# Vulnerabilities published in 2026


- [CVE-2026-64197](https://insights.sbomify.com/CVE-2026-64197/): Memory corruption in DASYLab (high 8.5)
- [CVE-2026-64196](https://insights.sbomify.com/CVE-2026-64196/): Memory corruption in DASYLab (high 8.5)
- [CVE-2026-64195](https://insights.sbomify.com/CVE-2026-64195/): Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data (high 8.5)
- [CVE-2026-64194](https://insights.sbomify.com/CVE-2026-64194/): Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains (high 7.5)
- [CVE-2026-64193](https://insights.sbomify.com/CVE-2026-64193/): Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR (critical 9.8)
- [CVE-2026-64192](https://insights.sbomify.com/CVE-2026-64192/): bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized (medium 5.5)
- [CVE-2026-64191](https://insights.sbomify.com/CVE-2026-64191/): i2c: stub: Reject I2C block transfers with invalid length (high 7.8)
- [CVE-2026-64190](https://insights.sbomify.com/CVE-2026-64190/): net: team: fix NULL pointer dereference in team_xmit during mode change (medium 5.5)
- [CVE-2026-6419](https://insights.sbomify.com/CVE-2026-6419/): Missing authorization in Wishlist Member (high 8.8)
- [CVE-2026-64189](https://insights.sbomify.com/CVE-2026-64189/): netfilter: ipset: fix race between dump and ip_set_list resize (high 7.8)
- [CVE-2026-64188](https://insights.sbomify.com/CVE-2026-64188/): net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (high 7.8)
- [CVE-2026-64187](https://insights.sbomify.com/CVE-2026-64187/): xfs: fail recovery on a committed log item with no regions (medium 5.5)
- [CVE-2026-64186](https://insights.sbomify.com/CVE-2026-64186/): iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (high 7.1)
- [CVE-2026-64185](https://insights.sbomify.com/CVE-2026-64185/): sysfs: don't remove existing directory on update failure (medium 5.5)
- [CVE-2026-64184](https://insights.sbomify.com/CVE-2026-64184/): mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() (medium 5.5)
- [CVE-2026-64183](https://insights.sbomify.com/CVE-2026-64183/): efi: Allocate runtime workqueue before ACPI init (medium 5.5)
- [CVE-2026-64182](https://insights.sbomify.com/CVE-2026-64182/): drivers/base/memory: fix memory block reference leak in poison accounting (medium 5.5)
- [CVE-2026-64181](https://insights.sbomify.com/CVE-2026-64181/): mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() (high 7.8)
- [CVE-2026-64180](https://insights.sbomify.com/CVE-2026-64180/): mm/memory_hotplug: fix memory block reference leak on remove (medium 5.5)
- [CVE-2026-6418](https://insights.sbomify.com/CVE-2026-6418/): PaperCut NG/MF: Path Traversal in Shared Account Synchronization (medium 4.6)
- [CVE-2026-64179](https://insights.sbomify.com/CVE-2026-64179/): net: wwan: iosm: fix potential memory leaks in ipc_imem_init() (medium 5.5)
- [CVE-2026-64178](https://insights.sbomify.com/CVE-2026-64178/): Bluetooth: bnep: Fix UAF read of dev->name (high 8.8)
- [CVE-2026-64177](https://insights.sbomify.com/CVE-2026-64177/): phonet/pep: disable BH around forwarded sk_receive_skb() (medium 5.5)
- [CVE-2026-64176](https://insights.sbomify.com/CVE-2026-64176/): wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (high 8.1)
- [CVE-2026-64175](https://insights.sbomify.com/CVE-2026-64175/): wifi: iwlwifi: mld: stop TX during firmware restart (high 7.5)
- [CVE-2026-64174](https://insights.sbomify.com/CVE-2026-64174/): wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (medium 5.5)
- [CVE-2026-64173](https://insights.sbomify.com/CVE-2026-64173/): tracing: Do not call map->ops->elt_free() if elt_alloc() fails (medium 5.5)
- [CVE-2026-64172](https://insights.sbomify.com/CVE-2026-64172/): KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) (high 7.1)
- [CVE-2026-64171](https://insights.sbomify.com/CVE-2026-64171/): i2c: tegra: fix pm_runtime leak on mutex_lock failure (medium 5.5)
- [CVE-2026-64170](https://insights.sbomify.com/CVE-2026-64170/): spi: qup: fix error pointer deref after DMA setup failure (medium 5.5)
- [CVE-2026-6417](https://insights.sbomify.com/CVE-2026-6417/): GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting via 'failed_orders' (medium 6.1)
- [CVE-2026-64169](https://insights.sbomify.com/CVE-2026-64169/): spi: ep93xx: fix error pointer deref after DMA setup failure (medium 5.5)
- [CVE-2026-64168](https://insights.sbomify.com/CVE-2026-64168/): spi: sprd: fix error pointer deref after DMA setup failure (medium 5.5)
- [CVE-2026-64167](https://insights.sbomify.com/CVE-2026-64167/): kho: skip KHO for crash kernel (medium 5.5)
