CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:50 UTC )
This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98818 Not yet scored mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() Assigned by Linux
Oct 18, 2026 CVE-2026-98817 Not yet scored ASoC: SDCA: Add better pm_runtime error handling in func probe Assigned by Linux
Oct 18, 2026 CVE-2026-98816 Not yet scored bpf: Fix overflow of jump offset in constant blinding Assigned by Linux
Oct 18, 2026 CVE-2026-98815 Not yet scored nvme: fix cdev lifetime Assigned by Linux
Oct 18, 2026 CVE-2026-98814 Not yet scored nvme: fix command effects log lifetime for multipath heads Assigned by Linux
Oct 18, 2026 CVE-2026-98813 Not yet scored bpf: Hold map BTF for the memory allocator destructor record Assigned by Linux
Oct 18, 2026 CVE-2026-98812 Not yet scored net/mctp: publish the mctp_dev only after it is initialised Assigned by Linux
Oct 18, 2026 CVE-2026-98811 Not yet scored net/sched: cls_api: reclaim an empty proto on the error path Assigned by Linux
Oct 18, 2026 CVE-2026-98810 Not yet scored wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() Assigned by Linux
Oct 18, 2026 CVE-2026-98809 Not yet scored Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister Assigned by Linux
Oct 18, 2026 CVE-2026-98808 Not yet scored net: systemport: Fix buffer overflow in bcm_sysport_get_stats() Assigned by Linux
Oct 18, 2026 CVE-2026-98807 Not yet scored net/mlx5: Fix slab-out-of-bounds when handling team device events Assigned by Linux
Oct 18, 2026 CVE-2026-98806 Not yet scored octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Assigned by Linux
Oct 18, 2026 CVE-2026-98805 Not yet scored tipc: prevent GCM nonce reuse on peer key changes Assigned by Linux
Oct 18, 2026 CVE-2026-98804 Not yet scored net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() Assigned by Linux
Oct 18, 2026 CVE-2026-98803 Not yet scored net: stmmac: fix rx Scatter-Gather support Assigned by Linux
Oct 18, 2026 CVE-2026-98802 Not yet scored seg6: ensure packet data is writable before modifying SRH and IPv6 DA Assigned by Linux
Oct 18, 2026 CVE-2026-98801 Not yet scored net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Assigned by Linux
Oct 18, 2026 CVE-2026-98800 Not yet scored bpf: Wait for an RCU tasks grace period before freeing trampoline progs Assigned by Linux
Oct 18, 2026 CVE-2026-98799 Not yet scored bpf: Skip detached progs in trampoline images that are still in use Assigned by Linux
Oct 18, 2026 CVE-2026-98798 Not yet scored net: bcmgenet: fix NULL dereference in set_coalesce before first open Assigned by Linux
Oct 18, 2026 CVE-2026-98797 Not yet scored net: cap skb->queue_mapping when the tx queue is picked Assigned by Linux
Oct 18, 2026 CVE-2026-98796 Not yet scored net: ethernet: mtk_eth_soc: allocate dummy netdev sooner Assigned by Linux
Oct 18, 2026 CVE-2026-98795 Not yet scored net: sparx5: skip ptp deinit if init was skipped Assigned by Linux
Oct 18, 2026 CVE-2026-98794 Not yet scored ipvs: filter some flags received in the backup server Assigned by Linux
Oct 18, 2026 CVE-2026-98793 Not yet scored netfilter: bpf: reject invalid NAT manipulation types Assigned by Linux
Oct 18, 2026 CVE-2026-98792 Not yet scored netfilter: flowtable: generalize pending status bit Assigned by Linux
Oct 18, 2026 CVE-2026-98791 Not yet scored net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference Assigned by Linux
Oct 18, 2026 CVE-2026-98790 Not yet scored perf: Fix race between perf_event_exit_task() and perf_pending_task() Assigned by Linux
Oct 18, 2026 CVE-2026-98789 Not yet scored bpf: Fix objects stuck in free_by_rcu_ttrace Assigned by Linux
Oct 18, 2026 CVE-2026-98788 Not yet scored futex: Fix private hash use-after-free on resize Assigned by Linux
Oct 18, 2026 CVE-2026-98787 Not yet scored bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() Assigned by Linux
Oct 18, 2026 CVE-2026-98786 Not yet scored drm/amd/display: guard dc_sink dereferences in MST mode validation Assigned by Linux
Oct 18, 2026 CVE-2026-98785 Not yet scored drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend Assigned by Linux
Oct 18, 2026 CVE-2026-98784 Not yet scored drm/amdgpu/gfx6: fix firmware leak on teardown Assigned by Linux
Oct 18, 2026 CVE-2026-98783 Not yet scored drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device Assigned by Linux
Oct 18, 2026 CVE-2026-98782 Not yet scored drm/mediatek: Fix ovl adaptor platform device leak Assigned by Linux
Oct 18, 2026 CVE-2026-98781 Not yet scored drm/mediatek: Fix pdev reference leak in mtk_drm_bind() Assigned by Linux
Oct 18, 2026 CVE-2026-98780 Not yet scored drm/amdgpu: fix IP instance memory leak on kobject add failure Assigned by Linux
Oct 18, 2026 CVE-2026-98779 Not yet scored drm/amdgpu: fix ACP MFD device leak on init failure Assigned by Linux
Oct 18, 2026 CVE-2026-98778 Not yet scored binder: fix is_failure flag for superseded transaction cleanup Assigned by Linux
Oct 18, 2026 CVE-2026-98777 Not yet scored binder: fix leaked fd fixups on TF_UPDATE_TXN supersede Assigned by Linux
Oct 18, 2026 CVE-2026-98776 Not yet scored binderfs: fix UAF write in binder_add_device Assigned by Linux
Oct 18, 2026 CVE-2026-98775 Not yet scored nitro_enclaves: fix use-after-free on SLOT_ALLOC failure Assigned by Linux
Oct 18, 2026 CVE-2026-98774 Not yet scored rust_binder: cancel deferred work items in thread exit Assigned by Linux
Oct 18, 2026 CVE-2026-98773 Not yet scored USB: cdc-acm: skip URB restart in port_shutdown if disconnected Assigned by Linux
Oct 18, 2026 CVE-2026-98772 Not yet scored USB: serial: fix port tear down use-after-free Assigned by Linux
Oct 18, 2026 CVE-2026-98771 Not yet scored usb: storage: sierra_ms: reject short SWoC info transfers Assigned by Linux
Oct 18, 2026 CVE-2026-98770 Not yet scored usb: gadget: midi2: Fix the jack descriptor array sizes Assigned by Linux
Oct 18, 2026 CVE-2026-98769 Not yet scored usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd Assigned by Linux
Oct 18, 2026
Previous Page 2 of 137 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
