# Vulnerabilities published in 2026


- [CVE-2026-5305](https://insights.sbomify.com/CVE-2026-5305/): Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS (high 8.8)
- [CVE-2026-53049](https://insights.sbomify.com/CVE-2026-53049/): gfs2: add some missing log locking (critical 9.8)
- [CVE-2026-53048](https://insights.sbomify.com/CVE-2026-53048/): gfs2: prevent NULL pointer dereference during unmount (medium 5.5)
- [CVE-2026-53047](https://insights.sbomify.com/CVE-2026-53047/): efi/capsule-loader: fix incorrect sizeof in phys array reallocation (medium 5.5)
- [CVE-2026-53046](https://insights.sbomify.com/CVE-2026-53046/): ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (critical 9.8)
- [CVE-2026-53045](https://insights.sbomify.com/CVE-2026-53045/): memory: tegra124-emc: Fix dll_change check (critical 9.8)
- [CVE-2026-53044](https://insights.sbomify.com/CVE-2026-53044/): soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables (high 7.1)
- [CVE-2026-53043](https://insights.sbomify.com/CVE-2026-53043/): ocfs2/dlm: validate qr_numregions in dlm_match_regions() (critical 9.1)
- [CVE-2026-53042](https://insights.sbomify.com/CVE-2026-53042/): fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal (medium 5.5)
- [CVE-2026-53041](https://insights.sbomify.com/CVE-2026-53041/): ocfs2: fix listxattr handling when the buffer is full (high 7.1)
- [CVE-2026-53040](https://insights.sbomify.com/CVE-2026-53040/): ocfs2: validate bg_bits during freefrag scan (high 7.1)
- [CVE-2026-5304](https://insights.sbomify.com/CVE-2026-5304/): Privilege escalation in AXIS OS (medium 5.7)
- [CVE-2026-53039](https://insights.sbomify.com/CVE-2026-53039/): ocfs2: validate group add input before caching (medium 5.5)
- [CVE-2026-53038](https://insights.sbomify.com/CVE-2026-53038/): ima_fs: Correctly create securityfs files for unsupported hash algos (medium 5.5)
- [CVE-2026-53037](https://insights.sbomify.com/CVE-2026-53037/): HID: usbhid: fix deadlock in hid_post_reset() (medium 5.5)
- [CVE-2026-53036](https://insights.sbomify.com/CVE-2026-53036/): bpf, arm64: Fix off-by-one in check_imm signed range check (high 7.8)
- [CVE-2026-53035](https://insights.sbomify.com/CVE-2026-53035/): bpf, sockmap: Fix af_unix iter deadlock (medium 5.5)
- [CVE-2026-53034](https://insights.sbomify.com/CVE-2026-53034/): bpf, sockmap: Fix af_unix null-ptr-deref in proto update (medium 5.5)
- [CVE-2026-53033](https://insights.sbomify.com/CVE-2026-53033/): bpf, sockmap: Take state lock for af_unix iter (high 7.8)
- [CVE-2026-53032](https://insights.sbomify.com/CVE-2026-53032/): bpf: Fix NULL deref in map_kptr_match_type for scalar regs (medium 5.5)
- [CVE-2026-53031](https://insights.sbomify.com/CVE-2026-53031/): bpf: Validate node_id in arena_alloc_pages() (high 7.8)
- [CVE-2026-53030](https://insights.sbomify.com/CVE-2026-53030/): i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers() (medium 5.5)
- [CVE-2026-5303](https://insights.sbomify.com/CVE-2026-5303/): Race condition in AXIS OS (medium 5.7)
- [CVE-2026-53029](https://insights.sbomify.com/CVE-2026-53029/): fs/ntfs3: prevent uninitialized lcn caused by zero len (medium 5.5)
- [CVE-2026-53028](https://insights.sbomify.com/CVE-2026-53028/): usb: typec: Fix error pointer dereference (medium 5.5)
- [CVE-2026-53027](https://insights.sbomify.com/CVE-2026-53027/): fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() (medium 5.5)
- [CVE-2026-53026](https://insights.sbomify.com/CVE-2026-53026/): NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (high 7.5)
- [CVE-2026-53025](https://insights.sbomify.com/CVE-2026-53025/): greybus: raw: fix use-after-free on cdev close (high 7.8)
- [CVE-2026-53024](https://insights.sbomify.com/CVE-2026-53024/): greybus: raw: fix use-after-free if write is called after disconnect (high 7.8)
- [CVE-2026-53023](https://insights.sbomify.com/CVE-2026-53023/): fs/ntfs3: terminate the cached volume label after UTF-8 conversion (medium 5.5)
- [CVE-2026-53022](https://insights.sbomify.com/CVE-2026-53022/): platform/x86: dell-wmi-sysman: bound enumeration string aggregation (medium 5.5)
- [CVE-2026-53021](https://insights.sbomify.com/CVE-2026-53021/): scsi: target: core: Fix integer overflow in UNMAP bounds check (medium 5.5)
- [CVE-2026-53020](https://insights.sbomify.com/CVE-2026-53020/): um: Fix potential race condition in TLB sync (high 7.8)
