CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 05:23 UTC )
This week: 5,207 CVEs published, 335 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,207 Show in the list Critical, last 7 days 335 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-93265 High 7.7 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node Assigned by Linux
Sep 24, 2026 CVE-2026-93264 Not yet scored RDMA/efa: Fix PBL chunk length computation Assigned by Linux
Sep 24, 2026 CVE-2026-93263 Not yet scored clk: eswin: Zero-initialize stack-allocated clk_init_data Assigned by Linux
Sep 24, 2026 CVE-2026-93262 High 7.8 md/raid5-ppl: fix use-after-free in ppl_do_flush() Assigned by Linux
Sep 24, 2026 CVE-2026-93261 Not yet scored locking/lockdep: Fix NULL pointer dereference in __lock_set_class() Assigned by Linux
Sep 24, 2026 CVE-2026-93260 High 7.4 powerpc/xive: propagate IPI init errors to prevent use-after-free Assigned by Linux
Sep 24, 2026 CVE-2026-93259 Not yet scored powerpc/irq: Fix missing r2 clobber in PCREL inline assembly Assigned by Linux
Sep 24, 2026 CVE-2026-93258 Not yet scored ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full() Assigned by Linux
Sep 24, 2026 CVE-2026-93257 Not yet scored block: handle nogenerate/noverify properly in fs-integrity Assigned by Linux
Sep 24, 2026 CVE-2026-93256 Not yet scored arm64: hibernate: mask DAIF before restoring hibernated kernel Assigned by Linux
Sep 24, 2026 CVE-2026-93255 Not yet scored btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock Assigned by Linux
Sep 24, 2026 CVE-2026-93254 Not yet scored arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit Assigned by Linux
Sep 24, 2026 CVE-2026-93253 Not yet scored sched/isolation: Defer freeing of cpumask memblock memory to initcall Assigned by Linux
Sep 24, 2026 CVE-2026-93252 Not yet scored ocfs2: fix circular locking dependency in ocfs2_init_acl() Assigned by Linux
Sep 24, 2026 CVE-2026-93251 Not yet scored ACPI: bus: Introduce acpi_bus_get_primary_device() Assigned by Linux
Sep 24, 2026 CVE-2026-93250 High 7.8 vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() Assigned by Linux
Sep 24, 2026 CVE-2026-93249 Not yet scored spi: amlogic-spisg: Make sure clk_init_data is fully initialized Assigned by Linux
Sep 24, 2026 CVE-2026-93248 Not yet scored drm/xe: don't WARN on kernel job timeout when device already wedged Assigned by Linux
Sep 24, 2026 CVE-2026-93247 Not yet scored Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference Assigned by Linux
Sep 24, 2026 CVE-2026-93246 Not yet scored octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity Assigned by Linux
Sep 24, 2026 CVE-2026-93245 Not yet scored apparmor: policy_int make sure list heads are initialized before fail path Assigned by Linux
Sep 24, 2026 CVE-2026-93244 Not yet scored drm/sysfb: simpledrm: Improve stride validation Assigned by Linux
Sep 24, 2026 CVE-2026-93243 Not yet scored mm/secretmem: properly account locked pages Assigned by Linux
Sep 24, 2026 CVE-2026-93242 Not yet scored scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() Assigned by Linux
Sep 24, 2026 CVE-2026-93241 Not yet scored memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done Assigned by Linux
Sep 24, 2026 CVE-2026-93240 Not yet scored memcg: make the v1 soft limit knob inert Assigned by Linux
Sep 24, 2026 CVE-2026-93239 Not yet scored arm64: mm: Fix the lockless page-table walk in show_pte() Assigned by Linux
Sep 24, 2026 CVE-2026-93238 Not yet scored s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap Assigned by Linux
Sep 24, 2026 CVE-2026-93237 High 7.8 LoongArch: Add DIRECT_MAP_PHYSMEM_END definition Assigned by Linux
Sep 24, 2026 CVE-2026-93236 Not yet scored media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common Assigned by Linux
Sep 24, 2026 CVE-2026-93235 Not yet scored f2fs: fix to zero post-EOF data when extending file size Assigned by Linux
Sep 24, 2026 CVE-2026-93234 Not yet scored drm/gud: validate TV mode names before creating enum property Assigned by Linux
Sep 24, 2026 CVE-2026-93233 Not yet scored drm/nouveau/dmem: fix callocated underflow on large folio split Assigned by Linux
Sep 24, 2026 CVE-2026-93232 Not yet scored mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages Assigned by Linux
Sep 24, 2026 CVE-2026-93231 Not yet scored lockd: fix swapped arguments in nlmsvc_match_ip() Assigned by Linux
Sep 24, 2026 CVE-2026-93230 Not yet scored mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Assigned by Linux
Sep 24, 2026 CVE-2026-93229 High 7.1 nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry Assigned by Linux
Sep 24, 2026 CVE-2026-93228 Critical 9.1 svcrdma: Reject Write/Reply chunks with segcount 0 Assigned by Linux
Sep 24, 2026 CVE-2026-93227 Not yet scored mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn Assigned by Linux
Sep 24, 2026 CVE-2026-93226 Not yet scored ipv6: use RCU iterator to dump route exceptions Assigned by Linux
Sep 24, 2026 CVE-2026-93225 High 7.4 phy: fsl-imx8mq-usb: fix typec switch leak on probe error path Assigned by Linux
Sep 24, 2026 CVE-2026-93224 High 8.1 svcrdma: Fix unmatched rn_unregister on failed accept Assigned by Linux
Sep 24, 2026 CVE-2026-93223 Not yet scored staging: media: tegra-video: fix of_node_put() on VIP parse errors Assigned by Linux
Sep 24, 2026 CVE-2026-93222 Not yet scored signal: avoid shared siginfo namespace rewrites Assigned by Linux
Sep 24, 2026 CVE-2026-93221 High 8.1 nfsd: convert nfsd_net boolean flags to unsigned long flags word Assigned by Linux
Sep 24, 2026 CVE-2026-93220 Not yet scored sched_ext: Keep kick_sync waiting on the rq's own CPU Assigned by Linux
Sep 24, 2026 CVE-2026-93219 Not yet scored clocksource/drivers/timer-sun4i: Advertise a real minimum delta Assigned by Linux
Sep 24, 2026 CVE-2026-93218 Not yet scored mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd Assigned by Linux
Sep 24, 2026 CVE-2026-93217 Not yet scored mm/madvise: skip device-private PMDs in cold and pageout walks Assigned by Linux
Sep 24, 2026 CVE-2026-93216 Not yet scored mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg() Assigned by Linux
Sep 24, 2026
Previous Page 26 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
