CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 01:00 UTC )
This week: 5,171 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,171 Show in the list Critical, last 7 days 329 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-97925 Not yet scored tick/broadcast: Plug clockevents replacement race Assigned by Linux
Sep 25, 2026 CVE-2026-97924 Not yet scored tracing/user_events: Don't destroy fields when event removal fails Assigned by Linux
Sep 25, 2026 CVE-2026-97923 Not yet scored tracing: Free histogram the var ref when its initialization fails Assigned by Linux
Sep 25, 2026 CVE-2026-97922 Not yet scored tracing: Free histogram var refs regardless of how often they are referenced Assigned by Linux
Sep 25, 2026 CVE-2026-97921 Not yet scored tracing: Free histogram the field rejected for a bad modifier Assigned by Linux
Sep 25, 2026 CVE-2026-97920 Not yet scored tracing: Keep the entry count when the histogram stats allocation fails Assigned by Linux
Sep 25, 2026 CVE-2026-97919 Not yet scored tracing: Take the reference before publishing the named histogram trigger Assigned by Linux
Sep 25, 2026 CVE-2026-97918 Not yet scored tracing: Undo the registration when enabling the histogram trigger fails Assigned by Linux
Sep 25, 2026 CVE-2026-97917 Not yet scored accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Assigned by Linux
Sep 25, 2026 CVE-2026-97916 Not yet scored accel/ivpu: Validate firmware log buffer metadata Assigned by Linux
Sep 25, 2026 CVE-2026-97915 Not yet scored accel/ivpu: Limit firmware log name prints to field size Assigned by Linux
Sep 25, 2026 CVE-2026-97914 Not yet scored accel: ethosu: Fix ethosu_job_open() return value Assigned by Linux
Sep 25, 2026 CVE-2026-97913 Not yet scored accel: ethosu: Ensure cmd stream ends with a stop op Assigned by Linux
Sep 25, 2026 CVE-2026-97912 Not yet scored accel: ethosu: Ensure SRAM size is 0 on mapping failure Assigned by Linux
Sep 25, 2026 CVE-2026-97911 High 7.8 accel: ethosu: Ensure SRAM region size matches job Assigned by Linux
Sep 25, 2026 CVE-2026-97910 High 7.8 ASoC: sprd: validate compress buffer sizes against fixed allocations Assigned by Linux
Sep 25, 2026 CVE-2026-97909 Not yet scored ASoC: sti: initialize IRQ lock before requesting IRQ Assigned by Linux
Sep 25, 2026 CVE-2026-97908 Not yet scored Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev Assigned by Linux
Sep 25, 2026 CVE-2026-97907 Not yet scored Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 Assigned by Linux
Sep 25, 2026 CVE-2026-97906 Not yet scored bootconfig: Fix integer overflow in initrd size check Assigned by Linux
Sep 25, 2026 CVE-2026-97905 Not yet scored cpufreq: zero-initialize policy cpumask before sysfs publication Assigned by Linux
Sep 25, 2026 CVE-2026-97904 Not yet scored cpufreq: initialize policy rwsem before sysfs publication Assigned by Linux
Sep 25, 2026 CVE-2026-97903 High 7.8 exit: hold a reference to thread_pid across proc_flush_pid Assigned by Linux
Sep 25, 2026 CVE-2026-97902 Not yet scored fs: don't return -EINVAL for successful nested thaw Assigned by Linux
Sep 25, 2026 CVE-2026-97901 Not yet scored genetlink: pin family module during policy dump Assigned by Linux
Sep 25, 2026 CVE-2026-97900 Not yet scored drm/drm_exec: fix up contended obj when num_objects is 0 Assigned by Linux
Sep 25, 2026 CVE-2026-97899 Not yet scored drm/i915: Fix memory leak in query_perf_config_list() Assigned by Linux
Sep 25, 2026 CVE-2026-97621 Not yet scored drm/rockchip: analogix_dp: fix unchecked bound endpoint name length Assigned by Linux
Sep 25, 2026 CVE-2026-97620 Not yet scored drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches Assigned by Linux
Sep 25, 2026 CVE-2026-97619 Not yet scored io_uring/rw: end write accounting from ->ki_complete Assigned by Linux
Sep 25, 2026 CVE-2026-97618 Not yet scored io_uring/net: don't overconsume buffers when using MSG_TRUNC Assigned by Linux
Sep 25, 2026 CVE-2026-97617 Not yet scored ring-buffer: Check resize_disabled before publishing the new subbuf order Assigned by Linux
Sep 25, 2026 CVE-2026-97616 Not yet scored net/sched: act_api: release all action references on NEWACTION failure Assigned by Linux
Sep 25, 2026 CVE-2026-97615 Not yet scored net: bridge: use option bits for CFM/MRP frame handlers Assigned by Linux
Sep 25, 2026 CVE-2026-97614 Not yet scored net: dsa: tag_brcm: legacy FCS: request needed tailroom Assigned by Linux
Sep 25, 2026 CVE-2026-97613 Not yet scored net: mana: Reserve extra CQ slot for the fence completion CQE Assigned by Linux
Sep 25, 2026 CVE-2026-97612 High 7.8 net: mpls: clear inner_protocol when the last label is popped Assigned by Linux
Sep 25, 2026 CVE-2026-97611 High 7.8 net: openvswitch: fix use-after-free of the flow table mask array Assigned by Linux
Sep 25, 2026 CVE-2026-97610 Not yet scored netfs: Fix uninitialized return value in netfs_unbuffered_write() Assigned by Linux
Sep 25, 2026 CVE-2026-97609 High 7.0 netfilter: cttimeout: prevent UAF during module unload Assigned by Linux
Sep 25, 2026 CVE-2026-97608 High 7.0 netfilter: nf_log: unregister loggers before per-net teardown Assigned by Linux
Sep 25, 2026 CVE-2026-97607 Not yet scored vdpa: ifcvf: Put device on unsupported feature error Assigned by Linux
Sep 25, 2026 CVE-2026-97606 Not yet scored fs: autofs: fix memory leak in autofs_fill_super() Assigned by Linux
Sep 25, 2026 CVE-2026-97605 Not yet scored erofs: preserve LZMA decoders on resize failure Assigned by Linux
Sep 25, 2026 CVE-2026-97604 Not yet scored fbdev: vfb: defer cleanup until the last reference Assigned by Linux
Sep 25, 2026 CVE-2026-97603 Not yet scored idpf: disable DIM work before freeing q_vectors Assigned by Linux
Sep 25, 2026 CVE-2026-97602 High 7.8 inet: frags: invalidate queues before flushing them Assigned by Linux
Sep 25, 2026 CVE-2026-97601 Not yet scored ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink Assigned by Linux
Sep 25, 2026 CVE-2026-97600 Not yet scored ieee802154: cc2520: fix FIFOP work use-after-free Assigned by Linux
Sep 25, 2026 CVE-2026-97599 Not yet scored ieee802154: hwsim: serialize pib updates to fix double-free Assigned by Linux
Sep 25, 2026
Previous Page 20 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
