2026 CVE Vulnerabilities
69,041 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-90349 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix out-of-bounds link array ac... |
| CVE-2026-90348 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: snoc: use memcpy_fromio() for MSA ram... |
| CVE-2026-90347 | HIGH | 8.4 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: Keep 'orig_x0' in-sync with x0 on sy... |
| CVE-2026-90346 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: clean up color-change beacon data on... |
| CVE-2026-90345 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame handling witho... |
| CVE-2026-90344 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The... |
| CVE-2026-90343 | HIGH | 7.8 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and NAN teardo... |
| CVE-2026-90342 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmap_lock deadlock on arena lock failure ... |
| CVE-2026-90341 | HIGH | 7.7 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The exis... |
| CVE-2026-90340 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrl_generic_to_m... |
| CVE-2026-90339 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for secc... |
| CVE-2026-90338 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for ... |
| CVE-2026-90337 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the co... |
| CVE-2026-90336 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uart_register... |
| CVE-2026-90335 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TT... |
| CVE-2026-90334 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure t... |
| CVE-2026-90333 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with... |
| CVE-2026-90332 | HIGH | 8.2 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmappi... |
| CVE-2026-90331 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init seq... |
| CVE-2026-90330 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init ... |
| CVE-2026-90329 | HIGH | 8.8 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: HID: synchronize input before cleaning up a failed ... |
| CVE-2026-90328 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FE... |
| CVE-2026-90327 | — | — | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: phonet: pep: do not write beyond optlen in getsocko... |
| CVE-2026-90326 | HIGH | 7.8 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation and ... |
| CVE-2026-90325 | HIGH | 7.8 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcg_activate_polic... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now