- [CVE-2026-5302](https://insights.sbomify.com/CVE-2026-5302/): Permissive Cross-domain Policy with Untrusted Domains in coolercontrold (medium 6.3)
- [CVE-2026-53019](https://insights.sbomify.com/CVE-2026-53019/): clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() (medium 5.5)
- [CVE-2026-53018](https://insights.sbomify.com/CVE-2026-53018/): f2fs: avoid reading already updated pages during GC (medium 5.5)
- [CVE-2026-53017](https://insights.sbomify.com/CVE-2026-53017/): f2fs: fix data loss caused by incorrect use of nat_entry flag (medium 5.5)
- [CVE-2026-53016](https://insights.sbomify.com/CVE-2026-53016/): crypto: ccp - copy IV using skcipher ivsize (high 7.8)
- [CVE-2026-53015](https://insights.sbomify.com/CVE-2026-53015/): erofs: unify lcn as u64 for 32-bit platforms (medium 5.5)
- [CVE-2026-53014](https://insights.sbomify.com/CVE-2026-53014/): net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir (medium 5.5)
- [CVE-2026-53013](https://insights.sbomify.com/CVE-2026-53013/): macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF (medium 5.5)
- [CVE-2026-53012](https://insights.sbomify.com/CVE-2026-53012/): nexthop: fix IPv6 route referencing IPv4 nexthop (medium 5.5)
- [CVE-2026-53011](https://insights.sbomify.com/CVE-2026-53011/): net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (high 7.8)
- [CVE-2026-53010](https://insights.sbomify.com/CVE-2026-53010/): ksmbd: fix use-after-free in smb2_open during durable reconnect (critical 9.8)
- [CVE-2026-5301](https://insights.sbomify.com/CVE-2026-5301/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui (high 7.6)
- [CVE-2026-53009](https://insights.sbomify.com/CVE-2026-53009/): ice: fix double-free of tx_buf skb (high 7.8)
- [CVE-2026-53008](https://insights.sbomify.com/CVE-2026-53008/): ice: fix race condition in TX timestamp ring cleanup (medium 4.7)
- [CVE-2026-53007](https://insights.sbomify.com/CVE-2026-53007/): ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (medium 5.5)
- [CVE-2026-53006](https://insights.sbomify.com/CVE-2026-53006/): ipv6: fix possible UAF in icmpv6_rcv() (critical 9.8)
- [CVE-2026-53005](https://insights.sbomify.com/CVE-2026-53005/): af_unix: Drop all SCM attributes for SOCKMAP. (high 7.8)
- [CVE-2026-53004](https://insights.sbomify.com/CVE-2026-53004/): sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (high 7.8)
- [CVE-2026-53003](https://insights.sbomify.com/CVE-2026-53003/): pppoe: drop PFC frames (high 7.5)
- [CVE-2026-53002](https://insights.sbomify.com/CVE-2026-53002/): netfilter: conntrack: remove sprintf usage (critical 9.8)
- [CVE-2026-53001](https://insights.sbomify.com/CVE-2026-53001/): netfilter: xtables: restrict several matches to inet family (medium 5.5)
- [CVE-2026-53000](https://insights.sbomify.com/CVE-2026-53000/): netfilter: nat: use kfree_rcu to release ops (high 7.8)
- [CVE-2026-5300](https://insights.sbomify.com/CVE-2026-5300/): Missing Authentication for Critical Function in coolercontrold (medium 5.9)
- [CVE-2026-52999](https://insights.sbomify.com/CVE-2026-52999/): netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (critical 9.1)
- [CVE-2026-52998](https://insights.sbomify.com/CVE-2026-52998/): netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (high 7.5)
- [CVE-2026-52997](https://insights.sbomify.com/CVE-2026-52997/): net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() (medium 5.5)
- [CVE-2026-52996](https://insights.sbomify.com/CVE-2026-52996/): ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open (medium 5.5)
- [CVE-2026-52995](https://insights.sbomify.com/CVE-2026-52995/): net/rds: zero per-item info buffer before handing it to visitors (medium 5.5)
- [CVE-2026-52994](https://insights.sbomify.com/CVE-2026-52994/): vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (medium 5.5)
- [CVE-2026-52993](https://insights.sbomify.com/CVE-2026-52993/): tipc: fix double-free in tipc_buf_append() (critical 9.8)
- [CVE-2026-52992](https://insights.sbomify.com/CVE-2026-52992/): fs/adfs: validate nzones in adfs_validate_bblk() (high 7.8)
- [CVE-2026-52991](https://insights.sbomify.com/CVE-2026-52991/): sched/psi: fix race between file release and pressure write (high 7.8)
- [CVE-2026-52990](https://insights.sbomify.com/CVE-2026-52990/): fsnotify: fix inode reference leak in fsnotify_recalc_mask() (medium 5.5)
- [CVE-2026-5299](https://insights.sbomify.com/CVE-2026-5299/): Uncontrolled Recursion in Wireshark (medium 5.5)
