# Vulnerabilities published in 2026


- [CVE-2026-53324](https://insights.sbomify.com/CVE-2026-53324/): net: mana: Use pci_name() for debugfs directory naming (medium 5.5)
- [CVE-2026-53323](https://insights.sbomify.com/CVE-2026-53323/): net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops (medium 5.5)
- [CVE-2026-53322](https://insights.sbomify.com/CVE-2026-53322/): vfio/pci: Clean up DMABUFs before disabling function (high 8.8)
- [CVE-2026-53321](https://insights.sbomify.com/CVE-2026-53321/): io_uring/napi: cap busy_poll_to 10 msec (medium 5.5)
- [CVE-2026-53320](https://insights.sbomify.com/CVE-2026-53320/): nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() (medium 5.5)
- [CVE-2026-5332](https://insights.sbomify.com/CVE-2026-5332/): Xiaopi Panel WAF Firewall demo.php cross site scripting (medium 5.1)
- [CVE-2026-53319](https://insights.sbomify.com/CVE-2026-53319/): blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default() (medium 5.5)
- [CVE-2026-53318](https://insights.sbomify.com/CVE-2026-53318/): wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() (medium 5.5)
- [CVE-2026-53317](https://insights.sbomify.com/CVE-2026-53317/): wifi: mt76: mt7921: Place upper limit on station AID (medium 5.5)
- [CVE-2026-53316](https://insights.sbomify.com/CVE-2026-53316/): drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (medium 5.5)
- [CVE-2026-53315](https://insights.sbomify.com/CVE-2026-53315/): drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (medium 5.5)
- [CVE-2026-53314](https://insights.sbomify.com/CVE-2026-53314/): padata: Put CPU offline callback in ONLINE section to allow failure (medium 5.5)
- [CVE-2026-53313](https://insights.sbomify.com/CVE-2026-53313/): drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (medium 5.5)
- [CVE-2026-53312](https://insights.sbomify.com/CVE-2026-53312/): iommu/riscv: Remove overflows on the invalidation path (medium 5.5)
- [CVE-2026-53311](https://insights.sbomify.com/CVE-2026-53311/): fuse: fix uninit-value in fuse_dentry_revalidate() (medium 5.5)
- [CVE-2026-53310](https://insights.sbomify.com/CVE-2026-53310/): soc/tegra: cbb: Fix cross-fabric target timeout lookup (medium 5.5)
- [CVE-2026-5331](https://insights.sbomify.com/CVE-2026-5331/): OpenCart Extension Installer installer.php path traversal (medium 5.1)
- [CVE-2026-53309](https://insights.sbomify.com/CVE-2026-53309/): ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (critical 9.8)
- [CVE-2026-53308](https://insights.sbomify.com/CVE-2026-53308/): power: supply: max77705: Free allocated workqueue and fix removal order (medium 5.5)
- [CVE-2026-53307](https://insights.sbomify.com/CVE-2026-53307/): pinctrl: pinconf-generic: Fully validate 'pinmux' property (medium 5.5)
- [CVE-2026-53306](https://insights.sbomify.com/CVE-2026-53306/): tty: hvc_iucv: fix off-by-one in number of supported devices (medium 5.5)
- [CVE-2026-53305](https://insights.sbomify.com/CVE-2026-53305/): usb: typec: ps883x: Fix Oops at unbind (medium 5.5)
- [CVE-2026-53304](https://insights.sbomify.com/CVE-2026-53304/): scsi: sg: Resolve soft lockup issue when opening /dev/sgX (medium 5.5)
- [CVE-2026-53303](https://insights.sbomify.com/CVE-2026-53303/): f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() (high 7.1)
- [CVE-2026-53302](https://insights.sbomify.com/CVE-2026-53302/): crypto: eip93 - fix hmac setkey algo selection (medium 5.5)
- [CVE-2026-53301](https://insights.sbomify.com/CVE-2026-53301/): reset: amlogic: t7: Fix null reset ops (medium 5.5)
- [CVE-2026-53300](https://insights.sbomify.com/CVE-2026-53300/): net: enetc: fix NTMP DMA use-after-free issue (high 7.8)
- [CVE-2026-5330](https://insights.sbomify.com/CVE-2026-5330/): SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access control (medium 6.9)
- [CVE-2026-53299](https://insights.sbomify.com/CVE-2026-53299/): net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() (medium 5.5)
- [CVE-2026-53298](https://insights.sbomify.com/CVE-2026-53298/): net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() (medium 5.5)
- [CVE-2026-53297](https://insights.sbomify.com/CVE-2026-53297/): net: mana: Guard mana_remove against double invocation (medium 5.5)
- [CVE-2026-53296](https://insights.sbomify.com/CVE-2026-53296/): mailbox: mailbox-test: free channels on probe error (high 7.8)
- [CVE-2026-53295](https://insights.sbomify.com/CVE-2026-53295/): mailbox: add sanity check for channel array (medium 5.5)
- [CVE-2026-53294](https://insights.sbomify.com/CVE-2026-53294/): mailbox: mailbox-test: don't free the reused channel (high 7.8)
