CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:50 UTC )
This week: 5,380 CVEs published, 347 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,380 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98368 High 7.8 esp: downgrade zerocopy managed frags before mutating skb frags Assigned by Linux
Oct 6, 2026 CVE-2026-98367 High 7.8 RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Assigned by Linux
Oct 6, 2026 CVE-2026-98366 High 7.8 RDMA/rxe: validate access flags before swapping the MR's PD Assigned by Linux
Oct 6, 2026 CVE-2026-98365 Critical 9.8 RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access Assigned by Linux
Oct 6, 2026 CVE-2026-98364 High 7.8 xfrm: hold net_device reference under RCU in bundle creation Assigned by Linux
Oct 6, 2026 CVE-2026-98363 Not yet scored firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Assigned by Linux
Oct 6, 2026 CVE-2026-98362 Not yet scored clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Assigned by Linux
Oct 6, 2026 CVE-2026-98361 High 7.8 RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Assigned by Linux
Oct 6, 2026 CVE-2026-98360 High 7.0 RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds Assigned by Linux
Oct 6, 2026 CVE-2026-98359 High 7.0 RDMA/core: Reject unregistering netdevs in ib_get_eth_speed Assigned by Linux
Oct 6, 2026 CVE-2026-98358 Not yet scored IB/iser: reject a remote invalidation of an unregistered direction Assigned by Linux
Oct 6, 2026 CVE-2026-98357 High 8.1 IB/isert: wait for deferred control PDU completions before releasing the connection Assigned by Linux
Oct 6, 2026 CVE-2026-98356 Not yet scored RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup Assigned by Linux
Oct 6, 2026 CVE-2026-98355 Not yet scored RDMA/rtrs: guard against null kobj name Assigned by Linux
Oct 6, 2026 CVE-2026-98354 Not yet scored RDMA/mad: Fix receive buffer leak when PKey enforcement fails Assigned by Linux
Oct 6, 2026 CVE-2026-98353 Not yet scored RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Assigned by Linux
Oct 6, 2026 CVE-2026-98352 Not yet scored RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Assigned by Linux
Oct 6, 2026 CVE-2026-98351 Not yet scored wifi: virt_wifi: free skb when disconnected Assigned by Linux
Oct 6, 2026 CVE-2026-98350 Not yet scored wifi: brcmfmac: cyw: pass PMKID to firmware if present Assigned by Linux
Oct 6, 2026 CVE-2026-98349 High 7.1 wifi: libipw: reject too-short beacon and probe responses Assigned by Linux
Oct 6, 2026 CVE-2026-98348 High 7.1 wifi: libipw: reject too-short association responses Assigned by Linux
Oct 6, 2026 CVE-2026-98347 Not yet scored IB/IPoIB: Avoid restoring OPER_UP after multicast flush Assigned by Linux
Oct 6, 2026 CVE-2026-98346 Not yet scored wifi: cfg80211: don't get the radio mask for netdev-less wdevs Assigned by Linux
Oct 6, 2026 CVE-2026-98345 Not yet scored wifi: cfg80211: check IP header size in cfg80211_classify8021d() Assigned by Linux
Oct 6, 2026 CVE-2026-98344 Not yet scored dmaengine: Fix device kref underflow in dma_chan_put() Assigned by Linux
Oct 6, 2026 CVE-2026-98343 Not yet scored dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Assigned by Linux
Oct 6, 2026 CVE-2026-98342 Not yet scored dmaengine: wait for RCU readers before releasing dma_device Assigned by Linux
Oct 6, 2026 CVE-2026-98341 High 7.8 wifi: cfg80211: don't free driver-owned scan requests Assigned by Linux
Oct 6, 2026 CVE-2026-98340 Not yet scored wifi: cfg80211: only group hidden BSSes with beacon entries Assigned by Linux
Oct 6, 2026 CVE-2026-98339 High 8.8 wifi: cfg80211: don't filter by BSS type when removing stale entries Assigned by Linux
Oct 6, 2026 CVE-2026-98338 Not yet scored wifi: cfg80211: ibss: ref BSS entry for joined event Assigned by Linux
Oct 6, 2026 CVE-2026-98337 Not yet scored wifi: mac80211: don't start a ROC while scanning Assigned by Linux
Oct 6, 2026 CVE-2026-98336 Not yet scored wifi: mac80211: don't offload TC setup on AP_VLAN interfaces Assigned by Linux
Oct 6, 2026 CVE-2026-98335 Not yet scored wifi: mac80211: abort chanswitch when leaving a mesh Assigned by Linux
Oct 6, 2026 CVE-2026-98334 Not yet scored wifi: mac80211: reset state when starting AP fails Assigned by Linux
Oct 6, 2026 CVE-2026-98333 Not yet scored wifi: mac80211: reset the LED state when ifup fails Assigned by Linux
Oct 6, 2026 CVE-2026-98332 Not yet scored wifi: mac80211: only operate on TDLS peers in the TDLS code Assigned by Linux
Oct 6, 2026 CVE-2026-98331 High 7.0 wifi: mac80211: unlist vifs when their netdev is unregistered Assigned by Linux
Oct 6, 2026 CVE-2026-98330 High 7.0 wifi: cfg80211: get the wiphy out of a dying network namespace Assigned by Linux
Oct 6, 2026 CVE-2026-98329 Not yet scored wifi: mac80211: don't allow injecting frames wider than the chanctx Assigned by Linux
Oct 6, 2026 CVE-2026-98328 Not yet scored wifi: mac80211: add HE 6 GHz capability in the scan elems len Assigned by Linux
Oct 6, 2026 CVE-2026-98327 Not yet scored wifi: mac80211: mesh: reset the CSA state when leaving Assigned by Linux
Oct 6, 2026 CVE-2026-98326 Not yet scored wifi: mac80211: mesh: release the channel if start fails Assigned by Linux
Oct 6, 2026 CVE-2026-98325 Not yet scored wifi: mac80211: set up the TX info early to fix failure paths Assigned by Linux
Oct 6, 2026 CVE-2026-98324 High 7.8 dmaengine: pxa: fix double counting of the hw descriptors Assigned by Linux
Oct 6, 2026 CVE-2026-98323 Critical 9.8 RDMA/siw: Bound fragmented header copies by the remaining length Assigned by Linux
Oct 6, 2026 CVE-2026-98322 Not yet scored netfilter: nft_nat: fully initialise new_addr in netmap setup Assigned by Linux
Oct 6, 2026 CVE-2026-98321 Not yet scored netfilter: nf_nat: unregister and release hooks on error Assigned by Linux
Oct 6, 2026 CVE-2026-98320 High 7.8 netfilter: flowtable: hold reference on ct until flow is released Assigned by Linux
Oct 6, 2026 CVE-2026-98319 Not yet scored drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Assigned by Linux
Oct 6, 2026
Previous Page 11 of 144 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
