# Vulnerabilities published in 2026


- [CVE-2026-43211](https://insights.sbomify.com/CVE-2026-43211/): PCI: Fix pci_slot_trylock() error handling (high 7.8)
- [CVE-2026-43210](https://insights.sbomify.com/CVE-2026-43210/): tracing: ring-buffer: Fix to check event length before using (medium 5.5)
- [CVE-2026-4321](https://insights.sbomify.com/CVE-2026-4321/): SQLi in Raera's Destekz (critical 9.8)
- [CVE-2026-43209](https://insights.sbomify.com/CVE-2026-43209/): minix: Add required sanity checking to minix_check_superblock() (medium 5.5)
- [CVE-2026-43208](https://insights.sbomify.com/CVE-2026-43208/): net: do not pass flow_id to set_rps_cpu() (critical 9.8)
- [CVE-2026-43207](https://insights.sbomify.com/CVE-2026-43207/): media: mtk-mdp: Fix error handling in probe function (high 7.8)
- [CVE-2026-43206](https://insights.sbomify.com/CVE-2026-43206/): drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (high 7.8)
- [CVE-2026-43205](https://insights.sbomify.com/CVE-2026-43205/): dpaa2-switch: validate num_ifs to prevent out-of-bounds write (high 7.8)
- [CVE-2026-43204](https://insights.sbomify.com/CVE-2026-43204/): ASoC: qcom: q6asm: drop DSP responses for closed data streams (medium 5.5)
- [CVE-2026-43203](https://insights.sbomify.com/CVE-2026-43203/): atm: fore200e: fix use-after-free in tasklets during device removal (high 7.5)
- [CVE-2026-43202](https://insights.sbomify.com/CVE-2026-43202/): fbdev: vt8500lcdfb: fix missing dma_free_coherent() (medium 5.5)
- [CVE-2026-43201](https://insights.sbomify.com/CVE-2026-43201/): APEI/GHES: ARM processor Error: don't go past allocated memory (medium 5.5)
- [CVE-2026-43200](https://insights.sbomify.com/CVE-2026-43200/): PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions (medium 5.5)
- [CVE-2026-4320](https://insights.sbomify.com/CVE-2026-4320/): Authorization Bypass in ICMS Content Management by Creartia Internet Consulting (critical 9.3)
- [CVE-2026-43199](https://insights.sbomify.com/CVE-2026-43199/): net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (high 7.5)
- [CVE-2026-43198](https://insights.sbomify.com/CVE-2026-43198/): tcp: fix potential race in tcp_v6_syn_recv_sock() (critical 9.8)
- [CVE-2026-43197](https://insights.sbomify.com/CVE-2026-43197/): netconsole: avoid OOB reads, msg is not nul-terminated (critical 9.1)
- [CVE-2026-43196](https://insights.sbomify.com/CVE-2026-43196/): soc: ti: pruss: Fix double free in pruss_clk_mux_setup() (high 7.8)
- [CVE-2026-43195](https://insights.sbomify.com/CVE-2026-43195/): drm/amdgpu: validate user queue size constraints (medium 5.5)
- [CVE-2026-43194](https://insights.sbomify.com/CVE-2026-43194/): net: consume xmit errors of GSO frames (high 7.5)
- [CVE-2026-43193](https://insights.sbomify.com/CVE-2026-43193/): nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg() (medium 5.5)
- [CVE-2026-43192](https://insights.sbomify.com/CVE-2026-43192/): dm mpath: Add missing dm_put_device when failing to get scsi dh name (medium 5.5)
- [CVE-2026-43191](https://insights.sbomify.com/CVE-2026-43191/): drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 (medium 5.5)
- [CVE-2026-43190](https://insights.sbomify.com/CVE-2026-43190/): netfilter: xt_tcpmss: check remaining length before reading optlen (high 8.2)
- [CVE-2026-4319](https://insights.sbomify.com/CVE-2026-4319/): code-projects Simple Food Order System add-item.php sql injection (medium 6.9)