- [CVE-2026-53293](https://insights.sbomify.com/CVE-2026-53293/): drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (medium 5.5)
- [CVE-2026-53292](https://insights.sbomify.com/CVE-2026-53292/): net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind (medium 5.5)
- [CVE-2026-53291](https://insights.sbomify.com/CVE-2026-53291/): ALSA: hda/conexant: Fix missing error check for jack detection (medium 5.5)
- [CVE-2026-53290](https://insights.sbomify.com/CVE-2026-53290/): drm/xe/eustall: Fix drm_dev_put called before stream disable in close (high 7.8)
- [CVE-2026-5329](https://insights.sbomify.com/CVE-2026-5329/): Rapid7 Velociraptor Improper Input Validation in Client Message Handler (high 8.5)
- [CVE-2026-53289](https://insights.sbomify.com/CVE-2026-53289/): ice: fix NULL pointer dereference in ice_reset_all_vfs() (medium 5.5)
- [CVE-2026-53288](https://insights.sbomify.com/CVE-2026-53288/): arm64: Reserve an extra page for early kernel mapping (medium 5.5)
- [CVE-2026-53287](https://insights.sbomify.com/CVE-2026-53287/): audit: fix incorrect inheritable capability in CAPSET records (medium 5.5)
- [CVE-2026-53286](https://insights.sbomify.com/CVE-2026-53286/): idpf: fix double free and use-after-free in aux device error paths (high 7.8)
- [CVE-2026-53285](https://insights.sbomify.com/CVE-2026-53285/): drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (medium 5.5)
- [CVE-2026-53284](https://insights.sbomify.com/CVE-2026-53284/): btrfs: only release the dirty pages io tree after successful writes (high 7.5)
- [CVE-2026-53283](https://insights.sbomify.com/CVE-2026-53283/): iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (medium 5.5)
- [CVE-2026-53282](https://insights.sbomify.com/CVE-2026-53282/): x86/kexec: Push kjump return address even for non-kjump kexec (medium 5.5)
- [CVE-2026-53281](https://insights.sbomify.com/CVE-2026-53281/): iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (high 8.8)
- [CVE-2026-53280](https://insights.sbomify.com/CVE-2026-53280/): iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() (medium 5.5)
- [CVE-2026-5328](https://insights.sbomify.com/CVE-2026-5328/): shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection (medium 5.3)
- [CVE-2026-53279](https://insights.sbomify.com/CVE-2026-53279/): drm/gma500/oaktrail_lvds: fix hang on init failure (medium 5.5)
- [CVE-2026-53278](https://insights.sbomify.com/CVE-2026-53278/): arm_mpam: Check whether the config array is allocated before destroying it (medium 5.5)
- [CVE-2026-53277](https://insights.sbomify.com/CVE-2026-53277/): KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (high 8.8)
- [CVE-2026-53276](https://insights.sbomify.com/CVE-2026-53276/): Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer (high 7.8)
- [CVE-2026-53275](https://insights.sbomify.com/CVE-2026-53275/): ipv6: mcast: Fix use-after-free when processing MLD queries (high 8.8)
- [CVE-2026-53274](https://insights.sbomify.com/CVE-2026-53274/): net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS (medium 5.5)
- [CVE-2026-53273](https://insights.sbomify.com/CVE-2026-53273/): tee: optee: prevent use-after-free when the client exits before the supplicant (high 7.8)
- [CVE-2026-53272](https://insights.sbomify.com/CVE-2026-53272/): erofs: fix use-after-free on sbi->sync_decompress (high 7.8)
- [CVE-2026-53271](https://insights.sbomify.com/CVE-2026-53271/): ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers (medium 5.5)
- [CVE-2026-53270](https://insights.sbomify.com/CVE-2026-53270/): ipvs: clear the svc scheduler ptr early on edit (high 7.8)
- [CVE-2026-5327](https://insights.sbomify.com/CVE-2026-5327/): efforthye fast-filesystem-mcp index.ts handleGetDiskUsage command injection (medium 5.3)
- [CVE-2026-53269](https://insights.sbomify.com/CVE-2026-53269/): netfilter: synproxy: add mutex to guard hook reference counting (medium 5.5)
- [CVE-2026-53268](https://insights.sbomify.com/CVE-2026-53268/): netfilter: conntrack_irc: fix possible out-of-bounds read (high 8.2)
- [CVE-2026-53267](https://insights.sbomify.com/CVE-2026-53267/): netfilter: nft_ct: bail out on template ct in get eval (high 7.8)
- [CVE-2026-53266](https://insights.sbomify.com/CVE-2026-53266/): Linux Kernel Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2026-53265](https://insights.sbomify.com/CVE-2026-53265/): dm cache policy smq: check allocation under invalidate lock (high 7.8)
- [CVE-2026-53264](https://insights.sbomify.com/CVE-2026-53264/): net/sched: act_api: use RCU with deferred freeing for action lifecycle (high 7.8)
