# Vulnerabilities published in 2026


- [CVE-2026-45971](https://insights.sbomify.com/CVE-2026-45971/): bpf: Limit bpf program signature size (medium 5.5)
- [CVE-2026-45970](https://insights.sbomify.com/CVE-2026-45970/): bonding: alb: fix UAF in rlb_arp_recv during bond up/down (high 7.8)
- [CVE-2026-4597](https://insights.sbomify.com/CVE-2026-4597/): 648540858 wvp-GB28181-pro Stream Proxy Query StreamProxyProvider.java selectAll sql injection (medium 5.3)
- [CVE-2026-45969](https://insights.sbomify.com/CVE-2026-45969/): HID: playstation: Add missing check for input_ff_create_memless (medium 5.5)
- [CVE-2026-45968](https://insights.sbomify.com/CVE-2026-45968/): cpuidle: Skip governor when only one idle state is available (medium 5.5)
- [CVE-2026-45967](https://insights.sbomify.com/CVE-2026-45967/): bpf: Return proper address for non-zero offsets in insn array (medium 5.5)
- [CVE-2026-45966](https://insights.sbomify.com/CVE-2026-45966/): apparmor: fix NULL pointer dereference in __unix_needs_revalidation (medium 5.5)
- [CVE-2026-45965](https://insights.sbomify.com/CVE-2026-45965/): apparmor: fix invalid deref of rawdata when export_binary is unset (medium 5.5)
- [CVE-2026-45964](https://insights.sbomify.com/CVE-2026-45964/): SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (medium 5.5)
- [CVE-2026-45963](https://insights.sbomify.com/CVE-2026-45963/): ASoC: nau8821: Cancel delayed work on component remove (medium 5.5)
- [CVE-2026-45962](https://insights.sbomify.com/CVE-2026-45962/): ublk: Validate SQE128 flag before accessing the cmd (medium 5.5)
- [CVE-2026-45961](https://insights.sbomify.com/CVE-2026-45961/): gfs2: fix memory leaks in gfs2_fill_super error path (medium 5.5)
- [CVE-2026-45960](https://insights.sbomify.com/CVE-2026-45960/): hfsplus: return error when node already exists in hfs_bnode_create (medium 5.5)
- [CVE-2026-4596](https://insights.sbomify.com/CVE-2026-4596/): projectworlds Lawyer Management System lawyers.php cross site scripting (medium 5.1)
- [CVE-2026-45959](https://insights.sbomify.com/CVE-2026-45959/): crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (high 7.8)
- [CVE-2026-45958](https://insights.sbomify.com/CVE-2026-45958/): drm/exynos: vidi: fix to avoid directly dereferencing user pointer (high 7.1)
- [CVE-2026-45957](https://insights.sbomify.com/CVE-2026-45957/): rcu: Fix rcu_read_unlock() deadloop due to softirq (high 7.1)
- [CVE-2026-45956](https://insights.sbomify.com/CVE-2026-45956/): drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() (high 7.8)
- [CVE-2026-45955](https://insights.sbomify.com/CVE-2026-45955/): md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (high 7.1)
- [CVE-2026-45954](https://insights.sbomify.com/CVE-2026-45954/): fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() (medium 5.5)
- [CVE-2026-45953](https://insights.sbomify.com/CVE-2026-45953/): md/raid5: fix IO hang with degraded array with llbitmap (medium 5.5)
- [CVE-2026-45952](https://insights.sbomify.com/CVE-2026-45952/): eth: fbnic: Add validation for MTU changes (medium 5.5)
- [CVE-2026-45951](https://insights.sbomify.com/CVE-2026-45951/): bpf: Fix a potential use-after-free of BTF object (high 7.8)
- [CVE-2026-45950](https://insights.sbomify.com/CVE-2026-45950/): crypto: starfive - Fix memory leak in starfive_aes_aead_do_one_req() (medium 5.5)
- [CVE-2026-4595](https://insights.sbomify.com/CVE-2026-4595/): code-projects Exam Form Submission update_s6.php cross site scripting (medium 4.8)
- [CVE-2026-45949](https://insights.sbomify.com/CVE-2026-45949/): hwrng: core - use RCU and work_struct to fix race condition (medium 4.7)
- [CVE-2026-45948](https://insights.sbomify.com/CVE-2026-45948/): ext4: fix memory leak in ext4_ext_shift_extents() (medium 5.5)
- [CVE-2026-45947](https://insights.sbomify.com/CVE-2026-45947/): drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc() (medium 5.5)
- [CVE-2026-45946](https://insights.sbomify.com/CVE-2026-45946/): power: supply: ab8500: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45945](https://insights.sbomify.com/CVE-2026-45945/): iommu/vt-d: Fix race condition during PASID entry replacement (high 8.8)
- [CVE-2026-45944](https://insights.sbomify.com/CVE-2026-45944/): iommu/vt-d: Clear Present bit before tearing down context entry (high 7.5)
- [CVE-2026-45943](https://insights.sbomify.com/CVE-2026-45943/): erofs: fix inline data read failure for ztailpacking pclusters (high 7.1)
- [CVE-2026-45942](https://insights.sbomify.com/CVE-2026-45942/): ext4: fix e4b bitmap inconsistency reports (high 7.8)
