CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 23:40 UTC )
This week: 5,218 CVEs published, 343 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,218 Show in the list Critical, last 7 days 343 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98026 Not yet scored net: bridge: mcast: properly convert mglist to rcu Assigned by Linux
Sep 25, 2026 CVE-2026-98025 Not yet scored net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow Assigned by Linux
Sep 25, 2026 CVE-2026-98024 Not yet scored s390/ism: folio_put() after error Assigned by Linux
Sep 25, 2026 CVE-2026-98023 High 7.8 vxlan: reject dynamic fdb entries that reference a nexthop id Assigned by Linux
Sep 25, 2026 CVE-2026-98022 Not yet scored net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Assigned by Linux
Sep 25, 2026 CVE-2026-98021 Not yet scored net: reject oversized tx_queue_len at netlink parse time Assigned by Linux
Sep 25, 2026 CVE-2026-98020 Not yet scored pds_core: fix cmd_regs access racing BAR unmap on reset Assigned by Linux
Sep 25, 2026 CVE-2026-98019 Not yet scored bpf: mark a NULL call argument precise Assigned by Linux
Sep 25, 2026 CVE-2026-98018 Not yet scored net: mctp: i3c: serialize probe with bus removal Assigned by Linux
Sep 25, 2026 CVE-2026-98017 High 7.8 net/sched: defer qdisc freeing after failed creation Assigned by Linux
Sep 25, 2026 CVE-2026-98016 Not yet scored net/mlx5e: Fix use-after-free race in sample_restore_put() Assigned by Linux
Sep 25, 2026 CVE-2026-98015 Not yet scored net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put Assigned by Linux
Sep 25, 2026 CVE-2026-98014 Not yet scored net/mlx5: E-Switch, prevent mc_list repopulation during vport disable Assigned by Linux
Sep 25, 2026 CVE-2026-98013 Not yet scored net/sched: fq_pie: clamp quantum in change path Assigned by Linux
Sep 25, 2026 CVE-2026-98012 Not yet scored net/sched: sfq: clamp quantum in change path Assigned by Linux
Sep 25, 2026 CVE-2026-98011 Not yet scored net/sched: hhf: clamp quantum in change and init paths Assigned by Linux
Sep 25, 2026 CVE-2026-98010 Not yet scored net/sched: drr: clamp quantum in change class Assigned by Linux
Sep 25, 2026 CVE-2026-98009 Not yet scored net/sched: ets: clamp quantum in parse and fallback paths Assigned by Linux
Sep 25, 2026 CVE-2026-98008 Not yet scored net: macb: fix NULL pointer dereference on unbind with fixed-link Assigned by Linux
Sep 25, 2026 CVE-2026-98007 Not yet scored bpf: Reject non-scalar bpf_loop iteration counts Assigned by Linux
Sep 25, 2026 CVE-2026-98006 Not yet scored ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev Assigned by Linux
Sep 25, 2026 CVE-2026-98005 Not yet scored erofs: delimit inode_share cache key components Assigned by Linux
Sep 25, 2026 CVE-2026-98004 Not yet scored iommu/riscv: Serialize command queue publishing Assigned by Linux
Sep 25, 2026 CVE-2026-98003 Not yet scored iommu/amd: Do not reallocate GA log buffers on resume Assigned by Linux
Sep 25, 2026 CVE-2026-98002 High 7.8 iommu/amd: Fix ineffective error check in nested domain allocation Assigned by Linux
Sep 25, 2026 CVE-2026-98001 Not yet scored hwmon: (ltc4282) Make sure clk_init_data is fully initialized Assigned by Linux
Sep 25, 2026 CVE-2026-98000 Not yet scored hwmon: Fix potential UAF in pec_store Assigned by Linux
Sep 25, 2026 CVE-2026-97998 Not yet scored netfilter: nfnetlink_log: cope with concurrent instance destruction Assigned by Linux
Sep 25, 2026 CVE-2026-97997 Not yet scored virtio_ring: fix stale descriptor flags after a failed packed add Assigned by Linux
Sep 25, 2026 CVE-2026-97996 Not yet scored virtio: fix use-after-free in unregister_virtio_device() Assigned by Linux
Sep 25, 2026 CVE-2026-97995 Not yet scored virtio_console: do not free control-out buffers on remove Assigned by Linux
Sep 25, 2026 CVE-2026-97994 Not yet scored vhost/vdpa: reject VRING_NUM larger than device max Assigned by Linux
Sep 25, 2026 CVE-2026-97993 Not yet scored vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx Assigned by Linux
Sep 25, 2026 CVE-2026-97992 Not yet scored vhost-vdpa: protect config_ctx from being freed under the config callback Assigned by Linux
Sep 25, 2026 CVE-2026-97991 High 7.8 vdpa_sim_blk: reject out-of-range sector starts Assigned by Linux
Sep 25, 2026 CVE-2026-97990 High 7.5 vdpa_sim_net: check TX pull result before RX copy Assigned by Linux
Sep 25, 2026 CVE-2026-97989 Not yet scored vduse: validate virtqueue alignment Assigned by Linux
Sep 25, 2026 CVE-2026-97988 Not yet scored vhost: invalidate vring access on IOTLB transitions Assigned by Linux
Sep 25, 2026 CVE-2026-97987 Not yet scored virtio_input: reset device if input_register_device() fails Assigned by Linux
Sep 25, 2026 CVE-2026-97986 Not yet scored virtio_input: stop callbacks before unregistering input device Assigned by Linux
Sep 25, 2026 CVE-2026-97985 Not yet scored af_unix: Update last skb marker in manage_oob(). Assigned by Linux
Sep 25, 2026 CVE-2026-97984 Not yet scored net: ipv6: Fix UDP length overflow with PMTU discover and big MTU Assigned by Linux
Sep 25, 2026 CVE-2026-97983 Not yet scored vduse: return compat ioctl results directly Assigned by Linux
Sep 25, 2026 CVE-2026-97982 Not yet scored net: ethernet: cortina: Fix budget accounting Assigned by Linux
Sep 25, 2026 CVE-2026-97981 Not yet scored net: ethernet: cortina: Count dropped frames as NAPI work Assigned by Linux
Sep 25, 2026 CVE-2026-97980 Not yet scored s390/debug: Fix NULL pointer dereference in debug_set_level() Assigned by Linux
Sep 25, 2026 CVE-2026-97979 Not yet scored ice: add missing xa_destroy for sched_node_ids Assigned by Linux
Sep 25, 2026 CVE-2026-97978 Not yet scored eth: ice: don't dereference pointers from TP_printk() Assigned by Linux
Sep 25, 2026 CVE-2026-97977 Not yet scored Bluetooth: btusb: Fix UAF of btusb_data by rx_work Assigned by Linux
Sep 25, 2026 CVE-2026-97976 Not yet scored Bluetooth: btintel_pcie: validate packet_len before skb_put_data Assigned by Linux
Sep 25, 2026
Previous Page 18 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
