CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 08:40 UTC )
This week: 5,189 CVEs published, 332 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,189 Show in the list Critical, last 7 days 332 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-93063 High 8.4 wifi: iwlwifi: mei: check SAP message length before reading it Assigned by Linux
Sep 17, 2026 CVE-2026-93062 Not yet scored wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments Assigned by Linux
Sep 17, 2026 CVE-2026-93061 Not yet scored gpu: host1x: Avoid stack over-read in debug output helpers Assigned by Linux
Sep 17, 2026 CVE-2026-93060 Not yet scored drm/msm/adreno: fix use after free on error path in a6xx_gpu_init() Assigned by Linux
Sep 17, 2026 CVE-2026-93059 Not yet scored drm/msm: Fix task_struct reference leak in recover_worker Assigned by Linux
Sep 17, 2026 CVE-2026-93058 Not yet scored drm/msm: Only fini scheduler after successful init Assigned by Linux
Sep 17, 2026 CVE-2026-93057 Not yet scored scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context Assigned by Linux
Sep 17, 2026 CVE-2026-93056 Not yet scored usb: gadget: f_uac1_legacy: remove broken string configfs attributes Assigned by Linux
Sep 17, 2026 CVE-2026-93055 Not yet scored UDF symlink pathComponent header OOB read Assigned by Linux
Sep 17, 2026 CVE-2026-93054 High 7.0 uio: Fix stale info pointer in failed registration path Assigned by Linux
Sep 17, 2026 CVE-2026-93053 Not yet scored speakup: keyhelp: guard letter_offsets possible out-of-range indexing Assigned by Linux
Sep 17, 2026 CVE-2026-93052 Not yet scored misc: bcm-vk: Use acquire/release for msgq_inited Assigned by Linux
Sep 17, 2026 CVE-2026-93051 Not yet scored misc: ad525x_dpot: use driver core groups for sysfs files Assigned by Linux
Sep 17, 2026 CVE-2026-93050 Not yet scored ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove Assigned by Linux
Sep 17, 2026 CVE-2026-93049 Not yet scored mtd: mtdswap: Avoid freeing registered blktrans device twice Assigned by Linux
Sep 17, 2026 CVE-2026-93048 Not yet scored mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() Assigned by Linux
Sep 17, 2026 CVE-2026-93047 Not yet scored drm/v3d: Associate BOs with every job that accesses them Assigned by Linux
Sep 17, 2026 CVE-2026-93046 High 7.0 software node: Fix software_node_get_reference_args() with index -1 Assigned by Linux
Sep 17, 2026 CVE-2026-93045 High 7.8 bpf: Reject arena frees below the arena base Assigned by Linux
Sep 17, 2026 CVE-2026-93044 Not yet scored bpf: Disallow interpreter fallback for arena-related insns Assigned by Linux
Sep 17, 2026 CVE-2026-93043 Not yet scored bpf: Disallow interpreter fallback for gotox insn Assigned by Linux
Sep 17, 2026 CVE-2026-93042 High 8.8 dmaengine: dw-edma: Terminate all descriptors without callbacks Assigned by Linux
Sep 17, 2026 CVE-2026-93041 Not yet scored dmaengine: dw-edma: Serialize abort state updates Assigned by Linux
Sep 17, 2026 CVE-2026-93040 Not yet scored dmaengine: dw-edma: Serialize channel state checks Assigned by Linux
Sep 17, 2026 CVE-2026-93039 High 7.4 ASoC: meson: Keep link pointers valid on realloc failure Assigned by Linux
Sep 17, 2026 CVE-2026-93038 Not yet scored iio: dac: ad5686: missing NULL check on match data Assigned by Linux
Sep 17, 2026 CVE-2026-93037 High 7.8 RDMA/hfi1: Propagate sdma_txinit_ahg() errors Assigned by Linux
Sep 17, 2026 CVE-2026-92525 High 7.1 RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] Assigned by Linux
Sep 17, 2026 CVE-2026-92524 Not yet scored irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() Assigned by Linux
Sep 17, 2026 CVE-2026-92523 Not yet scored RDMA/nldev: validate dynamic counter attribute length Assigned by Linux
Sep 17, 2026 CVE-2026-92522 High 7.3 ACPI: processor: validate MADT IOAPIC entry bounds Assigned by Linux
Sep 17, 2026 CVE-2026-92521 Not yet scored ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root Assigned by Linux
Sep 17, 2026 CVE-2026-92520 Not yet scored bpf: Zero queue and stack outputs on lock failure Assigned by Linux
Sep 17, 2026 CVE-2026-92519 Not yet scored riscv, bpf: Fix memory leak in bpf_jit_free Assigned by Linux
Sep 17, 2026 CVE-2026-92518 High 7.8 riscv, bpf: Fix kernel stack corruption in tailcall with CFI Assigned by Linux
Sep 17, 2026 CVE-2026-92517 Not yet scored bpf, riscv: Fix extable handling for arena load_acquire Assigned by Linux
Sep 17, 2026 CVE-2026-92516 Not yet scored bpf: Fix offset warn check for bpf_res_spin_lock Assigned by Linux
Sep 17, 2026 CVE-2026-92515 Not yet scored bpf: Preserve unique-field state across nested structs Assigned by Linux
Sep 17, 2026 CVE-2026-92514 Not yet scored RDMA/erdma: Fix CEQ tasklet use-after-free on removal Assigned by Linux
Sep 17, 2026 CVE-2026-92513 Not yet scored RDMA/mana_ib: drain QP references after partial table insertion Assigned by Linux
Sep 17, 2026 CVE-2026-92512 Not yet scored RDMA/core: Fix use after free in ib_query_qp() Assigned by Linux
Sep 17, 2026 CVE-2026-92511 High 7.8 RDMA/core: Fix potential use after free in ib_destroy_cq_user() Assigned by Linux
Sep 17, 2026 CVE-2026-92510 High 7.8 RDMA/core: Fix potential use after free in ib_destroy_srq_user() Assigned by Linux
Sep 17, 2026 CVE-2026-92509 Not yet scored RDMA/core: Fix potential use after free in counter_release() Assigned by Linux
Sep 17, 2026 CVE-2026-92508 High 7.8 RDMA/core: Fix potential use after free in ib_free_cq() Assigned by Linux
Sep 17, 2026 CVE-2026-92507 High 7.8 RDMA/core: Fix potential use after free in ib_dealloc_pd_user() Assigned by Linux
Sep 17, 2026 CVE-2026-92506 Not yet scored firmware: arm_scmi: Fix requested device removal race Assigned by Linux
Sep 17, 2026 CVE-2026-92505 Not yet scored iommu/amd: Fix undefined behavior in devid_write debugfs function Assigned by Linux
Sep 17, 2026 CVE-2026-92504 High 7.0 thermal: intel: int3400: clean up ODVP on probe failures Assigned by Linux
Sep 17, 2026 CVE-2026-92503 Not yet scored ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() Assigned by Linux
Sep 17, 2026
Previous Page 30 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
