CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 03:10 UTC )
This week: 5,213 CVEs published, 335 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,213 Show in the list Critical, last 7 days 335 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-97498 Not yet scored drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction Assigned by Linux
Sep 24, 2026 CVE-2026-97497 High 7.8 drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id Assigned by Linux
Sep 24, 2026 CVE-2026-97496 High 7.1 drm/amdkfd: Fix OOB memory exposure in get_wave_state() Assigned by Linux
Sep 24, 2026 CVE-2026-97495 Not yet scored drm/amdkfd: Check bounds on allocate_doorbell Assigned by Linux
Sep 24, 2026 CVE-2026-97494 Not yet scored drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw Assigned by Linux
Sep 24, 2026 CVE-2026-97493 Not yet scored drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Assigned by Linux
Sep 24, 2026 CVE-2026-97492 Not yet scored wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed Assigned by Linux
Sep 24, 2026 CVE-2026-97491 Not yet scored net/rds: Don't sleep inside rds_ib_conn_path_shutdown Assigned by Linux
Sep 24, 2026 CVE-2026-97490 Not yet scored affs: handle set_blocksize failures Assigned by Linux
Sep 24, 2026 CVE-2026-97489 Not yet scored bfs: handle set_blocksize failures Assigned by Linux
Sep 24, 2026 CVE-2026-97488 Not yet scored qnx4: handle set_blocksize failures Assigned by Linux
Sep 24, 2026 CVE-2026-97487 Not yet scored jfs: handle set_blocksize failures Assigned by Linux
Sep 24, 2026 CVE-2026-97486 Not yet scored hpfs: handle set_blocksize failures Assigned by Linux
Sep 24, 2026 CVE-2026-97485 Not yet scored omfs: handle set_blocksize failures Assigned by Linux
Sep 24, 2026 CVE-2026-97484 Not yet scored usbip: vhci_hcd: fix NULL deref in status_show_vhci Assigned by Linux
Sep 24, 2026 CVE-2026-97483 Not yet scored usb: core: hcd: fix possible deadlock in rh control transfers Assigned by Linux
Sep 24, 2026 CVE-2026-97482 Not yet scored usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log Assigned by Linux
Sep 24, 2026 CVE-2026-97481 Not yet scored serial: 8250: fix possible ISR soft lockup Assigned by Linux
Sep 24, 2026 CVE-2026-97480 Not yet scored tty: serial: 8250: protect against NULL uart->port.dev in register Assigned by Linux
Sep 24, 2026 CVE-2026-97479 Not yet scored driver core: Avoid warning when removing a device while its supplier is unbinding Assigned by Linux
Sep 24, 2026 CVE-2026-97478 High 7.8 virt: acrn: Fix irqfd use-after-free during eventfd shutdown Assigned by Linux
Sep 24, 2026 CVE-2026-97477 Not yet scored RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() Assigned by Linux
Sep 24, 2026 CVE-2026-97476 Not yet scored rds: filter RDS_INFO_* getsockopt by caller's netns Assigned by Linux
Sep 24, 2026 CVE-2026-97475 Not yet scored thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Assigned by Linux
Sep 24, 2026 CVE-2026-97474 High 7.4 wifi: iwlwifi: mld: purge async notifications upon nic error Assigned by Linux
Sep 24, 2026 CVE-2026-97473 Not yet scored powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() Assigned by Linux
Sep 24, 2026 CVE-2026-97472 Not yet scored ipv6: addrconf: fix temp address generation after prefix deprecation Assigned by Linux
Sep 24, 2026 CVE-2026-97456 Not yet scored ACPICA: Fix condition check in acpi_ps_parse_loop() Assigned by Linux
Sep 24, 2026 CVE-2026-97455 High 8.4 ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() Assigned by Linux
Sep 24, 2026 CVE-2026-97454 High 7.7 ACPICA: add boundary checks in acpi_ps_get_next_field() Assigned by Linux
Sep 24, 2026 CVE-2026-97453 Not yet scored ACPICA: validate byte_count in acpi_ps_get_next_package_length() Assigned by Linux
Sep 24, 2026 CVE-2026-97452 High 8.4 ACPICA: Prevent adding invalid references Assigned by Linux
Sep 24, 2026 CVE-2026-97451 High 8.4 ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Assigned by Linux
Sep 24, 2026 CVE-2026-97450 High 8.4 ACPICA: validate handler object type in two places Assigned by Linux
Sep 24, 2026 CVE-2026-97449 Not yet scored ACPICA: Add package limit checks in parser functions Assigned by Linux
Sep 24, 2026 CVE-2026-97448 High 7.7 ACPICA: Add validation for node in acpi_ns_build_normalized_path() Assigned by Linux
Sep 24, 2026 CVE-2026-97447 Not yet scored ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() Assigned by Linux
Sep 24, 2026 CVE-2026-97446 Not yet scored ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() Assigned by Linux
Sep 24, 2026 CVE-2026-97445 High 7.7 ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Assigned by Linux
Sep 24, 2026 CVE-2026-97444 High 7.7 ACPICA: add boundary checks in two places Assigned by Linux
Sep 24, 2026 CVE-2026-97443 Not yet scored perf/ftrace: Fix WARNING in __unregister_ftrace_function Assigned by Linux
Sep 24, 2026 CVE-2026-97442 High 8.8 wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi Assigned by Linux
Sep 24, 2026 CVE-2026-97441 Not yet scored ata: ahci: fail probe if BAR too small for claimed ports Assigned by Linux
Sep 24, 2026 CVE-2026-97440 Not yet scored net: qrtr: fix node refcount leak on ctrl packet alloc failure Assigned by Linux
Sep 24, 2026 CVE-2026-97439 Not yet scored fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib Assigned by Linux
Sep 24, 2026 CVE-2026-97438 High 7.1 fs/ntfs3: validate index entry key bounds Assigned by Linux
Sep 24, 2026 CVE-2026-97437 High 7.1 ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() Assigned by Linux
Sep 24, 2026 CVE-2026-97436 Not yet scored dpaa2-switch: rework FDB management on the bridge leave path Assigned by Linux
Sep 24, 2026 CVE-2026-97435 Not yet scored net: dsa: sja1105: flower: reject cross-chip redirect Assigned by Linux
Sep 24, 2026 CVE-2026-97434 Not yet scored dpaa2-switch: fix handling of NAPI on the remove path Assigned by Linux
Sep 24, 2026
Previous Page 23 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
