CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-22 19:30 UTC)

What this means for you

This week: 4,583 CVEs published, 338 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 4,583; Show in the list
Critical, last 7 days: 338; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,754; Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,678 CVEs, showing 4651 to 4678PreviousPage 94 of 94

CVE	Severity	Title	Published
CVE-2026-98139	Medium 5.5	ntfs: only count successfully cleared runs when freeing clusters Assigned by Linux	Sep 25, 2026
CVE-2026-98146	Medium 5.5	accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain Assigned by Linux	Sep 25, 2026
CVE-2026-98149	High 7.8	bpf: Fix percpu map update indexing with sparse CPU IDs Assigned by Linux	Sep 25, 2026
CVE-2026-98150	High 7.0	bpf: Fix BPF_F_CPU validation for sparse CPU IDs Assigned by Linux	Sep 25, 2026
CVE-2026-98151	Medium 5.5	bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Assigned by Linux	Sep 25, 2026
CVE-2026-98152	Medium 5.5	nvmet-rdma: fix queue leak when connect backlog is exceeded Assigned by Linux	Sep 25, 2026
CVE-2026-98153	Medium 5.5	nvme: fix racy access to FDP placement id array Assigned by Linux	Sep 25, 2026
CVE-2026-98154	High 7.0	nvme-rdma: fix -EIO cleanup order in queue_rq Assigned by Linux	Sep 25, 2026
CVE-2026-98155	High 7.1	accel/qaic: Address potential out-of-bounds read in resp_worker() Assigned by Linux	Sep 25, 2026
CVE-2026-98156	High 7.8	drm/virtio: use the DMA API for resource backing on Xen Assigned by Linux	Sep 25, 2026
CVE-2026-98157	Medium 5.5	EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Assigned by Linux	Sep 25, 2026
CVE-2026-98158	Medium 5.5	ppp_async: drop the errored frame instead of resetting its headroom Assigned by Linux	Sep 25, 2026
CVE-2026-98159	Medium 5.5	wifi: mt76: mt7921: validate CLC firmware records Assigned by Linux	Sep 25, 2026
CVE-2026-100070	Medium 5.5	netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet Assigned by Linux	Sep 25, 2026
CVE-2026-100071	Medium 5.5	net: hsr: free learned nodes on device setup failure Assigned by Linux	Sep 25, 2026
CVE-2026-100072	High 7.8	ACPI: platform: Use acpi_bus_get_primary_device() Assigned by Linux	Sep 25, 2026
CVE-2026-100073	Medium 5.5	ext4: fix transaction overflow during writeback Assigned by Linux	Sep 25, 2026
CVE-2026-100074	Medium 5.5	bpf: Mark bpf_refcount field as unique Assigned by Linux	Sep 25, 2026
CVE-2026-100075	Critical 9.8	RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters Assigned by Linux	Sep 25, 2026
CVE-2026-100076	Medium 5.5	staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths Assigned by Linux	Sep 25, 2026
CVE-2026-100077	Medium 5.5	drm/msm: Recover HW before retire hung submit Assigned by Linux	Sep 25, 2026
CVE-2026-100078	Medium 5.5	wifi: iwlwifi: mei: pass correct argument to function Assigned by Linux	Sep 25, 2026
CVE-2026-100079	Medium 5.5	usb: typec: ucsi: unregister debugfs entries on teardown Assigned by Linux	Sep 25, 2026
CVE-2026-98160	Medium 5.5	staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() Assigned by Linux	Sep 25, 2026
CVE-2026-98161	Medium 5.5	nvdimm: pmem: keep PREFLUSH before data writes Assigned by Linux	Sep 25, 2026
CVE-2026-98162	Medium 5.5	smb/server: fix tree connection leak in smb2_tree_connect() Assigned by Linux	Sep 25, 2026
CVE-2026-98163	High 7.8	cgroup: Avoid iteration of dying tasks with zero refcount Assigned by Linux	Sep 26, 2026
CVE-2026-98164	High 7.1	KVM: x86/mmu: Check write tracking in all address spaces Assigned by Linux	Sep 29, 2026

PreviousPage 94 of 94

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.