- [CVE-2026-43189](https://insights.sbomify.com/CVE-2026-43189/): media: v4l2-async: Fix error handling on steps after finding a match (medium 5.5)
- [CVE-2026-43188](https://insights.sbomify.com/CVE-2026-43188/): ceph: do not propagate page array emplacement errors as batch errors (medium 5.5)
- [CVE-2026-43187](https://insights.sbomify.com/CVE-2026-43187/): xfs: delete attr leaf freemap entries when empty (high 8.8)
- [CVE-2026-43186](https://insights.sbomify.com/CVE-2026-43186/): ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (critical 9.8)
- [CVE-2026-43185](https://insights.sbomify.com/CVE-2026-43185/): ksmbd: fix signededness bug in smb_direct_prepare_negotiation() (critical 9.8)
- [CVE-2026-43184](https://insights.sbomify.com/CVE-2026-43184/): rnbd-srv: Zero the rsp buffer before using it (high 7.5)
- [CVE-2026-43183](https://insights.sbomify.com/CVE-2026-43183/): media: cx25821: Fix a resource leak in cx25821_dev_setup() (medium 5.5)
- [CVE-2026-43182](https://insights.sbomify.com/CVE-2026-43182/): media: ccs: Avoid possible division by zero (medium 5.5)
- [CVE-2026-43181](https://insights.sbomify.com/CVE-2026-43181/): gpio: sysfs: fix chip removal with GPIOs exported over sysfs (medium 5.5)
- [CVE-2026-43180](https://insights.sbomify.com/CVE-2026-43180/): net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (high 7.8)
- [CVE-2026-4318](https://insights.sbomify.com/CVE-2026-4318/): UTT HiPER 810G formApLbConfig strcpy buffer overflow (high 8.7)
- [CVE-2026-43179](https://insights.sbomify.com/CVE-2026-43179/): erofs: fix incorrect early exits for invalid metabox-enabled images (medium 5.5)
- [CVE-2026-43178](https://insights.sbomify.com/CVE-2026-43178/): procfs: fix possible double mmput() in do_procmap_query() (high 7.8)
- [CVE-2026-43177](https://insights.sbomify.com/CVE-2026-43177/): media: ipu6: Fix RPM reference leak in probe error paths (medium 5.5)
- [CVE-2026-43176](https://insights.sbomify.com/CVE-2026-43176/): wifi: rtw89: pci: validate release report content before using for RTL8922DE (high 8.8)
- [CVE-2026-43175](https://insights.sbomify.com/CVE-2026-43175/): clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 (medium 5.5)
- [CVE-2026-43174](https://insights.sbomify.com/CVE-2026-43174/): io_uring/zcrx: fix post open error handling (medium 5.5)
- [CVE-2026-43173](https://insights.sbomify.com/CVE-2026-43173/): net: ethernet: xscale: Check for PTP support properly (medium 5.5)
- [CVE-2026-43172](https://insights.sbomify.com/CVE-2026-43172/): wifi: iwlwifi: fix 22000 series SMEM parsing (high 8.8)
- [CVE-2026-43171](https://insights.sbomify.com/CVE-2026-43171/): EFI/CPER: don't dump the entire memory region (medium 5.5)
- [CVE-2026-43170](https://insights.sbomify.com/CVE-2026-43170/): usb: dwc3: gadget: Move vbus draw to workqueue context (medium 5.5)
- [CVE-2026-4317](https://insights.sbomify.com/CVE-2026-4317/): SQL inyection in Umami Software application (critical 9.3)
- [CVE-2026-43169](https://insights.sbomify.com/CVE-2026-43169/): drm/buddy: Prevent BUG_ON by validating rounded allocation (medium 5.5)
- [CVE-2026-43168](https://insights.sbomify.com/CVE-2026-43168/): ocfs2: fix reflink preserve cleanup issue (medium 5.5)
- [CVE-2026-43167](https://insights.sbomify.com/CVE-2026-43167/): xfrm: always flush state and policy upon NETDEV_UNREGISTER event (medium 5.5)
