CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 21:00 UTC )
This week: 5,322 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,322 Show in the list Critical, last 7 days 344 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98218 Not yet scored i2c: atr: fix dangling adapter pointer on add failure Assigned by Linux
Oct 6, 2026 CVE-2026-98217 Not yet scored IB/mlx4: Fix use-after-free on pkey sysfs registration failure Assigned by Linux
Oct 6, 2026 CVE-2026-98216 High 7.1 IB/hfi1: Fix the PIO_CRED credit-return mmap Assigned by Linux
Oct 6, 2026 CVE-2026-98215 Not yet scored selinux: preserve user SID across nested backing files Assigned by Linux
Oct 6, 2026 CVE-2026-98214 Not yet scored selinux: recheck intermediate backing files on mprotect() Assigned by Linux
Oct 6, 2026 CVE-2026-98213 Not yet scored mmc: core: Cancel SDIO IRQ work before freeing host Assigned by Linux
Oct 6, 2026 CVE-2026-98212 Not yet scored mmc: hsq: Fix use-after-free in retry work Assigned by Linux
Oct 6, 2026 CVE-2026-98211 Not yet scored mmc: mmci: Fix use-after-free in busy-timeout work Assigned by Linux
Oct 6, 2026 CVE-2026-98210 Not yet scored mmc: mxcmmc: cancel data work and watchdog on remove Assigned by Linux
Oct 6, 2026 CVE-2026-98209 Not yet scored mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Assigned by Linux
Oct 6, 2026 CVE-2026-98208 Not yet scored mmc: sdio_uart: fix xmit_fifo leak when the port table is full Assigned by Linux
Oct 6, 2026 CVE-2026-98207 Not yet scored mmc: spi: reset bytes_xfered before retrying CRC failures Assigned by Linux
Oct 6, 2026 CVE-2026-98206 Not yet scored Input: cyttsp5 - clamp the HID report size before memcpy Assigned by Linux
Oct 6, 2026 CVE-2026-98205 Not yet scored Input: evdev - zero absinfo before partial copy in EVIOCSABS Assigned by Linux
Oct 6, 2026 CVE-2026-98204 Not yet scored Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Assigned by Linux
Oct 6, 2026 CVE-2026-98203 Not yet scored Input: soc_button_array - check btns_desc->package.count Assigned by Linux
Oct 6, 2026 CVE-2026-98202 Not yet scored Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Assigned by Linux
Oct 6, 2026 CVE-2026-98201 Not yet scored Input: zero ff_effect before compat copy in input_ff_effect_from_user Assigned by Linux
Oct 6, 2026 CVE-2026-98200 Not yet scored hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() Assigned by Linux
Oct 6, 2026 CVE-2026-98199 Not yet scored hwmon: (pmbus/core) increase number of phases and add new mask Assigned by Linux
Oct 6, 2026 CVE-2026-98198 Not yet scored hwmon: (pwm-fan) Stop RPM timer before freeing tach data Assigned by Linux
Oct 6, 2026 CVE-2026-98197 High 7.0 hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Assigned by Linux
Oct 6, 2026 CVE-2026-98196 Not yet scored wifi: brcmsmac: fix UAF in brcms_free_timer() Assigned by Linux
Oct 6, 2026 CVE-2026-98195 Not yet scored wifi: iwlegacy: fix broadcast stations deallocation Assigned by Linux
Oct 6, 2026 CVE-2026-98194 Not yet scored wifi: libertas_tf: fix UAF in lbtf_free_adapter() Assigned by Linux
Oct 6, 2026 CVE-2026-98193 Not yet scored wifi: libipw: reject TKIP frames without a full MIC Assigned by Linux
Oct 6, 2026 CVE-2026-98192 Not yet scored wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown Assigned by Linux
Oct 6, 2026 CVE-2026-98191 Not yet scored wifi: wlcore: release runtime PM ref on regdomain config failure Assigned by Linux
Oct 6, 2026 CVE-2026-98190 Not yet scored wifi: wilc1000: fix out-of-bounds read in P2P public action frames Assigned by Linux
Oct 6, 2026 CVE-2026-98189 Not yet scored wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Assigned by Linux
Oct 6, 2026 CVE-2026-98188 Not yet scored wifi: p54: validate curve data length in the calibration curve converters Assigned by Linux
Oct 6, 2026 CVE-2026-98187 Not yet scored wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Assigned by Linux
Oct 6, 2026 CVE-2026-98186 Not yet scored wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Assigned by Linux
Oct 6, 2026 CVE-2026-98185 Not yet scored wifi: mwifiex: validate scan response extents Assigned by Linux
Oct 6, 2026 CVE-2026-98184 Not yet scored wifi: mwifiex: prevent authentication frame length truncation Assigned by Linux
Oct 6, 2026 CVE-2026-98183 Not yet scored wifi: mac80211: avoid out-of-bounds read for empty PREQ elements Assigned by Linux
Oct 6, 2026 CVE-2026-98182 Not yet scored wifi: mac80211: refuse to make a monitor active when it has no queue Assigned by Linux
Oct 6, 2026 CVE-2026-98181 Not yet scored drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Assigned by Linux
Oct 6, 2026 CVE-2026-98180 High 7.1 drm/msm: RCU-free the scheduler-containing ring and VM objects Assigned by Linux
Oct 6, 2026 CVE-2026-98179 Not yet scored drm/amdgpu: fix rmmio iounmap skipped on device removal Assigned by Linux
Oct 6, 2026 CVE-2026-98178 Not yet scored drm/amdgpu: Skip KFD mapping clear before initialization Assigned by Linux
Oct 6, 2026 CVE-2026-98177 Not yet scored drm/amdkfd: Avoid integer underflow in EOP ring size calculation. Assigned by Linux
Oct 6, 2026 CVE-2026-98176 Not yet scored drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc Assigned by Linux
Oct 6, 2026 CVE-2026-98175 High 7.5 smb: client: cancel reconnect work in clean_demultiplex_info() Assigned by Linux
Oct 6, 2026 CVE-2026-98174 High 7.5 smb: client: fix rlist race and missing initialization Assigned by Linux
Oct 6, 2026 CVE-2026-98173 High 7.5 smb: client: fix use-after-free of iface in cifs_try_adding_channels() Assigned by Linux
Oct 6, 2026 CVE-2026-98172 Not yet scored smb: client: fix smbd_connection leak on cifs_get_tcp_session() error Assigned by Linux
Oct 6, 2026 CVE-2026-98171 High 8.8 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Assigned by Linux
Oct 6, 2026 CVE-2026-98170 Not yet scored smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() Assigned by Linux
Oct 6, 2026 CVE-2026-98169 High 7.1 smb: client: fix potential OOB read in smb3_enum_snapshots() Assigned by Linux
Oct 6, 2026
Previous Page 14 of 144 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
