CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 16:50 UTC )
What this means for you
This week: 5,039 CVEs published, 314 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,039 Show in the list Critical, last 7 days 314 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-52980 Medium 5.5 sched/fair: Clear rel_deadline when initializing forked entities Assigned by Linux
Jun 24, 2026 CVE-2026-52981 High 7.5 neigh: let neigh_xmit take skb ownership Assigned by Linux
Jun 24, 2026 CVE-2026-52982 Critical 9.8 net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() Assigned by Linux
Jun 24, 2026 CVE-2026-52983 High 7.5 net: airoha: fix BQL imbalance in TX path Assigned by Linux
Jun 24, 2026 CVE-2026-52984 Medium 5.5 net/sched: netem: fix queue limit check to include reordered packets Assigned by Linux
Jun 24, 2026 CVE-2026-52985 Medium 5.5 netdevsim: zero initialize struct iphdr in dummy sk_buff Assigned by Linux
Jun 24, 2026 CVE-2026-52986 Critical 9.8 netfilter: nf_conntrack_sip: don't use simple_strtoul Assigned by Linux
Jun 24, 2026 CVE-2026-52987 High 7.8 drm/amdgpu: avoid double drm_exec_fini() in userq validate Assigned by Linux
Jun 24, 2026 CVE-2026-52988 High 7.1 netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Assigned by Linux
Jun 24, 2026 CVE-2026-52989 Critical 9.8 nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Assigned by Linux
Jun 24, 2026 CVE-2026-52990 Medium 5.5 fsnotify: fix inode reference leak in fsnotify_recalc_mask() Assigned by Linux
Jun 24, 2026 CVE-2026-52991 High 7.8 sched/psi: fix race between file release and pressure write Assigned by Linux
Jun 24, 2026 CVE-2026-52992 High 7.8 fs/adfs: validate nzones in adfs_validate_bblk() Assigned by Linux
Jun 24, 2026 CVE-2026-52993 Critical 9.8 tipc: fix double-free in tipc_buf_append() Assigned by Linux
Jun 24, 2026 CVE-2026-52994 Medium 5.5 vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting Assigned by Linux
Jun 24, 2026 CVE-2026-52995 Medium 5.5 net/rds: zero per-item info buffer before handing it to visitors Assigned by Linux
Jun 24, 2026 CVE-2026-52996 Medium 5.5 ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open Assigned by Linux
Jun 24, 2026 CVE-2026-52997 Medium 5.5 net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() Assigned by Linux
Jun 24, 2026 CVE-2026-52998 High 7.5 netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check Assigned by Linux
Jun 24, 2026 CVE-2026-52999 Critical 9.1 netfilter: nfnetlink_osf: fix out-of-bounds read on option matching Assigned by Linux
Jun 24, 2026 CVE-2026-53000 High 7.8 netfilter: nat: use kfree_rcu to release ops Assigned by Linux
Jun 24, 2026 CVE-2026-53001 Medium 5.5 netfilter: xtables: restrict several matches to inet family Assigned by Linux
Jun 24, 2026 CVE-2026-53002 Critical 9.8 netfilter: conntrack: remove sprintf usage Assigned by Linux
Jun 24, 2026 CVE-2026-53003 High 7.5 pppoe: drop PFC frames Assigned by Linux
Jun 24, 2026 CVE-2026-53004 High 7.8 sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks Assigned by Linux
Jun 24, 2026 CVE-2026-53005 High 7.8 af_unix: Drop all SCM attributes for SOCKMAP. Assigned by Linux
Jun 24, 2026 CVE-2026-53006 Critical 9.8 ipv6: fix possible UAF in icmpv6_rcv() Assigned by Linux
Jun 24, 2026 CVE-2026-53007 Medium 5.5 ice: fix potential NULL pointer deref in error path of ice_set_ringparam() Assigned by Linux
Jun 24, 2026 CVE-2026-53008 Medium 4.7 ice: fix race condition in TX timestamp ring cleanup Assigned by Linux
Jun 24, 2026 CVE-2026-53009 High 7.8 ice: fix double-free of tx_buf skb Assigned by Linux
Jun 24, 2026 CVE-2026-53010 Critical 9.8 ksmbd: fix use-after-free in smb2_open during durable reconnect Assigned by Linux
Jun 24, 2026 CVE-2026-53011 High 7.8 net/sched: taprio: fix use-after-free in advance_sched() on schedule switch Assigned by Linux
Jun 24, 2026 CVE-2026-53012 Medium 5.5 nexthop: fix IPv6 route referencing IPv4 nexthop Assigned by Linux
Jun 24, 2026 CVE-2026-53013 Medium 5.5 macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF Assigned by Linux
Jun 24, 2026 CVE-2026-53014 Medium 5.5 net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir Assigned by Linux
Jun 24, 2026 CVE-2026-53015 Medium 5.5 erofs: unify lcn as u64 for 32-bit platforms Assigned by Linux
Jun 24, 2026 CVE-2026-53016 High 7.8 crypto: ccp - copy IV using skcipher ivsize Assigned by Linux
Jun 24, 2026 CVE-2026-53017 Medium 5.5 f2fs: fix data loss caused by incorrect use of nat_entry flag Assigned by Linux
Jun 24, 2026 CVE-2026-53018 Medium 5.5 f2fs: avoid reading already updated pages during GC Assigned by Linux
Jun 24, 2026 CVE-2026-53019 Medium 5.5 clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() Assigned by Linux
Jun 24, 2026 CVE-2026-53020 High 7.8 um: Fix potential race condition in TLB sync Assigned by Linux
Jun 24, 2026 CVE-2026-53021 Medium 5.5 scsi: target: core: Fix integer overflow in UNMAP bounds check Assigned by Linux
Jun 24, 2026 CVE-2026-53022 Medium 5.5 platform/x86: dell-wmi-sysman: bound enumeration string aggregation Assigned by Linux
Jun 24, 2026 CVE-2026-53023 Medium 5.5 fs/ntfs3: terminate the cached volume label after UTF-8 conversion Assigned by Linux
Jun 24, 2026 CVE-2026-53024 High 7.8 greybus: raw: fix use-after-free if write is called after disconnect Assigned by Linux
Jun 24, 2026 CVE-2026-53025 High 7.8 greybus: raw: fix use-after-free on cdev close Assigned by Linux
Jun 24, 2026 CVE-2026-53026 High 7.5 NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg Assigned by Linux
Jun 24, 2026 CVE-2026-53027 Medium 5.5 fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() Assigned by Linux
Jun 24, 2026 CVE-2026-53028 Medium 5.5 usb: typec: Fix error pointer dereference Assigned by Linux
Jun 24, 2026 CVE-2026-53029 Medium 5.5 fs/ntfs3: prevent uninitialized lcn caused by zero len Assigned by Linux
Jun 24, 2026
Previous Page 42 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.