Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 640 of 1013.
- CVE-2026-43489 liveupdate: luo_file: remember retrieve() status
- CVE-2026-43488 usb: xhci: Prevent interrupt storm on host controller error (HCE)
- CVE-2026-43487 ata: libata-core: Disable LPM on ST1000DM010-2EP102
- CVE-2026-43486 arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults
- CVE-2026-43485 nouveau/gsp: drop WARN_ON in ACPI probes
- CVE-2026-43484 mmc: core: Avoid bitfield RMW for claim/retune flags
- CVE-2026-43483 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
- CVE-2026-43482 sched_ext: Disable preemption between scx_claim_exit() and kicking helper work
- CVE-2026-43481 net-shapers: don't free reply skb after genlmsg_reply()
- CVE-2026-43480 ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
- CVE-2026-4348 BetterDocs Pro <= 3.7.0 - Unauthenticated SQL Injection via Encyclopedia 'limit' Parameter
- CVE-2026-43479 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
- CVE-2026-43478 ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put
- CVE-2026-43477 drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL
- CVE-2026-43476 iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
- CVE-2026-43475 scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
- CVE-2026-43474 fs: init flags_valid before calling vfs_fileattr_get
- CVE-2026-43473 scsi: mpi3mr: Add NULL checks when resetting request and reply queues
- CVE-2026-43472 unshare: fix unshare_fs() handling
- CVE-2026-43471 scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
- CVE-2026-43470 nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
- CVE-2026-4347 MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir
- CVE-2026-43469 xprtrdma: Decrement re_receiving on the early exit paths
- CVE-2026-43468 net/mlx5: Fix deadlock between devlink lock and esw->wq
- CVE-2026-43467 net/mlx5: Fix crash when moving to switchdev mode
- CVE-2026-43466 net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
- CVE-2026-43465 net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
- CVE-2026-43464 net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ
- CVE-2026-43463 rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()
- CVE-2026-43462 net: spacemit: Fix error handling in emac_tx_mem_map()
- CVE-2026-43461 spi: amlogic: spifc-a4: Fix DMA mapping error handling
- CVE-2026-43460 spi: rockchip-sfc: Fix double-free in remove() callback
- CVE-2026-4346 Cleartext Storage of Administrative and Wi-Fi Credentials via Accessible Serial Interface in TP Link's TL-WR850N
- CVE-2026-43459 ASoC: soc-core: flush delayed work before removing DAIs and widgets
- CVE-2026-43458 serial: caif: hold tty->link reference in ldisc_open and ser_release
- CVE-2026-43457 mctp: i2c: fix skb memory leak in receive path
- CVE-2026-43456 bonding: fix type confusion in bond_setup_by_slave()
- CVE-2026-43455 mctp: route: hold key->lock in mctp_flow_prepare_output()
- CVE-2026-43454 netfilter: nf_tables: Fix for duplicate device in netdev hooks
- CVE-2026-43453 netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
- CVE-2026-43452 netfilter: x_tables: guard option walkers against 1-byte tail reads
- CVE-2026-43451 netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
- CVE-2026-43450 netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
- CVE-2026-4345 Stored Cross-Site Scripting (XSS) Vulnerability in Design Name
- CVE-2026-43449 nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
- CVE-2026-43448 nvme-pci: Fix race bug in nvme_poll_irqdisable()
- CVE-2026-43447 iavf: fix PTP use-after-free during reset
- CVE-2026-43446 accel/amdxdna: Fix runtime suspend deadlock when there is pending job
- CVE-2026-43445 e1000/e1000e: Fix leak in DMA error cleanup
- CVE-2026-43444 drm/amdkfd: Unreserve bo if queue update failed
- CVE-2026-43443 ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
- CVE-2026-43442 io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops
- CVE-2026-43441 net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
- CVE-2026-43440 net/mana: Null service_wq on setup error to prevent double destroy
- CVE-2026-4344 Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name
- CVE-2026-43439 cgroup: fix race between task migration and iteration
- CVE-2026-43438 sched_ext: Remove redundant css_put() in scx_cgroup_init()
- CVE-2026-43437 ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
- CVE-2026-43436 ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
- CVE-2026-43435 rust_binder: fix oneway spam detection
- CVE-2026-43434 rust_binder: check ownership before using vma
- CVE-2026-43433 rust_binder: avoid reading the written value in offsets array
- CVE-2026-43432 usb: xhci: Fix memory leak in xhci_disable_slot()
- CVE-2026-43431 xhci: Fix NULL pointer dereference when reading portli debugfs files
- CVE-2026-43430 usb: yurex: fix race in probe
- CVE-2026-43429 USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
- CVE-2026-43428 USB: core: Limit the length of unkillable synchronous timeouts
- CVE-2026-43427 usb: class: cdc-wdm: fix reordering issue in read code path
- CVE-2026-43426 usb: renesas_usbhs: fix use-after-free in ISR during device removal
- CVE-2026-43425 usb: image: mdc800: kill download URB on timeout
- CVE-2026-43424 usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
- CVE-2026-43421 usb: gadget: f_ncm: Fix net_device lifecycle with device_move
- CVE-2026-43420 ceph: fix i_nlink underrun during async unlink
- CVE-2026-4342 ingress-nginx comment-based nginx configuration injection
- CVE-2026-43419 ceph: fix memory leaks in ceph_mdsc_build_path()
- CVE-2026-43418 sched/mmcid: Prevent CID stalls due to concurrent forks
- CVE-2026-43417 sched/mmcid: Handle vfork()/CLONE_VM correctly
- CVE-2026-43416 powerpc, perf: Check that current->mm is alive before getting user callchain
- CVE-2026-43415 scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
- CVE-2026-43414 scsi: qla2xxx: Completely fix fcport double free
- CVE-2026-43413 scsi: hisi_sas: Fix NULL pointer exception during user_scan()
- CVE-2026-43412 ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
- CVE-2026-43411 tipc: fix divide-by-zero in tipc_sk_filter_connect()
- CVE-2026-43410 firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled
- CVE-2026-4341 Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter
- CVE-2026-43409 kprobes: avoid crash when rmmod/insmod after ftrace killed
- CVE-2026-43408 ceph: add a bunch of missing ceph_path_info initializers
- CVE-2026-43407 libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
- CVE-2026-43406 libceph: prevent potential out-of-bounds reads in process_message_header()
- CVE-2026-43405 libceph: Use u32 for non-negative values in ceph_monmap_decode()
- CVE-2026-43404 mm: Fix a hmm_range_fault() livelock / starvation problem
- CVE-2026-43403 nsfs: tighten permission checks for ns iteration ioctls
- CVE-2026-43402 kthread: consolidate kthread exit paths to prevent use-after-free
- CVE-2026-43401 cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request()
- CVE-2026-43400 drm/amdgpu: add upper bound check on user inputs in signal ioctl
- CVE-2026-43399 drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl
- CVE-2026-43398 drm/amdgpu: add upper bound check on user inputs in wait ioctl
- CVE-2026-43397 drm/bridge: samsung-dsim: Fix memory leak in error path
- CVE-2026-43396 drm/xe/sync: Fix user fence leak on alloc failure
- CVE-2026-43395 drm/xe/sync: Cleanup partially initialized sync on parse failure