CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 01:40 UTC )
This week: 5,214 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,214 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-97598 Not yet scored ipv4: fib: bound automatic table ID allocation Assigned by Linux
Sep 25, 2026 CVE-2026-97597 Not yet scored ipv6: flowlabel: cap duplicate leases per socket Assigned by Linux
Sep 25, 2026 CVE-2026-97596 Not yet scored ipvs: reject invalid states in connection template sync records Assigned by Linux
Sep 25, 2026 CVE-2026-97595 High 7.5 mac802154: fix use-after-free of sdata via queued RX frames Assigned by Linux
Sep 25, 2026 CVE-2026-97594 High 7.8 landlock: Fix use-after-free of the source's parent directory Assigned by Linux
Sep 25, 2026 CVE-2026-97593 Not yet scored iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX Assigned by Linux
Sep 25, 2026 CVE-2026-97592 Not yet scored s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm Assigned by Linux
Sep 25, 2026 CVE-2026-97591 Not yet scored s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine Assigned by Linux
Sep 25, 2026 CVE-2026-97590 Not yet scored s390/crypto: Fix missing scrub of temp buffers with PAES algorithm Assigned by Linux
Sep 25, 2026 CVE-2026-97589 High 7.0 s390/crypto: Fix wrong return code to engine in asynch callbacks Assigned by Linux
Sep 25, 2026 CVE-2026-97588 Not yet scored s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly Assigned by Linux
Sep 25, 2026 CVE-2026-97587 Not yet scored perf: RISC-V: store available counter mask as bitmap Assigned by Linux
Sep 25, 2026 CVE-2026-97586 Not yet scored afs: Fix missing kunmap in afs_dir_search_bucket() Assigned by Linux
Sep 25, 2026 CVE-2026-97585 Not yet scored afs: Fix double-unmap of directory block Assigned by Linux
Sep 25, 2026 CVE-2026-97584 High 7.8 afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Assigned by Linux
Sep 25, 2026 CVE-2026-97583 High 7.5 afs: Clear stale peer app data after address list changes Assigned by Linux
Sep 25, 2026 CVE-2026-97582 Not yet scored hwmon: (gpio-fan) Fix use-after-free in alarm work Assigned by Linux
Sep 25, 2026 CVE-2026-97581 Not yet scored media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity Assigned by Linux
Sep 25, 2026 CVE-2026-97580 High 7.8 media: rkvdec: bound HEVC tile loops and PPS id to the array capacity Assigned by Linux
Sep 25, 2026 CVE-2026-97579 High 7.8 media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity Assigned by Linux
Sep 25, 2026 CVE-2026-97578 High 7.8 media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer Assigned by Linux
Sep 25, 2026 CVE-2026-97577 High 7.8 media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity Assigned by Linux
Sep 25, 2026 CVE-2026-97576 High 7.8 media: v4l2-ctrls: validate HEVC tile counts Assigned by Linux
Sep 25, 2026 CVE-2026-97575 High 7.8 media: v4l2-ctrls: validate AV1 tile counts Assigned by Linux
Sep 25, 2026 CVE-2026-97574 Not yet scored bnxt_en: Don't free the live ring's TPA state on queue restart failure Assigned by Linux
Sep 25, 2026 CVE-2026-97573 High 8.1 bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() Assigned by Linux
Sep 25, 2026 CVE-2026-97572 Not yet scored bnxt_en: Propagate RX ring init failures in bnxt_init_nic() Assigned by Linux
Sep 25, 2026 CVE-2026-97571 Not yet scored bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() Assigned by Linux
Sep 25, 2026 CVE-2026-97570 High 8.1 bnxt_en: Bound SW TPA IDs to prevent crashes Assigned by Linux
Sep 25, 2026 CVE-2026-97569 Not yet scored bnxt_en: Prevent queue stop with deferred completions Assigned by Linux
Sep 25, 2026 CVE-2026-97568 Not yet scored mptcp: syncookies: remember the request backup flag Assigned by Linux
Sep 25, 2026 CVE-2026-97567 Not yet scored mptcp: prevent race between disconnect() and rtx Assigned by Linux
Sep 25, 2026 CVE-2026-97566 Not yet scored mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 Assigned by Linux
Sep 25, 2026 CVE-2026-97565 Not yet scored smb: client: reject short READ responses in CIFSSMBRead() Assigned by Linux
Sep 25, 2026 CVE-2026-97564 Not yet scored smb: client: reject userspace cifs.idmap descriptions Assigned by Linux
Sep 25, 2026 CVE-2026-97563 Not yet scored smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() Assigned by Linux
Sep 25, 2026 CVE-2026-97562 High 7.5 smb: client: pin DFS superblock in iterator callback Assigned by Linux
Sep 25, 2026 CVE-2026-97561 Not yet scored smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid Assigned by Linux
Sep 25, 2026 CVE-2026-97560 Not yet scored smb: client: fix one-byte OOB read in smb2_parse_native_symlink() Assigned by Linux
Sep 25, 2026 CVE-2026-97559 Not yet scored smb: client: fail DACL rewrite when the new DACL exceeds 64K Assigned by Linux
Sep 25, 2026 CVE-2026-97558 Not yet scored smb: client: fix cifsFileInfo reference leak in deferred close Assigned by Linux
Sep 25, 2026 CVE-2026-97557 High 7.5 smb: client: avoid leaking refcount in cifs_queue_oplock_break() Assigned by Linux
Sep 25, 2026 CVE-2026-97556 Not yet scored smb: client: avoid leaking refcount when cifs_sb_tlink() fails Assigned by Linux
Sep 25, 2026 CVE-2026-97555 High 8.8 smb: client: fix heap overflow in DACL owner/group rewrite Assigned by Linux
Sep 25, 2026 CVE-2026-97554 Not yet scored smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() Assigned by Linux
Sep 25, 2026 CVE-2026-97553 Not yet scored xfs: lock the healthmon when inserting unmount event Assigned by Linux
Sep 25, 2026 CVE-2026-97552 Not yet scored xfs: initialise error in xfs_defer_finish_one() Assigned by Linux
Sep 25, 2026 CVE-2026-97551 Not yet scored xfs: initialise args->total for parent pointer updates Assigned by Linux
Sep 25, 2026 CVE-2026-97550 Not yet scored xfs: fix unit conversions in per_binval computation Assigned by Linux
Sep 25, 2026 CVE-2026-97549 Not yet scored xfs: fix under-reservation of blocks when repairing sf directories Assigned by Linux
Sep 25, 2026
Previous Page 21 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