- [CVE-2026-45941](https://insights.sbomify.com/CVE-2026-45941/): tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure (medium 5.5)
- [CVE-2026-45940](https://insights.sbomify.com/CVE-2026-45940/): net: stmmac: fix oops when split header is enabled (medium 5.5)
- [CVE-2026-4594](https://insights.sbomify.com/CVE-2026-4594/): erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection (medium 6.9)
- [CVE-2026-45939](https://insights.sbomify.com/CVE-2026-45939/): gpib: Fix memory leak in ni_usb_init() (medium 5.5)
- [CVE-2026-45938](https://insights.sbomify.com/CVE-2026-45938/): power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45937](https://insights.sbomify.com/CVE-2026-45937/): crypto: inside-secure/eip93 - fix kernel panic in driver detach (medium 5.5)
- [CVE-2026-45936](https://insights.sbomify.com/CVE-2026-45936/): power: supply: goldfish: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45935](https://insights.sbomify.com/CVE-2026-45935/): fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot (high 7.8)
- [CVE-2026-45934](https://insights.sbomify.com/CVE-2026-45934/): btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation (medium 5.5)
- [CVE-2026-45933](https://insights.sbomify.com/CVE-2026-45933/): bpf: Preserve id of register in sync_linked_regs() (high 7.8)
- [CVE-2026-45932](https://insights.sbomify.com/CVE-2026-45932/): bpf: Fix tcx/netkit detach permissions when prog fd isn't given (high 7.3)
- [CVE-2026-45931](https://insights.sbomify.com/CVE-2026-45931/): accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (high 7.8)
- [CVE-2026-45930](https://insights.sbomify.com/CVE-2026-45930/): net: mctp: ensure our nlmsg responses are initialised (medium 5.5)
- [CVE-2026-4593](https://insights.sbomify.com/CVE-2026-4593/): erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection (medium 5.3)
- [CVE-2026-45929](https://insights.sbomify.com/CVE-2026-45929/): ovpn: fix possible use-after-free in ovpn_net_xmit (high 7.8)
- [CVE-2026-45928](https://insights.sbomify.com/CVE-2026-45928/): media: chips-media: wave5: Fix memory leak on codec_info allocation failure (medium 5.5)
- [CVE-2026-45927](https://insights.sbomify.com/CVE-2026-45927/): bpf: Require frozen map for calculating map hash (medium 4.7)
- [CVE-2026-45926](https://insights.sbomify.com/CVE-2026-45926/): rust: pwm: Fix potential memory leak on init error (medium 5.5)
- [CVE-2026-45925](https://insights.sbomify.com/CVE-2026-45925/): thermal/of: Fix reference leak in thermal_of_cm_lookup() (medium 5.5)
- [CVE-2026-45924](https://insights.sbomify.com/CVE-2026-45924/): ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths (medium 5.5)
- [CVE-2026-45923](https://insights.sbomify.com/CVE-2026-45923/): net: usb: catc: enable basic endpoint checking (medium 5.5)
- [CVE-2026-45922](https://insights.sbomify.com/CVE-2026-45922/): RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (medium 5.5)
- [CVE-2026-45921](https://insights.sbomify.com/CVE-2026-45921/): mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() (medium 5.5)
- [CVE-2026-45920](https://insights.sbomify.com/CVE-2026-45920/): ext4: fix dirtyclusters double decrement on fs shutdown (high 7.8)
- [CVE-2026-4592](https://insights.sbomify.com/CVE-2026-4592/): kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication (medium 6.3)
- [CVE-2026-45919](https://insights.sbomify.com/CVE-2026-45919/): sched/rt: Skip currently executing CPU in rto_next_cpu() (medium 5.5)
- [CVE-2026-45918](https://insights.sbomify.com/CVE-2026-45918/): ovpn: tcp - don't deref NULL sk_socket member after tcp_close() (medium 5.5)
- [CVE-2026-45917](https://insights.sbomify.com/CVE-2026-45917/): ipvs: do not keep dest_dst if dev is going down (medium 5.5)
- [CVE-2026-45916](https://insights.sbomify.com/CVE-2026-45916/): power: supply: sbs-battery: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45915](https://insights.sbomify.com/CVE-2026-45915/): fat: avoid parent link count underflow in rmdir (medium 5.5)
- [CVE-2026-45914](https://insights.sbomify.com/CVE-2026-45914/): Revert "hwmon: (ibmpex) fix use-after-free in high/low store" (high 7.8)
- [CVE-2026-45913](https://insights.sbomify.com/CVE-2026-45913/): net: bridge: mcast: always update mdb_n_entries for vlan contexts (medium 5.5)
- [CVE-2026-45912](https://insights.sbomify.com/CVE-2026-45912/): ext4: don't cache extent during splitting extent (medium 5.5)
- [CVE-2026-45911](https://insights.sbomify.com/CVE-2026-45911/): usb: cdns3: fix role switching during resume (medium 5.5)