- [CVE-2026-64166](https://insights.sbomify.com/CVE-2026-64166/): firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (medium 5.5)
- [CVE-2026-64165](https://insights.sbomify.com/CVE-2026-64165/): ARM: integrator: Fix early initialization (medium 5.5)
- [CVE-2026-64164](https://insights.sbomify.com/CVE-2026-64164/): btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (medium 5.5)
- [CVE-2026-64163](https://insights.sbomify.com/CVE-2026-64163/): test_kprobes: clear kprobes between test runs (medium 5.5)
- [CVE-2026-64162](https://insights.sbomify.com/CVE-2026-64162/): idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (critical 9.8)
- [CVE-2026-64161](https://insights.sbomify.com/CVE-2026-64161/): net: ti: icssm-prueth: fix eth_ports_node leak in probe (medium 5.5)
- [CVE-2026-64160](https://insights.sbomify.com/CVE-2026-64160/): netfs: Fix potential for tearing in ->remote_i_size and ->zero_point (critical 9.8)
- [CVE-2026-6416](https://insights.sbomify.com/CVE-2026-6416/): Tanium addressed an uncontrolled resource consumption vulnerability in Interact. (low 2.7)
- [CVE-2026-64159](https://insights.sbomify.com/CVE-2026-64159/): netfs: Fix zeropoint update where i_size > remote_i_size (medium 5.5)
- [CVE-2026-64157](https://insights.sbomify.com/CVE-2026-64157/): netfs: Fix partial invalidation of streaming-write folio (medium 5.5)
- [CVE-2026-64156](https://insights.sbomify.com/CVE-2026-64156/): netfs, afs: Fix write skipping in dir/link writepages (medium 5.5)
- [CVE-2026-64155](https://insights.sbomify.com/CVE-2026-64155/): wifi: ath11k: fix error path leaks in some WMI WOW calls (medium 5.5)
- [CVE-2026-64154](https://insights.sbomify.com/CVE-2026-64154/): drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (medium 5.5)
- [CVE-2026-64153](https://insights.sbomify.com/CVE-2026-64153/): drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (high 8.8)
- [CVE-2026-64152](https://insights.sbomify.com/CVE-2026-64152/): iommu: Handle unmap error when iommu_debug is enabled (high 7.8)
- [CVE-2026-64151](https://insights.sbomify.com/CVE-2026-64151/): iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap (high 8.4)
- [CVE-2026-64150](https://insights.sbomify.com/CVE-2026-64150/): netfilter: nft_inner: release local_lock before re-enabling softirqs (critical 9.8)
- [CVE-2026-6415](https://insights.sbomify.com/CVE-2026-6415/): Cross-site scripting in Advanced Custom Fields: Font Awesome Field (medium 6.4)
- [CVE-2026-64149](https://insights.sbomify.com/CVE-2026-64149/): dma-mapping: move dma_map_resource() sanity check into debug code (medium 5.5)
- [CVE-2026-64148](https://insights.sbomify.com/CVE-2026-64148/): pds_core: fix error handling in pdsc_devcmd_wait (high 7.5)
- [CVE-2026-64147](https://insights.sbomify.com/CVE-2026-64147/): pds_core: fix debugfs_lookup dentry leak and error handling (medium 5.5)
- [CVE-2026-64146](https://insights.sbomify.com/CVE-2026-64146/): erofs: fix metabuf leak in inode xattr initialization (medium 5.5)
- [CVE-2026-64145](https://insights.sbomify.com/CVE-2026-64145/): wifi: wilc1000: fix dma_buffer leak on bus acquire failure (high 7.8)
- [CVE-2026-64144](https://insights.sbomify.com/CVE-2026-64144/): Bluetooth: btmtk: fix urb->setup_packet leak in error paths (medium 5.5)
- [CVE-2026-64143](https://insights.sbomify.com/CVE-2026-64143/): platform/x86: uniwill-laptop: Do not enable the charging limit even when forced (medium 5.5)
- [CVE-2026-64142](https://insights.sbomify.com/CVE-2026-64142/): ksmbd: close durable scavenger races against m_fp_list lookups (critical 9.8)
- [CVE-2026-64141](https://insights.sbomify.com/CVE-2026-64141/): ksmbd: fix null pointer dereference in compare_guid_key() (high 7.5)
- [CVE-2026-64140](https://insights.sbomify.com/CVE-2026-64140/): ksmbd: fix null pointer dereference in proc_show_files() (high 7.5)
- [CVE-2026-6414](https://insights.sbomify.com/CVE-2026-6414/): @fastify/static vulnerable to route guard bypass via encoded path separators (medium 5.9)
- [CVE-2026-64139](https://insights.sbomify.com/CVE-2026-64139/): ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow (medium 5.5)
- [CVE-2026-64138](https://insights.sbomify.com/CVE-2026-64138/): ksmbd: validate SID in parent security descriptor during ACL inheritance (high 8.8)
- [CVE-2026-64137](https://insights.sbomify.com/CVE-2026-64137/): smb: client: require net admin for CIFS SWN netlink (high 7.8)
- [CVE-2026-64136](https://insights.sbomify.com/CVE-2026-64136/): smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (critical 9.8)