- [CVE-2026-43166](https://insights.sbomify.com/CVE-2026-43166/): erofs: fix interlaced plain identification for encoded extents (high 7.1)
- [CVE-2026-43165](https://insights.sbomify.com/CVE-2026-43165/): hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin (medium 5.5)
- [CVE-2026-43164](https://insights.sbomify.com/CVE-2026-43164/): udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb(). (high 7.5)
- [CVE-2026-43163](https://insights.sbomify.com/CVE-2026-43163/): md/bitmap: fix GPF in write_page caused by resize race (medium 4.7)
- [CVE-2026-43162](https://insights.sbomify.com/CVE-2026-43162/): media: tegra-video: Fix memory leak in __tegra_channel_try_format() (medium 5.5)
- [CVE-2026-43161](https://insights.sbomify.com/CVE-2026-43161/): iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (medium 5.5)
- [CVE-2026-43160](https://insights.sbomify.com/CVE-2026-43160/): mfd: macsmc: Initialize mutex (medium 5.5)
- [CVE-2026-4316](https://insights.sbomify.com/CVE-2026-4316/): Reflected Cross-Site Scripting in software IsMyGym by Zuinq Studio (medium 5.1)
- [CVE-2026-43159](https://insights.sbomify.com/CVE-2026-43159/): staging: rtl8723bs: fix null dereference in find_network (medium 5.5)
- [CVE-2026-43158](https://insights.sbomify.com/CVE-2026-43158/): xfs: fix freemap adjustments when adding xattrs to leaf blocks (high 8.8)
- [CVE-2026-43157](https://insights.sbomify.com/CVE-2026-43157/): octeontx2-af: CGX: fix bitmap leaks (medium 5.5)
- [CVE-2026-43156](https://insights.sbomify.com/CVE-2026-43156/): net: usb: pegasus: enable basic endpoint checking (medium 5.5)
- [CVE-2026-43155](https://insights.sbomify.com/CVE-2026-43155/): mux: mmio: fix regmap leak on probe failure (medium 5.5)
- [CVE-2026-43154](https://insights.sbomify.com/CVE-2026-43154/): erofs: fix incorrect early exits in volume label handling (medium 5.5)
- [CVE-2026-43153](https://insights.sbomify.com/CVE-2026-43153/): xfs: remove xfs_attr_leaf_hasname (high 7.8)
- [CVE-2026-43152](https://insights.sbomify.com/CVE-2026-43152/): HID: hid-pl: handle probe errors (medium 5.5)
- [CVE-2026-43151](https://insights.sbomify.com/CVE-2026-43151/): Revert "media: iris: Add sanity check for stop streaming" (medium 5.5)
- [CVE-2026-43150](https://insights.sbomify.com/CVE-2026-43150/): perf/arm-cmn: Reject unsupported hardware configurations (high 7.8)
- [CVE-2026-4315](https://insights.sbomify.com/CVE-2026-4315/): WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI (high 7.1)
- [CVE-2026-43149](https://insights.sbomify.com/CVE-2026-43149/): net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() (medium 5.5)
- [CVE-2026-43148](https://insights.sbomify.com/CVE-2026-43148/): powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() (medium 5.5)
- [CVE-2026-43147](https://insights.sbomify.com/CVE-2026-43147/): Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" (medium 5.5)
- [CVE-2026-43146](https://insights.sbomify.com/CVE-2026-43146/): media: iris: Add buffer to list only after successful allocation (medium 5.5)
- [CVE-2026-43145](https://insights.sbomify.com/CVE-2026-43145/): remoteproc: imx_rproc: Fix invalid loaded resource table detection (medium 5.5)
- [CVE-2026-43144](https://insights.sbomify.com/CVE-2026-43144/): wifi: brcmfmac: Fix potential kernel oops when probe fails (medium 5.5)
