boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Thursday, September 24, 2026 · all times UTC← 2026-09-23 · archive

Security Box Score — September 24, 2026 — page 2

Edition of September 24, 2026, continued — page 2 of 2. Back to page 1

Results (continued, ranked) — ranks 401–553 of 553
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-93233await—LinuxLinux—drm/nouveau/dmem: fix callocated underflow on large folio split
CVE-2026-93234await—LinuxLinux—drm/gud: validate TV mode names before creating enum property
CVE-2026-93235await—LinuxLinux—f2fs: fix to zero post-EOF data when extending file size
CVE-2026-93236await—LinuxLinux—media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
CVE-2026-93238await—LinuxLinux—s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
CVE-2026-93239await—LinuxLinux—arm64: mm: Fix the lockless page-table walk in show_pte()
CVE-2026-93240await—LinuxLinux—memcg: make the v1 soft limit knob inert
CVE-2026-93241await—LinuxLinux—memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done
CVE-2026-93242await—LinuxLinux—scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
CVE-2026-93243await—LinuxLinux—mm/secretmem: properly account locked pages
CVE-2026-93244await—LinuxLinux—drm/sysfb: simpledrm: Improve stride validation
CVE-2026-93245await—LinuxLinux—apparmor: policy_int make sure list heads are initialized before fail path
CVE-2026-93246await—LinuxLinux—octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity
CVE-2026-93247await—LinuxLinux—Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference
CVE-2026-93248await—LinuxLinux—drm/xe: don't WARN on kernel job timeout when device already wedged
CVE-2026-93249await—LinuxLinux—spi: amlogic-spisg: Make sure clk_init_data is fully initialized
CVE-2026-93251await—LinuxLinux—ACPI: bus: Introduce acpi_bus_get_primary_device()
CVE-2026-93252await—LinuxLinux—ocfs2: fix circular locking dependency in ocfs2_init_acl()
CVE-2026-93253await—LinuxLinux—sched/isolation: Defer freeing of cpumask memblock memory to initcall
CVE-2026-93254await—LinuxLinux—arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit
CVE-2026-93255await—LinuxLinux—btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock
CVE-2026-93256await—LinuxLinux—arm64: hibernate: mask DAIF before restoring hibernated kernel
CVE-2026-93257await—LinuxLinux—block: handle nogenerate/noverify properly in fs-integrity
CVE-2026-93258await—LinuxLinux—ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
CVE-2026-93259await—LinuxLinux—powerpc/irq: Fix missing r2 clobber in PCREL inline assembly
CVE-2026-93261await—LinuxLinux—locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
CVE-2026-93263await—LinuxLinux—clk: eswin: Zero-initialize stack-allocated clk_init_data
CVE-2026-93264await—LinuxLinux—RDMA/efa: Fix PBL chunk length computation
CVE-2026-93266await—LinuxLinux—arm64: RSI: fix field-spanning write warning in attestation token init
CVE-2026-93267await—LinuxLinux—RDMA/core: Fix potential use after free in uverbs_free_dmah()
CVE-2026-93268await—LinuxLinux—ext4: skip extra isize expansion during mount to prevent deadlock
CVE-2026-93269await—LinuxLinux—ext4: fix circular lock dependency in ext4_ext_migrate
CVE-2026-93270await—LinuxLinux—bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn
CVE-2026-93271await—LinuxLinux—wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate
CVE-2026-93272await—LinuxLinux—remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
CVE-2026-93273await—LinuxLinux—regulator: tps6594: Fix device node reference leaks in multiphase loop
CVE-2026-93274await—LinuxLinux—pinctrl: bcm2835: Don't remove an unregistered GPIO chip
CVE-2026-93275await—LinuxLinux—perf/x86/intel/pt: Fix stop/start with no update
CVE-2026-93276await—LinuxLinux—phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled V…
CVE-2026-93278await—LinuxLinux—staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
CVE-2026-93279await—LinuxLinux—staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
CVE-2026-93281await—LinuxLinux—wifi: rtw89: fix HE extended capability length check
CVE-2026-93283await—LinuxLinux—i3c: master: Fix device_register() error path
CVE-2026-93285await—LinuxLinux—f2fs: embed f2fs_gc_kthread in f2fs_sb_info
CVE-2026-93286await—LinuxLinux—net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
CVE-2026-93781await—LinuxLinux—scsi: core: Do not block on tag allocation in scsi_eh_lock_door()
CVE-2026-93783await—LinuxLinux—Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
CVE-2026-93784await—LinuxLinux—wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
