CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:10 UTC )
This week: 5,382 CVEs published, 347 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,382 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98418 Not yet scored sched/core: Avoid false migration warning for proxy donors Assigned by Linux
Oct 14, 2026 CVE-2026-98417 Not yet scored net: xfrm: reject unrepresentable espintcp transport headers Assigned by Linux
Oct 14, 2026 CVE-2026-98416 Not yet scored dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Assigned by Linux
Oct 14, 2026 CVE-2026-98415 Not yet scored soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node Assigned by Linux
Oct 14, 2026 CVE-2026-98414 Not yet scored memcg: avoid charging the root memcg from obj_cgroup_charge_pages() Assigned by Linux
Oct 14, 2026 CVE-2026-98413 Not yet scored selinux: always fill AVC decision in avc_has_perm_noaudit() Assigned by Linux
Oct 14, 2026 CVE-2026-98412 Not yet scored power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() Assigned by Linux
Oct 14, 2026 CVE-2026-98411 Not yet scored power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() Assigned by Linux
Oct 14, 2026 CVE-2026-98410 Not yet scored watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog Assigned by Linux
Oct 14, 2026 CVE-2026-98409 Not yet scored watchdog: rtd119x: Avoid division by zero Assigned by Linux
Oct 14, 2026 CVE-2026-98408 Not yet scored watchdog: rzv2h: Avoid division by zero Assigned by Linux
Oct 14, 2026 CVE-2026-98407 Not yet scored wifi: rsi: fix heap OOB write on key removal Assigned by Linux
Oct 14, 2026 CVE-2026-98406 Not yet scored wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Assigned by Linux
Oct 14, 2026 CVE-2026-98405 Not yet scored smb: client: fix missing iov bounds check in parse_posix_sids() Assigned by Linux
Oct 14, 2026 CVE-2026-98404 Not yet scored drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Assigned by Linux
Oct 14, 2026 CVE-2026-98403 Not yet scored s390/boot: Avoid IPL parameter append past command line Assigned by Linux
Oct 14, 2026 CVE-2026-98402 Not yet scored net: icmp: avoid invalid transport header access in icmp_send tracepoint Assigned by Linux
Oct 14, 2026 CVE-2026-98401 Not yet scored net: iptunnel: fix stale transport header during tunnel decapsulation Assigned by Linux
Oct 14, 2026 CVE-2026-98400 Not yet scored s390/ipl: Fix NULL deref in kdump without re-IPL parm block Assigned by Linux
Oct 14, 2026 CVE-2026-98399 Not yet scored s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Assigned by Linux
Oct 14, 2026 CVE-2026-98398 Not yet scored locking/lockdep: Invalidate stale class_cache entries for zapped classes Assigned by Linux
Oct 14, 2026 CVE-2026-98397 Not yet scored platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown Assigned by Linux
Oct 14, 2026 CVE-2026-98396 Not yet scored powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() Assigned by Linux
Oct 14, 2026 CVE-2026-98395 Not yet scored powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit Assigned by Linux
Oct 14, 2026 CVE-2026-98394 Not yet scored af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Assigned by Linux
Oct 14, 2026 CVE-2026-98393 Not yet scored net: ipv4: Fix UDP length overflow with PMTU discover and big MTU Assigned by Linux
Oct 14, 2026 CVE-2026-98392 Not yet scored Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Assigned by Linux
Oct 14, 2026 CVE-2026-98391 Not yet scored drm/xe: Guard page-fault worker with runtime PM check Assigned by Linux
Oct 14, 2026 CVE-2026-98390 Not yet scored x86/amd_node: Avoid divide by zero on virtualized systems Assigned by Linux
Oct 14, 2026 CVE-2026-98389 Not yet scored drm/amdgpu: skip gfx switch_power_profile during GPU reset Assigned by Linux
Oct 14, 2026 CVE-2026-98388 Not yet scored exec: do_close_on_exec() before taking exec_update_lock Assigned by Linux
Oct 14, 2026 CVE-2026-98387 Not yet scored s390/crypto: Fix skcipher_walk return code handling in aes_s390 Assigned by Linux
Oct 14, 2026 CVE-2026-98386 Not yet scored scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot Assigned by Linux
Oct 14, 2026 CVE-2026-98385 Not yet scored sched/cache: Decouple sched_cache_group from mm to fix UAF Assigned by Linux
Oct 12, 2026 CVE-2026-98384 Not yet scored bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() Assigned by Linux
Oct 9, 2026 CVE-2026-98383 Not yet scored bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Assigned by Linux
Oct 9, 2026 CVE-2026-98382 Not yet scored bpf: Reject dev-bound-only programs on other devices Assigned by Linux
Oct 9, 2026 CVE-2026-98381 Not yet scored veth: manage XDP program pointers during channel resize Assigned by Linux
Oct 9, 2026 CVE-2026-98380 Not yet scored net/sched: reject IDR error pointers when deleting actions Assigned by Linux
Oct 9, 2026 CVE-2026-98379 Not yet scored netfilter: ip6t_rpfilter: reject routes without inet6_dev Assigned by Linux
Oct 9, 2026 CVE-2026-98378 Not yet scored bpf: Skip unsettled links in link iterator Assigned by Linux
Oct 9, 2026 CVE-2026-98377 Not yet scored vlan: require the MAC header to be present in __vlan_insert_inner_tag() Assigned by Linux
Oct 9, 2026 CVE-2026-98376 Not yet scored bpf: Use array_map_meta_equal for percpu array inner map replacement Assigned by Linux
Oct 9, 2026 CVE-2026-98375 Not yet scored xen/netfront: drop RX packets with a short Ethernet header Assigned by Linux
Oct 9, 2026 CVE-2026-98374 Not yet scored tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Assigned by Linux
Oct 7, 2026 CVE-2026-98373 Not yet scored mm/hugetlb: preserve mremap address delta when skipping page tables Assigned by Linux
Oct 7, 2026 CVE-2026-98372 Not yet scored xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() Assigned by Linux
Oct 6, 2026 CVE-2026-98371 Not yet scored xfrm: iptfs: fix runt reassembly panic from short inner tot_len Assigned by Linux
Oct 6, 2026 CVE-2026-98370 Not yet scored xfrm: fix compat ALLOCSPI request use-after-free Assigned by Linux
Oct 6, 2026 CVE-2026-98369 High 7.8 xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Assigned by Linux
Oct 6, 2026
Previous Page 10 of 142 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