- [CVE-2026-53263](https://insights.sbomify.com/CVE-2026-53263/): 6lowpan: fix off-by-one in multicast context address compression (medium 5.5)
- [CVE-2026-53262](https://insights.sbomify.com/CVE-2026-53262/): l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (high 7.8)
- [CVE-2026-53261](https://insights.sbomify.com/CVE-2026-53261/): devlink: Release nested relation on devlink free (medium 5.5)
- [CVE-2026-53260](https://insights.sbomify.com/CVE-2026-53260/): tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). (critical 9.8)
- [CVE-2026-5326](https://insights.sbomify.com/CVE-2026-5326/): SourceCodester Leave Application System User Information index.php authorization (medium 6.9)
- [CVE-2026-53259](https://insights.sbomify.com/CVE-2026-53259/): ipv6: anycast: insert aca into global hash under idev->lock (high 7.8)
- [CVE-2026-53258](https://insights.sbomify.com/CVE-2026-53258/): wifi: fix leak if split 6 GHz scanning fails (medium 5.5)
- [CVE-2026-53257](https://insights.sbomify.com/CVE-2026-53257/): wifi: cfg80211: enforce HE/EHT cap/oper consistency (medium 5.5)
- [CVE-2026-53256](https://insights.sbomify.com/CVE-2026-53256/): Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (high 8.0)
- [CVE-2026-53255](https://insights.sbomify.com/CVE-2026-53255/): Bluetooth: MGMT: validate advertising TLV before type checks (high 7.1)
- [CVE-2026-53254](https://insights.sbomify.com/CVE-2026-53254/): Bluetooth: RFCOMM: validate skb length in MCC handlers (high 8.1)
- [CVE-2026-53253](https://insights.sbomify.com/CVE-2026-53253/): Bluetooth: bnep: reject short frames before parsing (high 7.1)
- [CVE-2026-53252](https://insights.sbomify.com/CVE-2026-53252/): Bluetooth: fix memory leak in error path of hci_alloc_dev() (medium 5.5)
- [CVE-2026-53251](https://insights.sbomify.com/CVE-2026-53251/): Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync (medium 5.5)
- [CVE-2026-53250](https://insights.sbomify.com/CVE-2026-53250/): xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (high 7.8)
- [CVE-2026-5325](https://insights.sbomify.com/CVE-2026-5325/): SourceCodester Simple Customer Relationship Management System Create Ticket create-ticket.php cross site scripting (medium 5.1)
- [CVE-2026-53249](https://insights.sbomify.com/CVE-2026-53249/): ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (medium 5.5)
- [CVE-2026-53248](https://insights.sbomify.com/CVE-2026-53248/): net: airoha: Fix use-after-free in metadata dst teardown (high 8.8)
- [CVE-2026-53247](https://insights.sbomify.com/CVE-2026-53247/): net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown (critical 9.8)
- [CVE-2026-53246](https://insights.sbomify.com/CVE-2026-53246/): sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (critical 9.8)
- [CVE-2026-53245](https://insights.sbomify.com/CVE-2026-53245/): net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (medium 5.5)
- [CVE-2026-53244](https://insights.sbomify.com/CVE-2026-53244/): VFS: fix possible failure to unlock in nfsd4_create_file() (high 7.5)
- [CVE-2026-53243](https://insights.sbomify.com/CVE-2026-53243/): rseq: Fix using an uninitialized stack variable in rseq_exit_user_update() (medium 5.5)
- [CVE-2026-53242](https://insights.sbomify.com/CVE-2026-53242/): ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (high 7.8)
- [CVE-2026-53241](https://insights.sbomify.com/CVE-2026-53241/): ALSA: seq: dummy: fix UMP event stack overread (medium 5.5)
- [CVE-2026-53240](https://insights.sbomify.com/CVE-2026-53240/): xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload (high 8.8)
- [CVE-2026-5324](https://insights.sbomify.com/CVE-2026-5324/): Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value (high 7.2)
- [CVE-2026-53239](https://insights.sbomify.com/CVE-2026-53239/): xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (high 7.8)
- [CVE-2026-53238](https://insights.sbomify.com/CVE-2026-53238/): netlabel: validate unlabeled address and mask attribute lengths (medium 5.5)
- [CVE-2026-53237](https://insights.sbomify.com/CVE-2026-53237/): gpio: mvebu: fix NULL pointer dereference in suspend/resume (medium 5.5)
- [CVE-2026-53236](https://insights.sbomify.com/CVE-2026-53236/): tcp: restrict SO_ATTACH_FILTER to priv users (medium 5.5)
- [CVE-2026-53235](https://insights.sbomify.com/CVE-2026-53235/): net: add pskb_may_pull() to skb_gro_receive_list() (high 7.5)
- [CVE-2026-53234](https://insights.sbomify.com/CVE-2026-53234/): net: ibm: emac: Fix use-after-free during device removal (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/562/