CVE-2026-93785await—LinuxLinux—cifs: validate idmap key payload length
CVE-2026-93788await—LinuxLinux—wifi: iwlwifi: acpi: validate WGDS table revision index
CVE-2026-93789await—LinuxLinux—wifi: iwlwifi: bound aligned TLV advance in FW parser
CVE-2026-93791await—LinuxLinux—wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
CVE-2026-93792await—LinuxLinux—wifi: iwlwifi: mvm: fix a possible underflow
CVE-2026-93794await—LinuxLinux—smb/client: flush dirty data before punching a hole
CVE-2026-93795await—LinuxLinux—blk-cgroup: fix leaks and online flag on radix_tree_insert failure
CVE-2026-93797await—LinuxLinux—wifi: iwlwifi: mvm: fix an off-by-1 boundary check
CVE-2026-93800await—LinuxLinux—btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
CVE-2026-93802await—LinuxLinux—wifi: rsi: validate beacon length before fixed buffer copy
CVE-2026-93803await—LinuxLinux—wifi: libipw: fix key index receive bound checks
CVE-2026-93804await—LinuxLinux—wifi: mac80211: ibss: wait for in-flight TX on disconnect
CVE-2026-93805await—LinuxLinux—wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
CVE-2026-93807await—LinuxLinux—wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
CVE-2026-93808await—LinuxLinux—ALSA: usb-audio: caiaq: validate EP1 reply lengths
CVE-2026-93809await—LinuxLinux—drm/amdgpu: flush pending RCU callbacks on module unload
CVE-2026-93811await—LinuxLinux—ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling
CVE-2026-93812await—LinuxLinux—ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
CVE-2026-93814await—LinuxLinux—spi: core: Abort active target transfer on controller suspend
CVE-2026-93815await—LinuxLinux—net: au1000: move free_irq out of the close-time spinlocked section
CVE-2026-93818await—LinuxLinux—PCI: plda: Protect root bus removal with rescan lock
CVE-2026-93819await—LinuxLinux—PCI: mediatek: Protect root bus removal with rescan lock
CVE-2026-93820await—LinuxLinux—PCI: rockchip: Protect root bus removal with rescan lock
CVE-2026-93821await—LinuxLinux—PCI: altera: Protect root bus removal with rescan lock
CVE-2026-93822await—LinuxLinux—PCI: iproc: Protect root bus removal with rescan lock
CVE-2026-93823await—LinuxLinux—drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
CVE-2026-93824await—LinuxLinux—tls: reject the combination of TLS and sockmap
CVE-2026-93825await—LinuxLinux—spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
CVE-2026-93828await—LinuxLinux—exfat: fix handling of damaged volume in exfat_create_upcase_table()
CVE-2026-93829await—LinuxLinux—smb: client: fix races in cifsd thread creation
CVE-2026-97230await——IO-Socket-SSL-SelfCertificateCWE-506IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware whic…
CVE-2026-97407await—LinuxLinux—ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt
CVE-2026-97408await—LinuxLinux—Bluetooth: L2CAP: validate connectionless PSM length
CVE-2026-97410await—LinuxLinux—netconsole: take target_cleanup_list_lock in drop_netconsole_target()
CVE-2026-97411await—LinuxLinux—net: ibm: emac: mal: fix potential system hang in mal_remove()
CVE-2026-97412await—LinuxLinux—pds_core: quiesce DMA before freeing resources
CVE-2026-97414await—LinuxLinux—ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8…
CVE-2026-97416await—LinuxLinux—btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()
CVE-2026-97418await—LinuxLinux—ALSA: es18xx: check control allocation before private data setup
CVE-2026-97419await—LinuxLinux—hsr: broadcast netlink notifications in the device's net namespace
CVE-2026-97420await—LinuxLinux—bpf: NUL-terminate replaced sysctl value
CVE-2026-97422await—LinuxLinux—drm/amdkfd: fix SMI event cross-process information leak
CVE-2026-97423await—LinuxLinux—cxl/region: Validate partition index before array access
CVE-2026-97424await—LinuxLinux—drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq
CVE-2026-97425await—LinuxLinux—drm/amdgpu: fix buffer overflow during vBIOS update
CVE-2026-97426await—LinuxLinux—drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error
CVE-2026-97427await—LinuxLinux—drm/amd/pm: bound pp_dpm_set_pp_table() memcpy
CVE-2026-97430await—LinuxLinux—xhci: Prevent queuing new commands if xhci is inaccessible
CVE-2026-97431await—LinuxLinux—drm/amd/display: Avoid DPMS-on for phantom stream
CVE-2026-97432await—LinuxLinux—wifi: iwlwifi: mvm: fix P2P-Device binding handling
CVE-2026-97434await—LinuxLinux—dpaa2-switch: fix handling of NAPI on the remove path
CVE-2026-97435await—LinuxLinux—net: dsa: sja1105: flower: reject cross-chip redirect
CVE-2026-97436await—LinuxLinux—dpaa2-switch: rework FDB management on the bridge leave path