- [CVE-2026-52989](https://insights.sbomify.com/CVE-2026-52989/): nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers (critical 9.8)
- [CVE-2026-52988](https://insights.sbomify.com/CVE-2026-52988/): netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (high 7.1)
- [CVE-2026-52987](https://insights.sbomify.com/CVE-2026-52987/): drm/amdgpu: avoid double drm_exec_fini() in userq validate (high 7.8)
- [CVE-2026-52986](https://insights.sbomify.com/CVE-2026-52986/): netfilter: nf_conntrack_sip: don't use simple_strtoul (critical 9.8)
- [CVE-2026-52985](https://insights.sbomify.com/CVE-2026-52985/): netdevsim: zero initialize struct iphdr in dummy sk_buff (medium 5.5)
- [CVE-2026-52984](https://insights.sbomify.com/CVE-2026-52984/): net/sched: netem: fix queue limit check to include reordered packets (medium 5.5)
- [CVE-2026-52983](https://insights.sbomify.com/CVE-2026-52983/): net: airoha: fix BQL imbalance in TX path (high 7.5)
- [CVE-2026-52982](https://insights.sbomify.com/CVE-2026-52982/): net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (critical 9.8)
- [CVE-2026-52981](https://insights.sbomify.com/CVE-2026-52981/): neigh: let neigh_xmit take skb ownership (high 7.5)
- [CVE-2026-52980](https://insights.sbomify.com/CVE-2026-52980/): sched/fair: Clear rel_deadline when initializing forked entities (medium 5.5)
- [CVE-2026-52979](https://insights.sbomify.com/CVE-2026-52979/): net: psp: check for device unregister when creating assoc (medium 5.5)
- [CVE-2026-52978](https://insights.sbomify.com/CVE-2026-52978/): net: psp: require admin permission for dev-set and key-rotate (medium 5.5)
- [CVE-2026-52977](https://insights.sbomify.com/CVE-2026-52977/): futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (medium 5.5)
- [CVE-2026-52976](https://insights.sbomify.com/CVE-2026-52976/): drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (high 7.8)
- [CVE-2026-52975](https://insights.sbomify.com/CVE-2026-52975/): bonding: 3ad: implement proper RCU rules for port->aggregator (high 7.8)
- [CVE-2026-52974](https://insights.sbomify.com/CVE-2026-52974/): net: tls: fix strparser anchor skb leak on offload RX setup failure (high 7.5)
- [CVE-2026-52973](https://insights.sbomify.com/CVE-2026-52973/): futex: Drop CLONE_THREAD requirement for private default hash alloc (high 7.8)
- [CVE-2026-52972](https://insights.sbomify.com/CVE-2026-52972/): crypto: af_alg - Cap AEAD AD length to 0x80000000 (medium 5.5)
- [CVE-2026-52971](https://insights.sbomify.com/CVE-2026-52971/): net: ena: PHC: Fix potential use-after-free in get_timestamp (high 7.8)
- [CVE-2026-52970](https://insights.sbomify.com/CVE-2026-52970/): netfilter: nft_ct: fix missing expect put in obj eval (medium 5.5)
- [CVE-2026-52969](https://insights.sbomify.com/CVE-2026-52969/): KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (high 7.8)
- [CVE-2026-52968](https://insights.sbomify.com/CVE-2026-52968/): KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (high 8.8)
- [CVE-2026-52967](https://insights.sbomify.com/CVE-2026-52967/): smb/client: fix possible infinite loop and oob read in symlink_data() (high 8.1)
- [CVE-2026-52966](https://insights.sbomify.com/CVE-2026-52966/): drm: Replace old pointer to new idr (medium 5.5)
- [CVE-2026-52965](https://insights.sbomify.com/CVE-2026-52965/): drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (medium 5.5)
- [CVE-2026-52964](https://insights.sbomify.com/CVE-2026-52964/): ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans (medium 5.5)
- [CVE-2026-52963](https://insights.sbomify.com/CVE-2026-52963/): ALSA: usb-audio: Bound MIDI endpoint descriptor scans (medium 5.5)
- [CVE-2026-52962](https://insights.sbomify.com/CVE-2026-52962/): ceph: fix a buffer leak in __ceph_setxattr() (high 7.8)
- [CVE-2026-52961](https://insights.sbomify.com/CVE-2026-52961/): ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (medium 5.5)
- [CVE-2026-52960](https://insights.sbomify.com/CVE-2026-52960/): ceph: put folios not suitable for writeback (high 7.5)
- [CVE-2026-5296](https://insights.sbomify.com/CVE-2026-5296/): Missing Authorization in GitLab (medium 4.3)
- [CVE-2026-52959](https://insights.sbomify.com/CVE-2026-52959/): virt: sev-guest: Do not use host-controlled page order in cleanup path (high 7.8)
- [CVE-2026-52958](https://insights.sbomify.com/CVE-2026-52958/): libceph: Fix potential out-of-bounds access in osdmap_decode() (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/565/