CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 08:00 UTC )
This week: 5,199 CVEs published, 331 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,199 Show in the list Critical, last 7 days 331 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-93115 Not yet scored platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL Assigned by Linux
Sep 17, 2026 CVE-2026-93114 Not yet scored platform/surface: acpi-notify: Check ACPI companion before use Assigned by Linux
Sep 17, 2026 CVE-2026-93113 Not yet scored clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK Assigned by Linux
Sep 17, 2026 CVE-2026-93112 High 7.1 bpf: Require a BPF cpumask for bpf_cpumask_populate() Assigned by Linux
Sep 17, 2026 CVE-2026-93111 High 7.8 bpf: Mark tracing_multi trampolines as ftrace managed Assigned by Linux
Sep 17, 2026 CVE-2026-93110 Not yet scored RDMA/core: Wait for RCU callbacks before unloading ib_core Assigned by Linux
Sep 17, 2026 CVE-2026-93109 Not yet scored RDMA/mlx5: Drain RCU callbacks during module teardown Assigned by Linux
Sep 17, 2026 CVE-2026-93108 Not yet scored RDMA/ipoib: Drain RCU callbacks during module teardown Assigned by Linux
Sep 17, 2026 CVE-2026-93107 High 8.2 RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state Assigned by Linux
Sep 17, 2026 CVE-2026-93106 Not yet scored crash_dump: release keyring reference at the correct time Assigned by Linux
Sep 17, 2026 CVE-2026-93105 High 7.8 esp: do not unref managed frag pages in esp_ssg_unref() Assigned by Linux
Sep 17, 2026 CVE-2026-93104 Not yet scored RDMA/rvt: Return NULL after port allocation failure Assigned by Linux
Sep 17, 2026 CVE-2026-93103 Not yet scored RDMA/hfi1: Preserve unit 0 on allocation failure Assigned by Linux
Sep 17, 2026 CVE-2026-93102 Not yet scored RDMA/hfi1: Free RX data on late probe failure Assigned by Linux
Sep 17, 2026 CVE-2026-93101 Not yet scored media: v4l2-async: Unregister sub-device if asc_list is empty Assigned by Linux
Sep 17, 2026 CVE-2026-93100 Not yet scored fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() Assigned by Linux
Sep 17, 2026 CVE-2026-93099 Not yet scored fs/resctrl: Fix UAF from worker threads when domains are removed Assigned by Linux
Sep 17, 2026 CVE-2026-93098 Not yet scored rpmsg: glink: fix deadlock in endpoint destroy during driver detach Assigned by Linux
Sep 17, 2026 CVE-2026-93097 Not yet scored cxl/mbox: Break poison list loop on an empty payload Assigned by Linux
Sep 17, 2026 CVE-2026-93096 Not yet scored cxl/features: Serialize multi-part Get/Set Feature transfers Assigned by Linux
Sep 17, 2026 CVE-2026-93095 High 7.8 hfsplus: validate thread record before delete key rebuild Assigned by Linux
Sep 17, 2026 CVE-2026-93094 Not yet scored wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback Assigned by Linux
Sep 17, 2026 CVE-2026-93093 Not yet scored firmware: arm_scmi: Publish channel state before callbacks Assigned by Linux
Sep 17, 2026 CVE-2026-93092 Not yet scored firmware: arm_scmi: Unregister device notifier before IDR teardown Assigned by Linux
Sep 17, 2026 CVE-2026-93091 Not yet scored firmware: arm_scmi: Quiesce notifications before teardown Assigned by Linux
Sep 17, 2026 CVE-2026-93090 Not yet scored firmware: arm_scmi: Clean up channels on setup failure Assigned by Linux
Sep 17, 2026 CVE-2026-93089 Not yet scored firmware: arm_scmi: Free transport channel on IDR failure Assigned by Linux
Sep 17, 2026 CVE-2026-93086 Not yet scored firmware: arm_scmi: Avoid IDR updates while cleaning channels Assigned by Linux
Sep 17, 2026 CVE-2026-93085 Not yet scored firmware: arm_scmi: Reject out of range DT protocol IDs Assigned by Linux
Sep 17, 2026 CVE-2026-93084 Not yet scored firmware: arm_scmi: Drop handle on protocol bind failures Assigned by Linux
Sep 17, 2026 CVE-2026-93083 Not yet scored firmware: arm_scmi: Unwind TX receiver mailbox setup failure Assigned by Linux
Sep 17, 2026 CVE-2026-93082 Not yet scored firmware: arm_scmi: Unwind P2A receiver mailbox setup failure Assigned by Linux
Sep 17, 2026 CVE-2026-93081 Not yet scored firmware: arm_scmi: Fix SCMI device destroy lifetimes Assigned by Linux
Sep 17, 2026 CVE-2026-93080 Not yet scored firmware: arm_scmi: Fix transport device teardown lookup Assigned by Linux
Sep 17, 2026 CVE-2026-93079 High 7.8 cxl/features: Reject Get Feature count larger than the output buffer Assigned by Linux
Sep 17, 2026 CVE-2026-93078 Not yet scored cxl/features: Reject Set Features output buffer smaller than the header Assigned by Linux
Sep 17, 2026 CVE-2026-93077 Not yet scored cxl/features: Clamp Get Feature output size to the remaining buffer Assigned by Linux
Sep 17, 2026 CVE-2026-93076 Not yet scored dax/fsdev: clear vmemmap_shift when binding static pgmap Assigned by Linux
Sep 17, 2026 CVE-2026-93075 Not yet scored dax/fsdev: clear pgmap ops and owner on unbind Assigned by Linux
Sep 17, 2026 CVE-2026-93074 High 7.8 dax/fsdev: use __va(phys) for kaddr in direct_access Assigned by Linux
Sep 17, 2026 CVE-2026-93073 Not yet scored dax: read holder_ops once in dax_holder_notify_failure() Assigned by Linux
Sep 17, 2026 CVE-2026-93072 Not yet scored irqchip/renesas-irqc: Fix generic interrupt chip leak on remove Assigned by Linux
Sep 17, 2026 CVE-2026-93071 Not yet scored media: bcm2835-unicam: Fix asc leaked in error/remove path Assigned by Linux
Sep 17, 2026 CVE-2026-93070 High 7.8 media: ipu6: Do not free aux device pdata after init Assigned by Linux
Sep 17, 2026 CVE-2026-93069 Not yet scored OPP: Fix cleanup ordering Assigned by Linux
Sep 17, 2026 CVE-2026-93068 Not yet scored drm/amd/display: Fix DM I2C teardown race Assigned by Linux
Sep 17, 2026 CVE-2026-93067 Not yet scored drm/bridge: tc358767: clamp the reported AUX read size to the request Assigned by Linux
Sep 17, 2026 CVE-2026-93066 Not yet scored x86/mm/pat: Take cpa_lock around large-page collapse Assigned by Linux
Sep 17, 2026 CVE-2026-93065 Not yet scored wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs Assigned by Linux
Sep 17, 2026 CVE-2026-93064 Not yet scored wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser Assigned by Linux
Sep 17, 2026
Previous Page 29 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
