CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 07:00 UTC )
This week: 5,200 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,200 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-93165 High 7.7 platform/chrome: sensorhub: Fix memory overread in ring handler Assigned by Linux
Sep 17, 2026 CVE-2026-93164 Not yet scored uprobes/x86: Move optimized uprobe from nop5 to nop10 Assigned by Linux
Sep 17, 2026 CVE-2026-93163 Not yet scored hwrng: core - fix rng list on registration error Assigned by Linux
Sep 17, 2026 CVE-2026-93162 Not yet scored crypto: qat - cancel work on re-enable SR-IOV timeout Assigned by Linux
Sep 17, 2026 CVE-2026-93161 Not yet scored crypto: qat - clear AES key schedule from stack Assigned by Linux
Sep 17, 2026 CVE-2026-93160 Not yet scored crypto: atmel-ecc - reject hardware ECDH without a public key Assigned by Linux
Sep 17, 2026 CVE-2026-93159 Not yet scored crypto: atmel-sha204a - fix heap info leak on I2C transfer failure Assigned by Linux
Sep 17, 2026 CVE-2026-93158 Not yet scored crypto: sa2ul - stop probe if context pool creation fails Assigned by Linux
Sep 17, 2026 CVE-2026-93157 Not yet scored hwrng: xilinx-trng - propagate timeout before any data is read Assigned by Linux
Sep 17, 2026 CVE-2026-93156 Not yet scored crypto: rk3288 - fail ahash requests on HASH idle timeout Assigned by Linux
Sep 17, 2026 CVE-2026-93155 Not yet scored crypto: keembay - Fix AEAD unregister count in error path Assigned by Linux
Sep 17, 2026 CVE-2026-93154 High 7.8 RDMA/irdma: Add refcounting to user ring MRs Assigned by Linux
Sep 17, 2026 CVE-2026-93153 Not yet scored RDMA/bng_re: return a timeout when firmware responses stall Assigned by Linux
Sep 17, 2026 CVE-2026-93152 Not yet scored nvme-apple: Use acquire/release for queue enabled state Assigned by Linux
Sep 17, 2026 CVE-2026-93151 High 7.5 nvmet-rdma: fix response resource leak on queue teardown Assigned by Linux
Sep 17, 2026 CVE-2026-93150 Not yet scored cgroup/cpuset: Make nr_deadline_tasks an atomic_t Assigned by Linux
Sep 17, 2026 CVE-2026-93149 Not yet scored wifi: mac80211_hwsim: avoid NULL skb in stop queue drain Assigned by Linux
Sep 17, 2026 CVE-2026-93148 High 7.8 bpf: Reject MEM_ALLOC BTF accesses past object bounds Assigned by Linux
Sep 17, 2026 CVE-2026-93147 High 7.8 s390/bpf: Replace ly instruction with llgf Assigned by Linux
Sep 17, 2026 CVE-2026-93146 Not yet scored time/namespace: Validate nanosecond field in proc_timens_set_offset() Assigned by Linux
Sep 17, 2026 CVE-2026-93145 Not yet scored clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister() Assigned by Linux
Sep 17, 2026 CVE-2026-93144 High 7.8 bpf: Reject writes through untrusted BTF pointers Assigned by Linux
Sep 17, 2026 CVE-2026-93143 Not yet scored staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() Assigned by Linux
Sep 17, 2026 CVE-2026-93142 Not yet scored thermal/drivers/rcar: Fix error checking in probe() Assigned by Linux
Sep 17, 2026 CVE-2026-93141 Not yet scored usb: gadget: r8a66597: avoid double free of ep0_req in probe error path Assigned by Linux
Sep 17, 2026 CVE-2026-93140 Not yet scored udf: Mark LVID buffer as uptodate before marking it dirty Assigned by Linux
Sep 17, 2026 CVE-2026-93139 Not yet scored drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC Assigned by Linux
Sep 17, 2026 CVE-2026-93138 High 7.8 bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux Assigned by Linux
Sep 17, 2026 CVE-2026-93137 High 7.8 bpf: Fix use-after-free on mm_struct in bpf_find_vma() Assigned by Linux
Sep 17, 2026 CVE-2026-93136 Not yet scored bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation Assigned by Linux
Sep 17, 2026 CVE-2026-93135 Not yet scored bpf: Reject programs with inlined helpers if JIT is not available Assigned by Linux
Sep 17, 2026 CVE-2026-93134 Not yet scored printk: Fix possible console use-after-free Assigned by Linux
Sep 17, 2026 CVE-2026-93133 Not yet scored ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() Assigned by Linux
Sep 17, 2026 CVE-2026-93132 Not yet scored ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling Assigned by Linux
Sep 17, 2026 CVE-2026-93131 Not yet scored platform/x86: dell-privacy: Fix race condition Assigned by Linux
Sep 17, 2026 CVE-2026-93130 Not yet scored platform/x86: dell-wmi-base: Fix resource leak on module load failure Assigned by Linux
Sep 17, 2026 CVE-2026-93129 Not yet scored platform/x86: dell-wmi-base: Fix handling of ultra performance key Assigned by Linux
Sep 17, 2026 CVE-2026-93128 Not yet scored platform/x86: lg-laptop: Fix LED resource handling Assigned by Linux
Sep 17, 2026 CVE-2026-93127 High 7.8 bpf: Drop scalar id on sign-extending narrowing stack fills Assigned by Linux
Sep 17, 2026 CVE-2026-93126 Not yet scored remoteproc: qcom_q6v5_adsp: Fix reference leak for device node Assigned by Linux
Sep 17, 2026 CVE-2026-93125 High 7.8 bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max Assigned by Linux
Sep 17, 2026 CVE-2026-93124 Not yet scored platform/x86: asus-wireless: Fail probe when there is no ACPI match Assigned by Linux
Sep 17, 2026 CVE-2026-93123 Not yet scored serial: qcom-geni: do not advance stale DMA completions Assigned by Linux
Sep 17, 2026 CVE-2026-93122 High 7.8 usb: gadget: uac: validate rate list length before storing Assigned by Linux
Sep 17, 2026 CVE-2026-93121 High 7.0 usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths Assigned by Linux
Sep 17, 2026 CVE-2026-93120 Not yet scored usb: gadget: configfs: fix out-of-bounds read of qw_sign Assigned by Linux
Sep 17, 2026 CVE-2026-93119 Not yet scored usb: ljca: bound bank_num in ljca_enumerate_gpio() Assigned by Linux
Sep 17, 2026 CVE-2026-93118 Not yet scored usb: gadget: aspeed_udc: check endpoint DMA allocation Assigned by Linux
Sep 17, 2026 CVE-2026-93117 Not yet scored usb: fix UAF when probe runs concurrent to dyn ID removal Assigned by Linux
Sep 17, 2026 CVE-2026-93116 High 7.0 platform/x86: asus-wmi: fix resource leaks on probe failure Assigned by Linux
Sep 17, 2026
Previous Page 28 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