CVE-2026-97439await—LinuxLinux—fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib
CVE-2026-97440await—LinuxLinux—net: qrtr: fix node refcount leak on ctrl packet alloc failure
CVE-2026-97441await—LinuxLinux—ata: ahci: fail probe if BAR too small for claimed ports
CVE-2026-97443await—LinuxLinux—perf/ftrace: Fix WARNING in __unregister_ftrace_function
CVE-2026-97446await—LinuxLinux—ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()
CVE-2026-97447await—LinuxLinux—ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op()
CVE-2026-97449await—LinuxLinux—ACPICA: Add package limit checks in parser functions
CVE-2026-97453await—LinuxLinux—ACPICA: validate byte_count in acpi_ps_get_next_package_length()
CVE-2026-97456await—LinuxLinux—ACPICA: Fix condition check in acpi_ps_parse_loop()
CVE-2026-97472await—LinuxLinux—ipv6: addrconf: fix temp address generation after prefix deprecation
CVE-2026-97473await—LinuxLinux—powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()
CVE-2026-97475await—LinuxLinux—thermal/drivers/tegra/soctherma: Switch to devm cooling device registration
CVE-2026-97476await—LinuxLinux—rds: filter RDS_INFO_* getsockopt by caller's netns
CVE-2026-97477await—LinuxLinux—RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()
CVE-2026-97479await—LinuxLinux—driver core: Avoid warning when removing a device while its supplier is unbin…
CVE-2026-97480await—LinuxLinux—tty: serial: 8250: protect against NULL uart->port.dev in register
CVE-2026-97481await—LinuxLinux—serial: 8250: fix possible ISR soft lockup
CVE-2026-97482await—LinuxLinux—usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log
CVE-2026-97483await—LinuxLinux—usb: core: hcd: fix possible deadlock in rh control transfers
CVE-2026-97484await—LinuxLinux—usbip: vhci_hcd: fix NULL deref in status_show_vhci
CVE-2026-97485await—LinuxLinux—omfs: handle set_blocksize failures
CVE-2026-97486await—LinuxLinux—hpfs: handle set_blocksize failures
CVE-2026-97487await—LinuxLinux—jfs: handle set_blocksize failures
CVE-2026-97488await—LinuxLinux—qnx4: handle set_blocksize failures
CVE-2026-97489await—LinuxLinux—bfs: handle set_blocksize failures
CVE-2026-97490await—LinuxLinux—affs: handle set_blocksize failures
CVE-2026-97491await—LinuxLinux—net/rds: Don't sleep inside rds_ib_conn_path_shutdown
CVE-2026-97492await—LinuxLinux—wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed
CVE-2026-97493await—LinuxLinux—drm/amdgpu: Bound GPIO I2C table entry count from VBIOS
CVE-2026-97494await—LinuxLinux—drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
CVE-2026-97495await—LinuxLinux—drm/amdkfd: Check bounds on allocate_doorbell
CVE-2026-97498await—LinuxLinux—drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction
CVE-2026-97499await—LinuxLinux—coresight: perf: Retrieve path and source from event data
CVE-2026-97500await—LinuxLinux—wifi: rtw89: phy: check length before parsing PHY status IE
CVE-2026-97501await—LinuxLinux—pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction
CVE-2026-97502await—LinuxLinux—mmc: davinci: avoid NULL deref of host->data in IRQ handler
CVE-2026-97503await—LinuxLinux—genirq/proc: Size interrupt directory names for 10-digit interrupt numbers
CVE-2026-97504await—LinuxLinux—watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk
CVE-2026-97505await—LinuxLinux—PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()
CVE-2026-97506await—LinuxLinux—crypto: ixp4xx - fix buffer chain unwind on allocation failure
CVE-2026-97507await—LinuxLinux—media: dm1105: fix missing error check for dma_alloc_coherent
CVE-2026-97510await—LinuxLinux—thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_respon…
CVE-2026-97511await—LinuxLinux—wifi: mac80211: avoid out-of-bounds access in monitor
CVE-2026-97512await—LinuxLinux—spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM
CVE-2026-97514await—LinuxLinux—media: chips-media: wave5: Fix Reports from Kernel Lock Validator
CVE-2026-97515await—LinuxLinux—i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845
CVE-2026-97516await—LinuxLinux—wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()
CVE-2026-97517await—LinuxLinux—wifi: nl80211: reject beacons with bad HE operation
CVE-2026-97518await—LinuxLinux—wifi: cfg80211: reject duplicate wiphy cipher suite entries
CVE-2026-97519await—LinuxLinux—drm/xe: Fix null pointer dereference in devcoredump cleanup
CVE-2026-97521await—LinuxLinux—gfs2: fix quota init duplicate scan
CVE-2026-97636await—Apache Software FoundationApache Airflow HashiCorp providerCWE-639Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scop…