CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 22:10 UTC )
This week: 5,335 CVEs published, 345 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,335 Show in the list Critical, last 7 days 345 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98127 Not yet scored smb/client: validate new EOF for insert range Assigned by Linux
Sep 25, 2026 CVE-2026-98126 Not yet scored smb/client: validate new EOF for zero range Assigned by Linux
Sep 25, 2026 CVE-2026-98125 Not yet scored smb/client: fix stale page cache in insert/collapse range Assigned by Linux
Sep 25, 2026 CVE-2026-98124 Not yet scored smb/client: invalidate fscache for fallocate range operations Assigned by Linux
Sep 25, 2026 CVE-2026-98123 Not yet scored sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration Assigned by Linux
Sep 25, 2026 CVE-2026-98122 High 7.8 vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() Assigned by Linux
Sep 25, 2026 CVE-2026-98121 Not yet scored watchdog: msc313e: Fix NULL pointer dereference in PM callbacks Assigned by Linux
Sep 25, 2026 CVE-2026-98120 Not yet scored netfs: Fix subreq ref leak Assigned by Linux
Sep 25, 2026 CVE-2026-98119 Not yet scored netfs: break unbuffered write when netfs_alloc_subrequest() fails Assigned by Linux
Sep 25, 2026 CVE-2026-98118 Not yet scored netfs: Fix readahead synchronisation issues by loading all folios upfront Assigned by Linux
Sep 25, 2026 CVE-2026-98117 Not yet scored cachefiles: Fix potential UAF/KASAN warning Assigned by Linux
Sep 25, 2026 CVE-2026-98116 High 7.8 ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF Assigned by Linux
Sep 25, 2026 CVE-2026-98115 High 8.8 ksmbd: safely drain sessions during logoff Assigned by Linux
Sep 25, 2026 CVE-2026-98114 Not yet scored ksmbd: propagate DACL parsing errors Assigned by Linux
Sep 25, 2026 CVE-2026-98113 Not yet scored ksmbd: rate limit unmapped SID errors Assigned by Linux
Sep 25, 2026 CVE-2026-98112 High 7.8 ksmbd: fix listener task lifetime on netdev events Assigned by Linux
Sep 25, 2026 CVE-2026-98111 Not yet scored Bluetooth: btintel: validate version TLV value lengths Assigned by Linux
Sep 25, 2026 CVE-2026-98110 Not yet scored Bluetooth: btintel: bound firmware ID by TLV length Assigned by Linux
Sep 25, 2026 CVE-2026-98109 Medium 4.7 Bluetooth: hci_core: Fix race condition during device registration Assigned by Linux
Sep 25, 2026 CVE-2026-98108 High 7.5 Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan Assigned by Linux
Sep 25, 2026 CVE-2026-98107 Not yet scored Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect Assigned by Linux
Sep 25, 2026 CVE-2026-98106 Not yet scored drm/pagemap: Prevent double migration of device pages Assigned by Linux
Sep 25, 2026 CVE-2026-98105 Not yet scored net: ethernet: oa_tc6: Improve the error recovery Assigned by Linux
Sep 25, 2026 CVE-2026-98104 Not yet scored net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted Assigned by Linux
Sep 25, 2026 CVE-2026-98103 Not yet scored igmp: convert struct ip_sf_list to RCU Assigned by Linux
Sep 25, 2026 CVE-2026-98102 Not yet scored ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() Assigned by Linux
Sep 25, 2026 CVE-2026-98101 Not yet scored ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() Assigned by Linux
Sep 25, 2026 CVE-2026-98099 Not yet scored ipv6: mcast: use rcu_assign_pointer() for __rcu list updates Assigned by Linux
Sep 25, 2026 CVE-2026-98098 Not yet scored tipc: fix NULL deref in tipc_named_node_up() on empty publication list Assigned by Linux
Sep 25, 2026 CVE-2026-98097 Not yet scored tipc: Dont send random pad bytes in RESET/ACTIVATE messages Assigned by Linux
Sep 25, 2026 CVE-2026-98096 High 7.4 ipv6: sr: restore network header before routing and forwarding Assigned by Linux
Sep 25, 2026 CVE-2026-98095 Not yet scored af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). Assigned by Linux
Sep 25, 2026 CVE-2026-98094 Not yet scored staging: fbtft: make dirty_lock IRQ-safe Assigned by Linux
Sep 25, 2026 CVE-2026-98093 Not yet scored ASoC: fsl_micfil: balance mclk enable/disable Assigned by Linux
Sep 25, 2026 CVE-2026-98092 Not yet scored ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() Assigned by Linux
Sep 25, 2026 CVE-2026-98091 Not yet scored btrfs: detach failed sprout device from transaction update list Assigned by Linux
Sep 25, 2026 CVE-2026-98090 Not yet scored btrfs: restore active device pointers after failed sprout Assigned by Linux
Sep 25, 2026 CVE-2026-98089 Not yet scored bonding: alb: fix uninitialized transport header access in alb_determine_nd() Assigned by Linux
Sep 25, 2026 CVE-2026-98088 Not yet scored scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() Assigned by Linux
Sep 25, 2026 CVE-2026-98087 Not yet scored sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate Assigned by Linux
Sep 25, 2026 CVE-2026-98086 Not yet scored ALSA: ump: do not touch legacy_rmidi before it exists Assigned by Linux
Sep 25, 2026 CVE-2026-98085 Not yet scored bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge Assigned by Linux
Sep 25, 2026 CVE-2026-98084 Not yet scored bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks Assigned by Linux
Sep 25, 2026 CVE-2026-98083 High 7.0 btrfs: fix transaction use-after-free in raid stripe insertion Assigned by Linux
Sep 25, 2026 CVE-2026-98082 Medium 5.5 btrfs: fix the possible bioc_list memory leak during error Assigned by Linux
Sep 25, 2026 CVE-2026-98081 Not yet scored btrfs: zoned: finish active block group cleanup if call_zone_finish() fails Assigned by Linux
Sep 25, 2026 CVE-2026-98080 Medium 5.5 btrfs: do not force reloc root creation during qgroup_account_snapshot() Assigned by Linux
Sep 25, 2026 CVE-2026-98079 Not yet scored btrfs: zstd: fix lost wakeup when waiting for a workspace Assigned by Linux
Sep 25, 2026 CVE-2026-98078 Medium 4.4 ipvs: fix reversed sequence option serialization Assigned by Linux
Sep 25, 2026 CVE-2026-98077 Not yet scored netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() Assigned by Linux
Sep 25, 2026
Previous Page 16 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