- [CVE-2026-64135](https://insights.sbomify.com/CVE-2026-64135/): hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX (medium 5.5)
- [CVE-2026-64134](https://insights.sbomify.com/CVE-2026-64134/): ALSA: pcm: Don't setup bogus iov_iter for silencing (high 7.8)
- [CVE-2026-64133](https://insights.sbomify.com/CVE-2026-64133/): ALSA: asihpi: Fix potential OOB array access at reading cache (high 7.8)
- [CVE-2026-64132](https://insights.sbomify.com/CVE-2026-64132/): ipv6: ioam: refresh hdr pointer before ioam6_event() (critical 9.8)
- [CVE-2026-64131](https://insights.sbomify.com/CVE-2026-64131/): mm/memory: fix spurious warning when unmapping device-private/exclusive pages (medium 5.5)
- [CVE-2026-64130](https://insights.sbomify.com/CVE-2026-64130/): mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free (medium 5.5)
- [CVE-2026-64129](https://insights.sbomify.com/CVE-2026-64129/): mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page (medium 5.5)
- [CVE-2026-64128](https://insights.sbomify.com/CVE-2026-64128/): Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (medium 5.5)
- [CVE-2026-64127](https://insights.sbomify.com/CVE-2026-64127/): Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (medium 5.5)
- [CVE-2026-64126](https://insights.sbomify.com/CVE-2026-64126/): Bluetooth: MGMT: validate Add Extended Advertising Data length (high 7.3)
- [CVE-2026-64125](https://insights.sbomify.com/CVE-2026-64125/): net: bcmgenet: keep RBUF EEE/PM disabled (critical 9.8)
- [CVE-2026-64124](https://insights.sbomify.com/CVE-2026-64124/): net: devmem: reject dma-buf bind with non-page-aligned size or SG length (high 8.8)
- [CVE-2026-64123](https://insights.sbomify.com/CVE-2026-64123/): net: hsr: defer node table free until after RCU readers (high 7.8)
- [CVE-2026-64122](https://insights.sbomify.com/CVE-2026-64122/): net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover (critical 9.8)
- [CVE-2026-64121](https://insights.sbomify.com/CVE-2026-64121/): net: ifb: report ethtool stats over num_tx_queues (high 7.1)
- [CVE-2026-64120](https://insights.sbomify.com/CVE-2026-64120/): net: ethtool: fix NULL pointer dereference in phy_reply_size (medium 5.5)
- [CVE-2026-6412](https://insights.sbomify.com/CVE-2026-6412/): Continued acceptance of SHA-1/MD5 digests in certificate processing (low 2.3)
- [CVE-2026-64119](https://insights.sbomify.com/CVE-2026-64119/): l2tp: use list_del_rcu in l2tp_session_unhash (medium 5.5)
- [CVE-2026-64118](https://insights.sbomify.com/CVE-2026-64118/): qed: fix double free in qed_cxt_tables_alloc() (high 8.4)
- [CVE-2026-64117](https://insights.sbomify.com/CVE-2026-64117/): wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (high 8.8)
- [CVE-2026-64116](https://insights.sbomify.com/CVE-2026-64116/): ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (high 7.5)
- [CVE-2026-64115](https://insights.sbomify.com/CVE-2026-64115/): vsock/vmci: fix UAF when peer resets connection during handshake (high 8.8)
- [CVE-2026-64114](https://insights.sbomify.com/CVE-2026-64114/): ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (high 7.8)
- [CVE-2026-64113](https://insights.sbomify.com/CVE-2026-64113/): ixgbevf: fix use-after-free in VEPA multicast source pruning (critical 9.8)
- [CVE-2026-64112](https://insights.sbomify.com/CVE-2026-64112/): rbd: eliminate a race in lock_dwork draining on unmap (high 7.8)
- [CVE-2026-64111](https://insights.sbomify.com/CVE-2026-64111/): lsm: hold cred_guard_mutex for lsm_set_self_attr() (high 7.1)
- [CVE-2026-64110](https://insights.sbomify.com/CVE-2026-64110/): igc: fix potential skb leak in igc_fpe_xmit_smd_frame() (medium 5.5)
- [CVE-2026-6411](https://insights.sbomify.com/CVE-2026-6411/): MAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic Algorithm (high 7.3)
- [CVE-2026-64109](https://insights.sbomify.com/CVE-2026-64109/): af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (high 8.8)
- [CVE-2026-64108](https://insights.sbomify.com/CVE-2026-64108/): cifs: Fix busy dentry used after unmounting (high 7.8)
- [CVE-2026-64107](https://insights.sbomify.com/CVE-2026-64107/): ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() (medium 5.5)
- [CVE-2026-64106](https://insights.sbomify.com/CVE-2026-64106/): KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (critical 9.0)
- [CVE-2026-64105](https://insights.sbomify.com/CVE-2026-64105/): KVM: arm64: vgic: Free private_irqs when init fails after allocation (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/473/