CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 06:30 UTC )
This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98768 Not yet scored usb: typec: anx7411 - stop the IRQ before destroying the workqueue Assigned by Linux
Oct 18, 2026 CVE-2026-98767 Not yet scored usb: dwc3: gadget: fix IRQ storm on invalid event buffer count Assigned by Linux
Oct 18, 2026 CVE-2026-98766 Not yet scored usb: gadget: aspeed-vhub: cancel wake work on device removal Assigned by Linux
Oct 18, 2026 CVE-2026-98765 Not yet scored USB: gadget: dummy-hcd: Fix wait for outstanding request completions Assigned by Linux
Oct 18, 2026 CVE-2026-98764 Not yet scored usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC Assigned by Linux
Oct 18, 2026 CVE-2026-98763 Not yet scored usb: core: clear both ep_in and ep_out for non-ep0 control endpoints Assigned by Linux
Oct 18, 2026 CVE-2026-98762 Not yet scored USB: dwc2: shut down wakeup timer before freeing HCD state Assigned by Linux
Oct 18, 2026 CVE-2026-98761 Not yet scored usb: typec: tcpm: recover after failure to start the frs ams Assigned by Linux
Oct 18, 2026 CVE-2026-98760 Not yet scored usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() Assigned by Linux
Oct 18, 2026 CVE-2026-98759 Not yet scored usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() Assigned by Linux
Oct 18, 2026 CVE-2026-98758 Not yet scored usb: typec: ucsi: glink: fix use-after-free of ucsi on remove Assigned by Linux
Oct 18, 2026 CVE-2026-98757 Not yet scored usb: cdns3: fix use-after-free in cdns3_gadget_exit() Assigned by Linux
Oct 18, 2026 CVE-2026-98756 Not yet scored usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe Assigned by Linux
Oct 18, 2026 CVE-2026-98755 Not yet scored tty: vcc: zero-initialize control packet in vcc_send_ctl() Assigned by Linux
Oct 18, 2026 CVE-2026-98754 Not yet scored tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup Assigned by Linux
Oct 18, 2026 CVE-2026-98753 Not yet scored tty: tty_port: restore TTY_IO_ERROR on activation failure Assigned by Linux
Oct 18, 2026 CVE-2026-98752 Not yet scored tty: port: fix tty_port_tty_vhangup() race Assigned by Linux
Oct 18, 2026 CVE-2026-98751 Not yet scored tty: abort break signalling on hangup Assigned by Linux
Oct 18, 2026 CVE-2026-98750 Not yet scored tty: fix saved termios reset race Assigned by Linux
Oct 18, 2026 CVE-2026-98749 Not yet scored tty: serial: max3100: shut down timer before freeing port Assigned by Linux
Oct 18, 2026 CVE-2026-98748 Not yet scored serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() Assigned by Linux
Oct 18, 2026 CVE-2026-98747 Not yet scored serial: core: fix NULL pointer dereference in serial_core_unregister_port() Assigned by Linux
Oct 18, 2026 CVE-2026-98746 Not yet scored serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() Assigned by Linux
Oct 18, 2026 CVE-2026-98745 Not yet scored arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems Assigned by Linux
Oct 18, 2026 CVE-2026-98744 Not yet scored ASoC: codecs: max98363: fix uninitialized stream_config->type Assigned by Linux
Oct 18, 2026 CVE-2026-98743 Not yet scored ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type Assigned by Linux
Oct 18, 2026 CVE-2026-98742 Not yet scored ALSA: seq: Serialize compat port-info ioctls Assigned by Linux
Oct 18, 2026 CVE-2026-98741 Not yet scored ALSA: ua101: reject mismatched capture/playback packet sizes Assigned by Linux
Oct 18, 2026 CVE-2026-98740 Not yet scored EDAC/altera: Drop __init from ECC setup paths for re-probe safety Assigned by Linux
Oct 18, 2026 CVE-2026-98739 Not yet scored Bluetooth: RFCOMM: Fix initial port reference race Assigned by Linux
Oct 18, 2026 CVE-2026-98738 Not yet scored Bluetooth: Serialize SMP remote OOB data access Assigned by Linux
Oct 18, 2026 CVE-2026-98737 Not yet scored Bluetooth: hci_sync: Fix inquiry cache use-after-free Assigned by Linux
Oct 18, 2026 CVE-2026-98736 Not yet scored Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Assigned by Linux
Oct 18, 2026 CVE-2026-98735 Not yet scored Bluetooth: hci_core: Serialize ACL scheduling with channel deletion Assigned by Linux
Oct 18, 2026 CVE-2026-98734 Not yet scored Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown Assigned by Linux
Oct 18, 2026 CVE-2026-98733 Not yet scored Bluetooth: hci_core: Serialize fragmented ISO packet queueing Assigned by Linux
Oct 18, 2026 CVE-2026-98732 Not yet scored Bluetooth: btintel: fix buffer over-read in btintel_hw_error() Assigned by Linux
Oct 18, 2026 CVE-2026-98731 Not yet scored Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() Assigned by Linux
Oct 18, 2026 CVE-2026-98730 Not yet scored Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() Assigned by Linux
Oct 18, 2026 CVE-2026-98729 Not yet scored x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h Assigned by Linux
Oct 18, 2026 CVE-2026-98728 Not yet scored tpm: fix off-by-four bounds check in tpm2_get_random() Assigned by Linux
Oct 18, 2026 CVE-2026-98727 Not yet scored nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known Assigned by Linux
Oct 18, 2026 CVE-2026-98726 Not yet scored nvme-multipath: fix underflow in ANA log bounds checks Assigned by Linux
Oct 18, 2026 CVE-2026-98725 Not yet scored nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() Assigned by Linux
Oct 18, 2026 CVE-2026-98724 Not yet scored nvmet: pci-epf: reject too-short SGL segments Assigned by Linux
Oct 18, 2026 CVE-2026-98723 Not yet scored nvmet: copy the hostid into the ctrl before creating PR pc_refs Assigned by Linux
Oct 18, 2026 CVE-2026-98722 Not yet scored mtd: block2mtd: Fix divide error when erase_size is zero Assigned by Linux
Oct 18, 2026 CVE-2026-98721 Not yet scored mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ Assigned by Linux
Oct 18, 2026 CVE-2026-98720 Not yet scored KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Assigned by Linux
Oct 18, 2026 CVE-2026-98719 Not yet scored KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it Assigned by Linux
Oct 18, 2026
Previous Page 3 of 137 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
