CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 19:40 UTC )
This week: 5,381 CVEs published, 347 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,381 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98318 High 7.8 smb: client: validate absolute native symlink targets before NT fixups Assigned by Linux
Oct 6, 2026 CVE-2026-98317 Not yet scored neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. Assigned by Linux
Oct 6, 2026 CVE-2026-98316 Not yet scored ALSA: bcd2000: Fix race between rawmidi and disconnect Assigned by Linux
Oct 6, 2026 CVE-2026-98315 High 7.8 ntfs: protect runlist updates with the runlist lock Assigned by Linux
Oct 6, 2026 CVE-2026-98314 Not yet scored ALSA: pcm: set timer->private_data before registering the PCM timer Assigned by Linux
Oct 6, 2026 CVE-2026-98313 Not yet scored drm/msm/dp: skip PUSH_IDLE when the link was never enabled Assigned by Linux
Oct 6, 2026 CVE-2026-98312 Not yet scored ALSA: 6fire: fix OOB write from device-reported iso length Assigned by Linux
Oct 6, 2026 CVE-2026-98311 High 7.8 wifi: virt_wifi: don't transfer operstate before register Assigned by Linux
Oct 6, 2026 CVE-2026-98310 Not yet scored drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory Assigned by Linux
Oct 6, 2026 CVE-2026-98309 Not yet scored drm/vc4: Use managed KMS polling to fix UAF on unbind Assigned by Linux
Oct 6, 2026 CVE-2026-98308 Not yet scored ALSA: hda: trace PCM open only after assigning a stream Assigned by Linux
Oct 6, 2026 CVE-2026-98307 Not yet scored wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() Assigned by Linux
Oct 6, 2026 CVE-2026-98306 Not yet scored seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Assigned by Linux
Oct 6, 2026 CVE-2026-98305 High 7.8 net: dsa: mxl862xx: disable the stats poll on teardown Assigned by Linux
Oct 6, 2026 CVE-2026-98304 Not yet scored net: bcmgenet: restore the hardware filters on open Assigned by Linux
Oct 6, 2026 CVE-2026-98303 Not yet scored ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup Assigned by Linux
Oct 6, 2026 CVE-2026-98302 Not yet scored net: fddi: skfp: fix NULL deref when setting the MAC address while down Assigned by Linux
Oct 6, 2026 CVE-2026-98301 Not yet scored net: bridge: mst: move switchdev call outside rcu Assigned by Linux
Oct 6, 2026 CVE-2026-98300 Not yet scored tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Assigned by Linux
Oct 6, 2026 CVE-2026-98299 Not yet scored tcp: do not let tcp_rmem be set below 4096 Assigned by Linux
Oct 6, 2026 CVE-2026-98298 Not yet scored dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Assigned by Linux
Oct 6, 2026 CVE-2026-98297 Not yet scored Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained Assigned by Linux
Oct 6, 2026 CVE-2026-98296 Not yet scored Bluetooth: btintel_pcie: validate TX skb length in send_sync Assigned by Linux
Oct 6, 2026 CVE-2026-98295 Not yet scored Bluetooth: coredump: Quiesce dump work on unregister Assigned by Linux
Oct 6, 2026 CVE-2026-98294 Not yet scored Bluetooth: hci_qca: Do not write to the serial port after it is closed Assigned by Linux
Oct 6, 2026 CVE-2026-98293 Not yet scored Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() Assigned by Linux
Oct 6, 2026 CVE-2026-98292 Not yet scored Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access Assigned by Linux
Oct 6, 2026 CVE-2026-98291 Not yet scored Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit Assigned by Linux
Oct 6, 2026 CVE-2026-98290 High 7.5 Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Assigned by Linux
Oct 6, 2026 CVE-2026-98289 Not yet scored af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). Assigned by Linux
Oct 6, 2026 CVE-2026-98288 Not yet scored net: stmmac: fix TSO header length truncation Assigned by Linux
Oct 6, 2026 CVE-2026-98287 Not yet scored pppoatm: ensure a writable skb header and linear data Assigned by Linux
Oct 6, 2026 CVE-2026-98286 Not yet scored drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown Assigned by Linux
Oct 6, 2026 CVE-2026-98285 Not yet scored net: bridge: vlan: fix bugs caused by switchdev deletion errors Assigned by Linux
Oct 6, 2026 CVE-2026-98284 Not yet scored netlink: do not free nlk->groups while lockless readers can use it Assigned by Linux
Oct 6, 2026 CVE-2026-98283 High 8.8 KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Assigned by Linux
Oct 6, 2026 CVE-2026-98282 High 8.8 powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Assigned by Linux
Oct 6, 2026 CVE-2026-98281 High 7.8 futex: Also allocate private hash on vfork() Assigned by Linux
Oct 6, 2026 CVE-2026-98280 Not yet scored drm/xe/i2c: Disable IRQ on unbind Assigned by Linux
Oct 6, 2026 CVE-2026-98279 Not yet scored btrfs: handle lack of space when cleaning up verity items Assigned by Linux
Oct 6, 2026 CVE-2026-98278 Not yet scored net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check Assigned by Linux
Oct 6, 2026 CVE-2026-98277 Not yet scored eth: fbnic: ring the doorbell if a burst ends in a drop Assigned by Linux
Oct 6, 2026 CVE-2026-98276 High 7.8 net: lock the socket in sock_gettstamp() Assigned by Linux
Oct 6, 2026 CVE-2026-98275 Not yet scored net: ethernet: cortina: Ack RX overrun interrupt correctly Assigned by Linux
Oct 6, 2026 CVE-2026-98274 Not yet scored net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() Assigned by Linux
Oct 6, 2026 CVE-2026-98273 Not yet scored x86/kprobes: Fix crash when probing CS CALL instructions Assigned by Linux
Oct 6, 2026 CVE-2026-98272 Not yet scored net: mvpp2: prevent buffer overflow in page_pool allocation Assigned by Linux
Oct 6, 2026 CVE-2026-98271 Not yet scored net: skbuff: do not leave stale header offsets after pskb_carve() Assigned by Linux
Oct 6, 2026 CVE-2026-98270 Not yet scored drm/amdgpu: check ras and obj before dereference Assigned by Linux
Oct 6, 2026 CVE-2026-98269 Not yet scored btrfs: abort transaction on failure to update inode for hole punching and reflinking Assigned by Linux
Oct 6, 2026
Previous Page 12 of 144 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
