CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 23:00 UTC )
This week: 5,230 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,230 Show in the list Critical, last 7 days 344 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98076 Not yet scored tracing/probes: Fix use-after-free on field name/type of events with multiple probes Assigned by Linux
Sep 25, 2026 CVE-2026-98075 Not yet scored bpf: reject BPF_PSEUDO_FUNC reference to the main program Assigned by Linux
Sep 25, 2026 CVE-2026-98074 Not yet scored bonding: do not clear curr_active_slave prematurely when releasing all slaves Assigned by Linux
Sep 25, 2026 CVE-2026-98073 High 7.8 net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). Assigned by Linux
Sep 25, 2026 CVE-2026-98072 Not yet scored net/rds: use wq_has_sleeper() in release_in_xmit() Assigned by Linux
Sep 25, 2026 CVE-2026-98071 Not yet scored net/rds: clear cp_flags bits individually in rds_conn_path_reset() Assigned by Linux
Sep 25, 2026 CVE-2026-98070 High 8.1 net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() Assigned by Linux
Sep 25, 2026 CVE-2026-98069 High 8.1 net/rds: acquire the fastpath locks in rds_conn_shutdown() Assigned by Linux
Sep 25, 2026 CVE-2026-98068 Not yet scored net/rds: don't let rds_conn_shutdown() consume a concurrent drop Assigned by Linux
Sep 25, 2026 CVE-2026-98067 Not yet scored erofs: disable LZ4 rolling decompression for now Assigned by Linux
Sep 25, 2026 CVE-2026-98066 Not yet scored ALSA: caiaq: Fix potential double-free at error path Assigned by Linux
Sep 25, 2026 CVE-2026-98065 Not yet scored bpf: Reject key-less BTF for hash maps Assigned by Linux
Sep 25, 2026 CVE-2026-98064 Not yet scored bpf: Fix NULL-ptr-deref when showing a void BTF type Assigned by Linux
Sep 25, 2026 CVE-2026-98063 Not yet scored bpf: Fix NULL-ptr-deref in btf_var_show() Assigned by Linux
Sep 25, 2026 CVE-2026-98062 Medium 5.5 bpf: Mark signal tracepoint siginfo arguments as scalar Assigned by Linux
Sep 25, 2026 CVE-2026-98061 Not yet scored bpf: Reject tail calls directly from callback frames Assigned by Linux
Sep 25, 2026 CVE-2026-98060 Not yet scored bpf: Reject resilient lock operations in rbtree callbacks Assigned by Linux
Sep 25, 2026 CVE-2026-98059 Not yet scored bpf: Mark sched_process_wait argument as nullable Assigned by Linux
Sep 25, 2026 CVE-2026-98058 Not yet scored bpf: Mark syscall helpers as sleepable Assigned by Linux
Sep 25, 2026 CVE-2026-98057 Not yet scored ring-buffer: Add checking nr_subbufs to persistent ring buffer validation Assigned by Linux
Sep 25, 2026 CVE-2026-98056 High 7.5 nvme: remove stale namespaces by NSID range during scan Assigned by Linux
Sep 25, 2026 CVE-2026-98055 Not yet scored ASoC: Intel: avs: Clean up the bus when fetching ML caps fails Assigned by Linux
Sep 25, 2026 CVE-2026-98054 Medium 5.5 ASoC: Intel: avs: Fix unbalanced module reference count Assigned by Linux
Sep 25, 2026 CVE-2026-98053 Medium 5.5 ASoC: Intel: avs: Refactor and fix init_config access Assigned by Linux
Sep 25, 2026 CVE-2026-98052 High 7.8 net: bcmasp: clear txcb->last before writing each descriptor Assigned by Linux
Sep 25, 2026 CVE-2026-98051 Medium 5.5 net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times Assigned by Linux
Sep 25, 2026 CVE-2026-98050 High 7.5 mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context Assigned by Linux
Sep 25, 2026 CVE-2026-98049 Medium 5.5 bpf: zero extend the result of an arena 32-bit cmpxchg Assigned by Linux
Sep 25, 2026 CVE-2026-98048 Not yet scored bpf: don't rewrite bpf_fastcall patterns entered by a jump Assigned by Linux
Sep 25, 2026 CVE-2026-98047 Not yet scored bpf: Check ancestor frames for rbtree callbacks Assigned by Linux
Sep 25, 2026 CVE-2026-98046 Not yet scored bpf: Mark bpf_btf_find_by_name_kind() as sleepable Assigned by Linux
Sep 25, 2026 CVE-2026-98045 Not yet scored bpf: Mark faultable stack helpers as sleepable Assigned by Linux
Sep 25, 2026 CVE-2026-98044 Not yet scored bpf: Reject legacy packet loads from callbacks Assigned by Linux
Sep 25, 2026 CVE-2026-98043 Not yet scored bpf: Don't infer non-NULL from a pointer with an unbounded offset Assigned by Linux
Sep 25, 2026 CVE-2026-98042 Not yet scored bpf: Don't resurrect a scalar id dropped by collect_linked_regs() Assigned by Linux
Sep 25, 2026 CVE-2026-98041 High 7.0 bpf: Don't predict JMP32 pointer vs zero comparisons Assigned by Linux
Sep 25, 2026 CVE-2026-98040 Not yet scored bpf: Mark the zero register precise for a register-form NULL check Assigned by Linux
Sep 25, 2026 CVE-2026-98039 Not yet scored bpf: Require MEM_PERCPU for percpu kptr stores Assigned by Linux
Sep 25, 2026 CVE-2026-98038 Not yet scored bpf: Keep refcount_acquire nullable for borrowed RCU kptrs Assigned by Linux
Sep 25, 2026 CVE-2026-98037 Not yet scored bpf: Reject untrusted allocated-object pointers Assigned by Linux
Sep 25, 2026 CVE-2026-98036 Not yet scored bpf: Preserve special fields in recycled rhtab elements Assigned by Linux
Sep 25, 2026 CVE-2026-98035 Not yet scored bpf: Cancel special fields when recycling rhtab elements Assigned by Linux
Sep 25, 2026 CVE-2026-98034 Not yet scored bpf: Mark NULL kptr stores precise Assigned by Linux
Sep 25, 2026 CVE-2026-98033 Not yet scored bpf: Preserve inner map identity in callback frames Assigned by Linux
Sep 25, 2026 CVE-2026-98032 Not yet scored tracing: Fix subbuf resize races with trace_pipe_raw readers Assigned by Linux
Sep 25, 2026 CVE-2026-98031 Not yet scored nexthop: Initialize extack in remove_nh_grp_entry() Assigned by Linux
Sep 25, 2026 CVE-2026-98030 High 7.0 net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size Assigned by Linux
Sep 25, 2026 CVE-2026-98029 High 7.0 eth: nfp: bound the ntuple rule dump by the caller's buffer size Assigned by Linux
Sep 25, 2026 CVE-2026-98028 Not yet scored eth: nfp: drop the replaced rule from the list when reprogramming fails Assigned by Linux
Sep 25, 2026 CVE-2026-98027 High 7.0 net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size Assigned by Linux
Sep 25, 2026
Previous Page 17 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
