CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 20:20 UTC )
This week: 5,370 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,370 Show in the list Critical, last 7 days 344 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98268 Not yet scored perf: Fix null pointer access in is_include_guest_event() Assigned by Linux
Oct 6, 2026 CVE-2026-98267 Not yet scored 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Assigned by Linux
Oct 6, 2026 CVE-2026-98266 Not yet scored ALSA: core: Fix potential UAF after asynchronous card release Assigned by Linux
Oct 6, 2026 CVE-2026-98265 Not yet scored ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity Assigned by Linux
Oct 6, 2026 CVE-2026-98264 Not yet scored ALSA: virtio: reset device before deleting virtqueues Assigned by Linux
Oct 6, 2026 CVE-2026-98263 Not yet scored ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type Assigned by Linux
Oct 6, 2026 CVE-2026-98262 Not yet scored ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Assigned by Linux
Oct 6, 2026 CVE-2026-98261 High 8.1 cifs: Fix server use-after-free in cifs_chan_skip_or_disable() Assigned by Linux
Oct 6, 2026 CVE-2026-98260 High 7.8 exec: Cleanup POSIX timers right after de_thread() Assigned by Linux
Oct 6, 2026 CVE-2026-98259 Not yet scored fs/dax: check zero or empty entry before converting xarray entry Assigned by Linux
Oct 6, 2026 CVE-2026-98258 High 7.8 posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Assigned by Linux
Oct 6, 2026 CVE-2026-98257 High 7.5 rds: ib: use rds_conn_drop() on protocol version mismatch Assigned by Linux
Oct 6, 2026 CVE-2026-98256 High 7.8 signal: Prevent exec() race Assigned by Linux
Oct 6, 2026 CVE-2026-98255 Not yet scored tcp: exclude old ACKs from tcp fast path Assigned by Linux
Oct 6, 2026 CVE-2026-98254 High 7.8 swiotlb: use the adjusted address for the highmem page lookup Assigned by Linux
Oct 6, 2026 CVE-2026-98253 High 7.8 RDMA/ucma: Serialize join and leave on copy_to_user failure Assigned by Linux
Oct 6, 2026 CVE-2026-98252 High 7.0 RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Assigned by Linux
Oct 6, 2026 CVE-2026-98251 High 7.8 openvswitch: avoid reallocating confirmed conntrack labels Assigned by Linux
Oct 6, 2026 CVE-2026-98250 Not yet scored nfsd: fix handling of NFSEXP_PNFS in the netlink codepath Assigned by Linux
Oct 6, 2026 CVE-2026-98249 Not yet scored arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc Assigned by Linux
Oct 6, 2026 CVE-2026-98248 Not yet scored arm64: percpu: Fix LSE operations on {8,16}-bit types Assigned by Linux
Oct 6, 2026 CVE-2026-98247 Not yet scored Bluetooth: hci_codec: validate vendor codec count length Assigned by Linux
Oct 6, 2026 CVE-2026-98246 Not yet scored Bluetooth: hci_sync: Serialize local codec list cleanup Assigned by Linux
Oct 6, 2026 CVE-2026-98245 Not yet scored btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() Assigned by Linux
Oct 6, 2026 CVE-2026-98244 Not yet scored btrfs: clear free space tree creation state on rebuild failure Assigned by Linux
Oct 6, 2026 CVE-2026-98243 High 7.1 dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 Assigned by Linux
Oct 6, 2026 CVE-2026-98242 Not yet scored dma-buf: Fix silent overflow for phys vec to sgt Assigned by Linux
Oct 6, 2026 CVE-2026-98241 High 7.8 ipv6: xfrm: use full sockets in local error paths Assigned by Linux
Oct 6, 2026 CVE-2026-98240 Not yet scored net: ip_tunnel: initialize `options_len` before referencing options Assigned by Linux
Oct 6, 2026 CVE-2026-98239 High 8.1 net: lan743x: fix RX checksum use-after-free Assigned by Linux
Oct 6, 2026 CVE-2026-98238 Not yet scored net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() Assigned by Linux
Oct 6, 2026 CVE-2026-98237 Not yet scored net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Assigned by Linux
Oct 6, 2026 CVE-2026-98236 Not yet scored net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Assigned by Linux
Oct 6, 2026 CVE-2026-98235 Not yet scored net/sched: act_api: release tail references on DELACTION failure Assigned by Linux
Oct 6, 2026 CVE-2026-98234 Not yet scored net/sched: hhf: cap hh_flows_limit at change time Assigned by Linux
Oct 6, 2026 CVE-2026-98233 Not yet scored net/packet: clear RX owner on VNET header error Assigned by Linux
Oct 6, 2026 CVE-2026-98232 Not yet scored scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() Assigned by Linux
Oct 6, 2026 CVE-2026-98231 Not yet scored xfrm: serialize state GC with device state flush Assigned by Linux
Oct 6, 2026 CVE-2026-98230 High 7.0 xfrm: use hlist_del_init_rcu for state_cache and state_cache_input Assigned by Linux
Oct 6, 2026 CVE-2026-98229 High 7.8 xfrm: save input state data before secpath resets Assigned by Linux
Oct 6, 2026 CVE-2026-98228 High 7.8 mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ Assigned by Linux
Oct 6, 2026 CVE-2026-98227 Not yet scored memstick: ms_block: destroy io_queue workqueue on removal Assigned by Linux
Oct 6, 2026 CVE-2026-98226 Not yet scored mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count Assigned by Linux
Oct 6, 2026 CVE-2026-98225 Not yet scored mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem Assigned by Linux
Oct 6, 2026 CVE-2026-98224 Not yet scored mm/vma: correctly unaccount on mmap_prepare() failure Assigned by Linux
Oct 6, 2026 CVE-2026-98223 Not yet scored mm: filemap: retain mapped dropbehind folios Assigned by Linux
Oct 6, 2026 CVE-2026-98222 Not yet scored KEYS: encrypted: fix integer overflow of datablob_len Assigned by Linux
Oct 6, 2026 CVE-2026-98221 Not yet scored KEYS: trusted: Fix tpm2_load_cmd() boundary check Assigned by Linux
Oct 6, 2026 CVE-2026-98220 Not yet scored sched_ext: Fix NULL sched deref in kfunc sub-sched error paths Assigned by Linux
Oct 6, 2026 CVE-2026-98219 Not yet scored sched_ext: Close the pre-enable ops error claim window Assigned by Linux
Oct 6, 2026
Previous Page 13 of 144 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