- [CVE-2026-45910](https://insights.sbomify.com/CVE-2026-45910/): RDMA/rxe: Fix race condition in QP timer handlers (high 7.8)
- [CVE-2026-4591](https://insights.sbomify.com/CVE-2026-4591/): kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection (medium 5.1)
- [CVE-2026-45909](https://insights.sbomify.com/CVE-2026-45909/): clk: mediatek: Drop __initconst from gates (high 7.8)
- [CVE-2026-45908](https://insights.sbomify.com/CVE-2026-45908/): accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (medium 5.5)
- [CVE-2026-45907](https://insights.sbomify.com/CVE-2026-45907/): net/mlx5e: Fix deadlocks between devlink and netdev instance locks (medium 5.5)
- [CVE-2026-45906](https://insights.sbomify.com/CVE-2026-45906/): power: supply: pf1550: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45905](https://insights.sbomify.com/CVE-2026-45905/): xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (medium 4.7)
- [CVE-2026-45904](https://insights.sbomify.com/CVE-2026-45904/): powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (medium 5.5)
- [CVE-2026-45903](https://insights.sbomify.com/CVE-2026-45903/): bpf: Fix memory access flags in helper prototypes (high 7.1)
- [CVE-2026-45902](https://insights.sbomify.com/CVE-2026-45902/): power: supply: bq256xx: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45901](https://insights.sbomify.com/CVE-2026-45901/): netfilter: nf_tables: revert commit_mutex usage in reset path (medium 5.5)
- [CVE-2026-45900](https://insights.sbomify.com/CVE-2026-45900/): crypto: caam - fix netdev memory leak in dpaa2_caam_probe (medium 5.5)
- [CVE-2026-4590](https://insights.sbomify.com/CVE-2026-4590/): kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery (low 2.3)
- [CVE-2026-45899](https://insights.sbomify.com/CVE-2026-45899/): ext4: drop extent cache when splitting extent fails (medium 5.5)
- [CVE-2026-45898](https://insights.sbomify.com/CVE-2026-45898/): RDMA/iwcm: Fix workqueue list corruption by removing work_list (critical 9.8)
- [CVE-2026-45897](https://insights.sbomify.com/CVE-2026-45897/): netfilter: nft_counter: serialize reset with spinlock (medium 5.5)
- [CVE-2026-45896](https://insights.sbomify.com/CVE-2026-45896/): mtd: intel-dg: Fix accessing regions before setting nregions (high 7.8)
- [CVE-2026-45895](https://insights.sbomify.com/CVE-2026-45895/): quota: fix livelock between quotactl and freeze_super (medium 5.5)
- [CVE-2026-45894](https://insights.sbomify.com/CVE-2026-45894/): iommu/vt-d: Clear Present bit before tearing down PASID entry (high 7.8)
- [CVE-2026-45893](https://insights.sbomify.com/CVE-2026-45893/): apparmor: Fix & Optimize table creation from possibly unaligned memory (high 7.1)
- [CVE-2026-45892](https://insights.sbomify.com/CVE-2026-45892/): ext4: drop extent cache after doing PARTIAL_VALID1 zeroout (medium 5.5)
- [CVE-2026-45891](https://insights.sbomify.com/CVE-2026-45891/): net: hns3: fix double free issue for tx spare buffer (high 7.8)
- [CVE-2026-45890](https://insights.sbomify.com/CVE-2026-45890/): xen-netback: reject zero-queue configuration from guest (medium 5.5)
- [CVE-2026-4589](https://insights.sbomify.com/CVE-2026-4589/): kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery (medium 5.3)
- [CVE-2026-45889](https://insights.sbomify.com/CVE-2026-45889/): mptcp: do not account for OoO in mptcp_rcvbuf_grow() (medium 5.5)
- [CVE-2026-45888](https://insights.sbomify.com/CVE-2026-45888/): md/raid1: fix memory leak in raid1_run() (medium 5.5)
- [CVE-2026-45887](https://insights.sbomify.com/CVE-2026-45887/): af_unix: Fix memleak of newsk in unix_stream_connect(). (medium 5.5)
- [CVE-2026-45886](https://insights.sbomify.com/CVE-2026-45886/): bpf: Fix bpf_xdp_store_bytes proto for read-only arg (medium 5.5)
- [CVE-2026-45885](https://insights.sbomify.com/CVE-2026-45885/): power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45884](https://insights.sbomify.com/CVE-2026-45884/): apparmor: avoid per-cpu hold underflow in aa_get_buffer (medium 5.5)
- [CVE-2026-45883](https://insights.sbomify.com/CVE-2026-45883/): iio: sca3000: Fix a resource leak in sca3000_probe() (medium 5.5)
- [CVE-2026-45882](https://insights.sbomify.com/CVE-2026-45882/): power: supply: pm8916_bms_vm: Fix use-after-free in power_supply_changed() (high 7.8)
- [CVE-2026-45881](https://insights.sbomify.com/CVE-2026-45881/): soc: mediatek: svs: Fix memory leak in svs_enable_debug_write() (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/617/