CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 06:10 UTC )
This week: 5,202 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,202 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-93215 Not yet scored cdx: Fix double free when sysfs file creation fails Assigned by Linux
Sep 24, 2026 CVE-2026-93214 Not yet scored usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() Assigned by Linux
Sep 24, 2026 CVE-2026-93213 Not yet scored of: fix out-of-bounds read in of_alias_scan() stem parser Assigned by Linux
Sep 24, 2026 CVE-2026-93212 Not yet scored nfsd: guard nfsd_serv deref in nfsd_file_net_dispose Assigned by Linux
Sep 24, 2026 CVE-2026-93211 Not yet scored nfsd: initialize DRC hash table before registering shrinker Assigned by Linux
Sep 24, 2026 CVE-2026-93210 Not yet scored smb: client: harden DFS cache against invalid target hints Assigned by Linux
Sep 24, 2026 CVE-2026-93209 Not yet scored Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb Assigned by Linux
Sep 24, 2026 CVE-2026-93208 Not yet scored kasan: fix cache shrink race with CPU hotplug Assigned by Linux
Sep 24, 2026 CVE-2026-93207 Critical 9.8 SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry Assigned by Linux
Sep 24, 2026 CVE-2026-93206 Not yet scored PCI/proc: Use file_ns_capable() when checking config space read access Assigned by Linux
Sep 24, 2026 CVE-2026-93205 Not yet scored iommu/arm-smmu-v3: Manage teardown with devm Assigned by Linux
Sep 24, 2026 CVE-2026-93204 Not yet scored batman-adv: dat: atomically update mac addresses Assigned by Linux
Sep 17, 2026 CVE-2026-93203 High 7.1 batman-adv: bla: avoid CRC corruption due to parallel claim add Assigned by Linux
Sep 17, 2026 CVE-2026-93202 Not yet scored i3c: master: Fix recursive locking during device registration Assigned by Linux
Sep 17, 2026 CVE-2026-93201 High 7.8 dm-pcache: validate seg_id fields from persistent memory Assigned by Linux
Sep 17, 2026 CVE-2026-93200 Not yet scored i3c: master: Fix use-after-free of master->this Assigned by Linux
Sep 17, 2026 CVE-2026-93199 Not yet scored i3c: master: Do not treat master device as a duplicate target Assigned by Linux
Sep 17, 2026 CVE-2026-93198 Not yet scored dm-pcache: validate the persisted dirty_tail chain at load Assigned by Linux
Sep 17, 2026 CVE-2026-93197 Not yet scored memcg: move LRU size accounting on reparenting instead of copying it Assigned by Linux
Sep 17, 2026 CVE-2026-93196 High 8.4 nvdimm: virtio_pmem: refcount requests for token lifetime Assigned by Linux
Sep 17, 2026 CVE-2026-93195 Not yet scored drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel Assigned by Linux
Sep 17, 2026 CVE-2026-93194 Not yet scored drm/rockchip: dw_dp: Release core resources Assigned by Linux
Sep 17, 2026 CVE-2026-93193 Not yet scored drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup Assigned by Linux
Sep 17, 2026 CVE-2026-93192 High 7.8 drm/v3d: Clear queue->active_job when v3d_fence_create() fails Assigned by Linux
Sep 17, 2026 CVE-2026-93191 Not yet scored smack: fix incorrect task context in smack_msg_queue_msgrcv Assigned by Linux
Sep 17, 2026 CVE-2026-93190 High 8.4 platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count Assigned by Linux
Sep 17, 2026 CVE-2026-93189 High 8.8 HID: core: quiesce input in hid_hw_stop() to prevent use-after-free Assigned by Linux
Sep 17, 2026 CVE-2026-93188 Not yet scored HID: roccat: bound device-supplied profile index Assigned by Linux
Sep 17, 2026 CVE-2026-93187 Not yet scored ASoC: SOF: ipc4-topology: Return error for invalid number of formats Assigned by Linux
Sep 17, 2026 CVE-2026-93186 Not yet scored cxl/mbox: Clamp mailbox output allocation to the payload size Assigned by Linux
Sep 17, 2026 CVE-2026-93185 Not yet scored ASoC: rt700-sdw: always drain jack work on remove Assigned by Linux
Sep 17, 2026 CVE-2026-93184 Not yet scored ASoC: fsl_audmix: rework runtime PM handling in probe Assigned by Linux
Sep 17, 2026 CVE-2026-93183 Not yet scored drm/lima: call drm_mm_init() with a valid allocation range Assigned by Linux
Sep 17, 2026 CVE-2026-93182 Not yet scored sched/fair: Fix overflow in update_tg_cfs_runnable() Assigned by Linux
Sep 17, 2026 CVE-2026-93181 Not yet scored perf/x86/intel/uncore: Fix uncore_box ref/unref ordering Assigned by Linux
Sep 17, 2026 CVE-2026-93180 Not yet scored drm/panthor: Fix NPD issue on partial unmap of an evicted BO Assigned by Linux
Sep 17, 2026 CVE-2026-93179 Not yet scored drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read Assigned by Linux
Sep 17, 2026 CVE-2026-93178 High 7.1 drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup Assigned by Linux
Sep 17, 2026 CVE-2026-93177 High 7.3 drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup Assigned by Linux
Sep 17, 2026 CVE-2026-93176 High 7.0 drm/amd/display: Fix dangling pointer in plane reset function Assigned by Linux
Sep 17, 2026 CVE-2026-93175 High 7.8 drm/amd/display: Fix dangling pointer in CRTC reset function Assigned by Linux
Sep 17, 2026 CVE-2026-93174 Not yet scored bpf: Copy per-CPU map value padding in copy_map_value_long() Assigned by Linux
Sep 17, 2026 CVE-2026-93173 Not yet scored bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks Assigned by Linux
Sep 17, 2026 CVE-2026-93172 Not yet scored mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug Assigned by Linux
Sep 17, 2026 CVE-2026-93171 Not yet scored leds: lp5860: Fix a potential double-unlock Assigned by Linux
Sep 17, 2026 CVE-2026-93170 High 7.8 dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Assigned by Linux
Sep 17, 2026 CVE-2026-93169 Not yet scored dmaengine: zynqmp_dma: fix race between runtime PM and device removal Assigned by Linux
Sep 17, 2026 CVE-2026-93168 Not yet scored dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout Assigned by Linux
Sep 17, 2026 CVE-2026-93167 Not yet scored csky: Fix a4/a5 restoration in syscall trace path Assigned by Linux
Sep 17, 2026 CVE-2026-93166 Not yet scored wifi: rtw89: debug: fix off by on in rtw89_ppdu_str() Assigned by Linux
Sep 17, 2026
Previous Page 27 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
