CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 03:50 UTC )
This week: 5,210 CVEs published, 335 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,210 Show in the list Critical, last 7 days 335 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-97433 High 8.2 nvme: validate FDP configuration descriptor sizes Assigned by Linux
Sep 24, 2026 CVE-2026-97432 Not yet scored wifi: iwlwifi: mvm: fix P2P-Device binding handling Assigned by Linux
Sep 24, 2026 CVE-2026-97431 Not yet scored drm/amd/display: Avoid DPMS-on for phantom stream Assigned by Linux
Sep 24, 2026 CVE-2026-97430 Not yet scored xhci: Prevent queuing new commands if xhci is inaccessible Assigned by Linux
Sep 24, 2026 CVE-2026-97429 High 7.8 drm/amdkfd: fix UAF race in destroy_queue_cpsch Assigned by Linux
Sep 24, 2026 CVE-2026-97428 High 7.7 drm/amdgpu: harden FRU PIA parsing with bounded helpers Assigned by Linux
Sep 24, 2026 CVE-2026-97427 Not yet scored drm/amd/pm: bound pp_dpm_set_pp_table() memcpy Assigned by Linux
Sep 24, 2026 CVE-2026-97426 Not yet scored drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Assigned by Linux
Sep 24, 2026 CVE-2026-97425 Not yet scored drm/amdgpu: fix buffer overflow during vBIOS update Assigned by Linux
Sep 24, 2026 CVE-2026-97424 Not yet scored drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq Assigned by Linux
Sep 24, 2026 CVE-2026-97423 Not yet scored cxl/region: Validate partition index before array access Assigned by Linux
Sep 24, 2026 CVE-2026-97422 Not yet scored drm/amdkfd: fix SMI event cross-process information leak Assigned by Linux
Sep 24, 2026 CVE-2026-97421 High 7.8 RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Assigned by Linux
Sep 24, 2026 CVE-2026-97420 Not yet scored bpf: NUL-terminate replaced sysctl value Assigned by Linux
Sep 24, 2026 CVE-2026-97419 Not yet scored hsr: broadcast netlink notifications in the device's net namespace Assigned by Linux
Sep 24, 2026 CVE-2026-97418 Not yet scored ALSA: es18xx: check control allocation before private data setup Assigned by Linux
Sep 24, 2026 CVE-2026-97417 High 7.5 netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() Assigned by Linux
Sep 24, 2026 CVE-2026-97416 Not yet scored btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() Assigned by Linux
Sep 24, 2026 CVE-2026-97415 High 7.8 btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF Assigned by Linux
Sep 24, 2026 CVE-2026-97414 Not yet scored ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() Assigned by Linux
Sep 24, 2026 CVE-2026-97413 Critical 9.8 RDMA/rtrs-srv: Fix integer underflow in process_read and process_write Assigned by Linux
Sep 24, 2026 CVE-2026-97412 Not yet scored pds_core: quiesce DMA before freeing resources Assigned by Linux
Sep 24, 2026 CVE-2026-97411 Not yet scored net: ibm: emac: mal: fix potential system hang in mal_remove() Assigned by Linux
Sep 24, 2026 CVE-2026-97410 Not yet scored netconsole: take target_cleanup_list_lock in drop_netconsole_target() Assigned by Linux
Sep 24, 2026 CVE-2026-97409 High 8.8 nvme-fc: Do not cancel requests in io target before it is initialized Assigned by Linux
Sep 24, 2026 CVE-2026-97408 Not yet scored Bluetooth: L2CAP: validate connectionless PSM length Assigned by Linux
Sep 24, 2026 CVE-2026-97407 Not yet scored ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt Assigned by Linux
Sep 24, 2026 CVE-2026-93830 High 7.5 net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Assigned by Linux
Sep 24, 2026 CVE-2026-93829 Not yet scored smb: client: fix races in cifsd thread creation Assigned by Linux
Sep 24, 2026 CVE-2026-93828 Not yet scored exfat: fix handling of damaged volume in exfat_create_upcase_table() Assigned by Linux
Sep 24, 2026 CVE-2026-93827 High 8.4 virtio-fs: avoid double-free on failed queue setup Assigned by Linux
Sep 24, 2026 CVE-2026-93826 High 7.5 HID: hidpp: fix potential UAF in hidpp_connect_event() Assigned by Linux
Sep 24, 2026 CVE-2026-93825 Not yet scored spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Assigned by Linux
Sep 24, 2026 CVE-2026-93824 Not yet scored tls: reject the combination of TLS and sockmap Assigned by Linux
Sep 24, 2026 CVE-2026-93823 Not yet scored drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl Assigned by Linux
Sep 24, 2026 CVE-2026-93822 Not yet scored PCI: iproc: Protect root bus removal with rescan lock Assigned by Linux
Sep 24, 2026 CVE-2026-93821 Not yet scored PCI: altera: Protect root bus removal with rescan lock Assigned by Linux
Sep 24, 2026 CVE-2026-93820 Not yet scored PCI: rockchip: Protect root bus removal with rescan lock Assigned by Linux
Sep 24, 2026 CVE-2026-93819 Not yet scored PCI: mediatek: Protect root bus removal with rescan lock Assigned by Linux
Sep 24, 2026 CVE-2026-93818 Not yet scored PCI: plda: Protect root bus removal with rescan lock Assigned by Linux
Sep 24, 2026 CVE-2026-93817 High 7.8 perf: Fix addr_filter_ranges lifetime Assigned by Linux
Sep 24, 2026 CVE-2026-93816 High 7.1 f2fs: validate inline dentry name lengths before conversion Assigned by Linux
Sep 24, 2026 CVE-2026-93815 Not yet scored net: au1000: move free_irq out of the close-time spinlocked section Assigned by Linux
Sep 24, 2026 CVE-2026-93814 Not yet scored spi: core: Abort active target transfer on controller suspend Assigned by Linux
Sep 24, 2026 CVE-2026-93813 High 7.8 btrfs: tree-checker: validate INODE_REF's namelen Assigned by Linux
Sep 24, 2026 CVE-2026-93812 Not yet scored ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr Assigned by Linux
Sep 24, 2026 CVE-2026-93811 Not yet scored ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling Assigned by Linux
Sep 24, 2026 CVE-2026-93810 High 7.0 cachefiles: Fix double fput Assigned by Linux
Sep 24, 2026 CVE-2026-93809 Not yet scored drm/amdgpu: flush pending RCU callbacks on module unload Assigned by Linux
Sep 24, 2026 CVE-2026-93808 Not yet scored ALSA: usb-audio: caiaq: validate EP1 reply lengths Assigned by Linux
Sep 24, 2026
Previous Page 24 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
