CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 21:40 UTC )
This week: 5,326 CVEs published, 345 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,326 Show in the list Critical, last 7 days 345 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98168 Not yet scored smb: client: fix reparse buffer bounds in cifs_query_reparse_point() Assigned by Linux
Oct 6, 2026 CVE-2026-98167 Not yet scored smb: client: fix server->total_read for compound encrypted PDUs Assigned by Linux
Oct 6, 2026 CVE-2026-98166 High 7.8 drm/ttm: fix swapped-out resources never leaving their bulk_move range Assigned by Linux
Oct 6, 2026 CVE-2026-98164 High 7.1 KVM: x86/mmu: Check write tracking in all address spaces Assigned by Linux
Sep 29, 2026 CVE-2026-98163 High 7.8 cgroup: Avoid iteration of dying tasks with zero refcount Assigned by Linux
Sep 26, 2026 CVE-2026-98162 Medium 5.5 smb/server: fix tree connection leak in smb2_tree_connect() Assigned by Linux
Sep 25, 2026 CVE-2026-98161 Medium 5.5 nvdimm: pmem: keep PREFLUSH before data writes Assigned by Linux
Sep 25, 2026 CVE-2026-98160 Medium 5.5 staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() Assigned by Linux
Sep 25, 2026 CVE-2026-100079 Medium 5.5 usb: typec: ucsi: unregister debugfs entries on teardown Assigned by Linux
Sep 25, 2026 CVE-2026-100078 Medium 5.5 wifi: iwlwifi: mei: pass correct argument to function Assigned by Linux
Sep 25, 2026 CVE-2026-100077 Medium 5.5 drm/msm: Recover HW before retire hung submit Assigned by Linux
Sep 25, 2026 CVE-2026-100076 Medium 5.5 staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths Assigned by Linux
Sep 25, 2026 CVE-2026-100075 Critical 9.8 RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters Assigned by Linux
Sep 25, 2026 CVE-2026-100074 Medium 5.5 bpf: Mark bpf_refcount field as unique Assigned by Linux
Sep 25, 2026 CVE-2026-100073 Not yet scored ext4: fix transaction overflow during writeback Assigned by Linux
Sep 25, 2026 CVE-2026-100072 Not yet scored ACPI: platform: Use acpi_bus_get_primary_device() Assigned by Linux
Sep 25, 2026 CVE-2026-100071 Not yet scored net: hsr: free learned nodes on device setup failure Assigned by Linux
Sep 25, 2026 CVE-2026-100070 Not yet scored netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet Assigned by Linux
Sep 25, 2026 CVE-2026-98159 Medium 5.5 wifi: mt76: mt7921: validate CLC firmware records Assigned by Linux
Sep 25, 2026 CVE-2026-98158 Not yet scored ppp_async: drop the errored frame instead of resetting its headroom Assigned by Linux
Sep 25, 2026 CVE-2026-98157 Not yet scored EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Assigned by Linux
Sep 25, 2026 CVE-2026-98156 High 7.8 drm/virtio: use the DMA API for resource backing on Xen Assigned by Linux
Sep 25, 2026 CVE-2026-98155 Not yet scored accel/qaic: Address potential out-of-bounds read in resp_worker() Assigned by Linux
Sep 25, 2026 CVE-2026-98154 High 7.0 nvme-rdma: fix -EIO cleanup order in queue_rq Assigned by Linux
Sep 25, 2026 CVE-2026-98153 Not yet scored nvme: fix racy access to FDP placement id array Assigned by Linux
Sep 25, 2026 CVE-2026-98152 Medium 5.5 nvmet-rdma: fix queue leak when connect backlog is exceeded Assigned by Linux
Sep 25, 2026 CVE-2026-98151 Not yet scored bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Assigned by Linux
Sep 25, 2026 CVE-2026-98150 High 7.0 bpf: Fix BPF_F_CPU validation for sparse CPU IDs Assigned by Linux
Sep 25, 2026 CVE-2026-98149 Not yet scored bpf: Fix percpu map update indexing with sparse CPU IDs Assigned by Linux
Sep 25, 2026 CVE-2026-98148 Not yet scored drm/gud: validate GUD_ROTATION_0 is present in supported rotations Assigned by Linux
Sep 25, 2026 CVE-2026-98147 Not yet scored printk: Don't WARN on kthread_run failure. Assigned by Linux
Sep 25, 2026 CVE-2026-98146 Not yet scored accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain Assigned by Linux
Sep 25, 2026 CVE-2026-98145 Not yet scored accel/amdxdna: reject a command chain that carries no commands Assigned by Linux
Sep 25, 2026 CVE-2026-98144 Not yet scored accel/amdxdna: put the chained BO when its mapping fails Assigned by Linux
Sep 25, 2026 CVE-2026-98143 High 7.8 accel: ethosu: Don't read the U65 rounding mode as a storage mode Assigned by Linux
Sep 25, 2026 CVE-2026-98142 Not yet scored drm/cirrus-qemu: Validate BAR0 size during probe Assigned by Linux
Sep 25, 2026 CVE-2026-98141 Not yet scored ntfs: propagate reparse index insertion failure Assigned by Linux
Sep 25, 2026 CVE-2026-98140 Not yet scored ntfs: fix kmap_local leak in write_mft_record_nolock() error paths Assigned by Linux
Sep 25, 2026 CVE-2026-98139 Medium 5.5 ntfs: only count successfully cleared runs when freeing clusters Assigned by Linux
Sep 25, 2026 CVE-2026-98138 Medium 5.5 ntfs: do not mark the volume clean in sync_fs when errors were recorded Assigned by Linux
Sep 25, 2026 CVE-2026-98137 Medium 5.5 ntfs: treat any nonzero dio zero-range return as an error Assigned by Linux
Sep 25, 2026 CVE-2026-98136 High 7.1 ntfs: bound $AttrDef table walk to the loaded table size Assigned by Linux
Sep 25, 2026 CVE-2026-98135 Medium 5.5 ntfs: reject invalid sectors_per_cluster in the boot sector Assigned by Linux
Sep 25, 2026 CVE-2026-98134 Medium 5.5 bpf: check_cond_jmp_op(): properly infer if register is null Assigned by Linux
Sep 25, 2026 CVE-2026-98133 Medium 5.5 ntfs: leave HasEA flag untouched on setxattr failure Assigned by Linux
Sep 25, 2026 CVE-2026-98132 Medium 5.5 bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO Assigned by Linux
Sep 25, 2026 CVE-2026-98131 Medium 5.5 net: stmmac: fix dma mapping leak in stmmac_tso_xmit() Assigned by Linux
Sep 25, 2026 CVE-2026-98130 High 8.1 sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Assigned by Linux
Sep 25, 2026 CVE-2026-98129 Not yet scored scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() Assigned by Linux
Sep 25, 2026 CVE-2026-98128 Not yet scored scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() Assigned by Linux
Sep 25, 2026
Previous Page 15 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