- [CVE-2026-43143](https://insights.sbomify.com/CVE-2026-43143/): mfd: core: Add locking around 'mfd_of_node_list' (medium 5.5)
- [CVE-2026-43142](https://insights.sbomify.com/CVE-2026-43142/): media: iris: gen1: Destroy internal buffers after FW releases (medium 5.5)
- [CVE-2026-43141](https://insights.sbomify.com/CVE-2026-43141/): ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut (high 7.1)
- [CVE-2026-43140](https://insights.sbomify.com/CVE-2026-43140/): HID: magicmouse: Do not crash on missing msc->input (medium 5.5)
- [CVE-2026-4314](https://insights.sbomify.com/CVE-2026-4314/): Privilege escalation in The Ultimate WordPress Toolkit – WP Extended (high 8.8)
- [CVE-2026-43139](https://insights.sbomify.com/CVE-2026-43139/): xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (high 8.6)
- [CVE-2026-43138](https://insights.sbomify.com/CVE-2026-43138/): reset: gpio: suppress bind attributes in sysfs (high 7.8)
- [CVE-2026-43137](https://insights.sbomify.com/CVE-2026-43137/): ASoC: SOF: Intel: hda: Fix NULL pointer dereference (medium 5.5)
- [CVE-2026-43136](https://insights.sbomify.com/CVE-2026-43136/): HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (medium 5.5)
- [CVE-2026-43135](https://insights.sbomify.com/CVE-2026-43135/): media: cx23885: Add missing unmap in snd_cx23885_hw_params() (medium 5.5)
- [CVE-2026-43134](https://insights.sbomify.com/CVE-2026-43134/): Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ (high 8.1)
- [CVE-2026-43133](https://insights.sbomify.com/CVE-2026-43133/): KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (high 7.9)
- [CVE-2026-43132](https://insights.sbomify.com/CVE-2026-43132/): dm-verity: correctly handle dm_bufio_client_create() failure (medium 5.5)
- [CVE-2026-43131](https://insights.sbomify.com/CVE-2026-43131/): drm/amd/pm: Fix null pointer dereference issue (medium 5.5)
- [CVE-2026-43130](https://insights.sbomify.com/CVE-2026-43130/): iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (medium 5.5)
- [CVE-2026-4313](https://insights.sbomify.com/CVE-2026-4313/): Stored XSS in AdaptiveGRC (low 2.4)
- [CVE-2026-43129](https://insights.sbomify.com/CVE-2026-43129/): ima: verify the previous kernel's IMA buffer lies in addressable RAM (medium 5.5)
- [CVE-2026-43128](https://insights.sbomify.com/CVE-2026-43128/): RDMA/umem: Fix double dma_buf_unpin in failure path (high 7.8)
- [CVE-2026-43127](https://insights.sbomify.com/CVE-2026-43127/): ntfs3: fix circular locking dependency in run_unpack_ex (medium 5.5)
- [CVE-2026-43126](https://insights.sbomify.com/CVE-2026-43126/): ALSA: mixer: oss: Add card disconnect checkpoints (high 7.8)
- [CVE-2026-43125](https://insights.sbomify.com/CVE-2026-43125/): dlm: validate length in dlm_search_rsb_tree (critical 9.8)
- [CVE-2026-43124](https://insights.sbomify.com/CVE-2026-43124/): pstore: ram_core: fix incorrect success return when vmap() fails (medium 5.5)
- [CVE-2026-43123](https://insights.sbomify.com/CVE-2026-43123/): fbcon: check return value of con2fb_acquire_newinfo() (medium 5.5)
- [CVE-2026-43121](https://insights.sbomify.com/CVE-2026-43121/): io_uring/zcrx: fix user_ref race between scrub and refill paths (medium 4.7)
- [CVE-2026-43120](https://insights.sbomify.com/CVE-2026-43120/): RDMA/irdma: Fix double free related to rereg_user_mr (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/643/