): lockd: fix swapped arguments in nlmsvc_match_ip() (not scored)
- [CVE-2026-93230](https://insights.sbomify.com/CVE-2026-93230/): mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier (not scored)
- [CVE-2026-9323](https://insights.sbomify.com/CVE-2026-9323/): Insecure PRNG and Information Exposure in urwid Web Display Backend (critical 9.2)
- [CVE-2026-93229](https://insights.sbomify.com/CVE-2026-93229/): nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry (high 7.1)
- [CVE-2026-93228](https://insights.sbomify.com/CVE-2026-93228/): svcrdma: Reject Write/Reply chunks with segcount 0 (critical 9.1)
- [CVE-2026-93227](https://insights.sbomify.com/CVE-2026-93227/): mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn (not scored)
- [CVE-2026-93226](https://insights.sbomify.com/CVE-2026-93226/): ipv6: use RCU iterator to dump route exceptions (not scored)
- [CVE-2026-93225](https://insights.sbomify.com/CVE-2026-93225/): phy: fsl-imx8mq-usb: fix typec switch leak on probe error path (high 7.4)
- [CVE-2026-93224](https://insights.sbomify.com/CVE-2026-93224/): svcrdma: Fix unmatched rn_unregister on failed accept (high 8.1)
- [CVE-2026-93223](https://insights.sbomify.com/CVE-2026-93223/): staging: media: tegra-video: fix of_node_put() on VIP parse errors (not scored)
- [CVE-2026-93222](https://insights.sbomify.com/CVE-2026-93222/): signal: avoid shared siginfo namespace rewrites (not scored)
- [CVE-2026-93221](https://insights.sbomify.com/CVE-2026-93221/): nfsd: convert nfsd_net boolean flags to unsigned long flags word (high 8.1)
- [CVE-2026-93220](https://insights.sbomify.com/CVE-2026-93220/): sched_ext: Keep kick_sync waiting on the rq's own CPU (not scored)
- [CVE-2026-9322](https://insights.sbomify.com/CVE-2026-9322/): IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities (high 7.5)
- [CVE-2026-93219](https://insights.sbomify.com/CVE-2026-93219/): clocksource/drivers/timer-sun4i: Advertise a real minimum delta (not scored)
- [CVE-2026-93218](https://insights.sbomify.com/CVE-2026-93218/): mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd (not scored)
- [CVE-2026-93217](https://insights.sbomify.com/CVE-2026-93217/): mm/madvise: skip device-private PMDs in cold and pageout walks (not scored)
- [CVE-2026-93216](https://insights.sbomify.com/CVE-2026-93216/): mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg() (not scored)
- [CVE-2026-93215](https://insights.sbomify.com/CVE-2026-93215/): cdx: Fix double free when sysfs file creation fails (not scored)
- [CVE-2026-93214](https://insights.sbomify.com/CVE-2026-93214/): usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() (not scored)
- [CVE-2026-93213](https://insights.sbomify.com/CVE-2026-93213/): of: fix out-of-bounds read in of_alias_scan() stem parser (not scored)
- [CVE-2026-93212](https://insights.sbomify.com/CVE-2026-93212/): nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (not scored)
- [CVE-2026-93211](https://insights.sbomify.com/CVE-2026-93211/): nfsd: initialize DRC hash table before registering shrinker (not scored)
- [CVE-2026-93210](https://insights.sbomify.com/CVE-2026-93210/): smb: client: harden DFS cache against invalid target hints (not scored)
- [CVE-2026-93209](https://insights.sbomify.com/CVE-2026-93209/): Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb (not scored)
- [CVE-2026-93208](https://insights.sbomify.com/CVE-2026-93208/): kasan: fix cache shrink race with CPU hotplug (not scored)
- [CVE-2026-93207](https://insights.sbomify.com/CVE-2026-93207/): SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (critical 9.8)
- [CVE-2026-93206](https://insights.sbomify.com/CVE-2026-93206/): PCI/proc: Use file_ns_capable() when checking config space read access (not scored)
- [CVE-2026-93205](https://insights.sbomify.com/CVE-2026-93205/): iommu/arm-smmu-v3: Manage teardown with devm (not scored)
- [CVE-2026-93204](https://insights.sbomify.com/CVE-2026-93204/): batman-adv: dat: atomically update mac addresses (not scored)
- [CVE-2026-93203](https://insights.sbomify.com/CVE-2026-93203/): batman-adv: bla: avoid CRC corruption due to parallel claim add (high 7.1)
- [CVE-2026-93202](https://insights.sbomify.com/CVE-2026-93202/): i3c: master: Fix recursive locking during device registration (not scored)
- [CVE-2026-93201](https://insights.sbomify.com/CVE-2026-93201/): dm-pcache: validate seg_id fields from persistent memory (high 7.8)
- [CVE-2026-93200](https://insights.sbomify.com/CVE-2026-93200/): i3c: master: Fix use-after-free of master->this (not scored)
- [CVE-2026-9320](https://insights.sbomify.com/CVE-2026-9320/): IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities (medium 5.9)
- [CVE-2026-93199](https://insights.sbomify.com/CVE-2026-93199/): i3c: master: Do not treat master device as a duplicate target (not scored)
- [CVE-2026-93198](https://insights.sbomify.com/CVE-2026-93198/): dm-pcache: validate the persisted dirty_tail chain at load (not scored)
- [CVE-2026-93197](https://insights.sbomify.com/CVE-2026-93197/): memcg: move LRU size accounting on reparenting instead of copying it (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/242/