CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 09:23 UTC )
This week: 5,165 CVEs published, 330 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,165 Show in the list Critical, last 7 days 330 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-92502 Not yet scored ext4: clear stale xarray tags on folios skipped during writeback Assigned by Linux
Sep 17, 2026 CVE-2026-92501 Not yet scored ext4: drain in-flight DIO before buffered write fallback Assigned by Linux
Sep 17, 2026 CVE-2026-92500 Not yet scored ext4: use fsdata to track inline data write state and fix race Assigned by Linux
Sep 17, 2026 CVE-2026-92499 Not yet scored ext4: validate readdir offset before accessing dirent Assigned by Linux
Sep 17, 2026 CVE-2026-92498 Not yet scored wifi: ath6kl: avoid buffer overreads in WMI event handlers Assigned by Linux
Sep 17, 2026 CVE-2026-92497 Not yet scored wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() Assigned by Linux
Sep 17, 2026 CVE-2026-92496 Not yet scored wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() Assigned by Linux
Sep 17, 2026 CVE-2026-92495 Not yet scored RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap Assigned by Linux
Sep 17, 2026 CVE-2026-92494 Not yet scored ext4: fix buffer_head leak in ext4_init_orphan_info Assigned by Linux
Sep 17, 2026 CVE-2026-92493 Not yet scored cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active Assigned by Linux
Sep 17, 2026 CVE-2026-92492 Not yet scored cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks Assigned by Linux
Sep 17, 2026 CVE-2026-92491 Not yet scored firmware: arm_scmi: Roll back partial protocol table registration Assigned by Linux
Sep 17, 2026 CVE-2026-92490 Not yet scored firmware: arm_scmi: Unrequest devices if driver registration fails Assigned by Linux
Sep 17, 2026 CVE-2026-92489 Critical 9.8 xfrm: Fix skb double-free in xfrm_dev_direct_output() Assigned by Linux
Sep 17, 2026 CVE-2026-92488 High 7.0 RDMA/erdma: complete object teardown when the destroy command fails Assigned by Linux
Sep 17, 2026 CVE-2026-92487 Not yet scored exfat: fix valid_size extension over a shared writable mapping Assigned by Linux
Sep 17, 2026 CVE-2026-92486 Not yet scored bpf: Fix CFI mismatch in task work callback Assigned by Linux
Sep 17, 2026 CVE-2026-92485 High 7.8 bpf: Fix WARNING in bpf_tracing_link_release Assigned by Linux
Sep 17, 2026 CVE-2026-92484 Not yet scored cxl/region: Fix use-after-free in find_pos_and_ways() error path Assigned by Linux
Sep 17, 2026 CVE-2026-92483 Not yet scored liveupdate: Remember FLB retrieve() status Assigned by Linux
Sep 17, 2026 CVE-2026-92482 Not yet scored pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip Assigned by Linux
Sep 17, 2026 CVE-2026-92481 Not yet scored pinctrl: mediatek: free EINT resources on unbind Assigned by Linux
Sep 17, 2026 CVE-2026-92480 Not yet scored scsi: ufs: core: Validate string descriptors Assigned by Linux
Sep 17, 2026 CVE-2026-92479 Not yet scored scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags Assigned by Linux
Sep 17, 2026 CVE-2026-92478 Not yet scored scsi: ufs: core: Validate connected lane counts Assigned by Linux
Sep 17, 2026 CVE-2026-92477 Not yet scored scsi: ufs: debugfs: Reserve space for a string terminator Assigned by Linux
Sep 17, 2026 CVE-2026-92476 Not yet scored crypto: keembay - Initialize completion before requesting IRQ Assigned by Linux
Sep 17, 2026 CVE-2026-90435 High 7.8 RDMA/mlx5: Fix integer overflow of user QP buffer size Assigned by Linux
Sep 17, 2026 CVE-2026-90434 Not yet scored isofs: release zisofs block pointer buffer head Assigned by Linux
Sep 17, 2026 CVE-2026-90433 Not yet scored spi: oc-tiny: switch to managed controller allocation Assigned by Linux
Sep 17, 2026 CVE-2026-90432 Not yet scored sched_ext: Abort directly from the hardlockup handler Assigned by Linux
Sep 17, 2026 CVE-2026-90431 Not yet scored remoteproc: Prevent crash handling to race with rproc_del() Assigned by Linux
Sep 17, 2026 CVE-2026-90430 Not yet scored iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized Assigned by Linux
Sep 17, 2026 CVE-2026-90429 High 7.8 iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init Assigned by Linux
Sep 17, 2026 CVE-2026-90428 Not yet scored iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs Assigned by Linux
Sep 17, 2026 CVE-2026-90427 High 7.4 iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() Assigned by Linux
Sep 17, 2026 CVE-2026-90426 Not yet scored iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs Assigned by Linux
Sep 17, 2026 CVE-2026-90425 High 8.8 iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID Assigned by Linux
Sep 17, 2026 CVE-2026-90424 Not yet scored iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path Assigned by Linux
Sep 17, 2026 CVE-2026-90423 High 7.8 RDMA/rxe: Fix UAF in ODP init error-handling path Assigned by Linux
Sep 17, 2026 CVE-2026-90422 Not yet scored clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path Assigned by Linux
Sep 17, 2026 CVE-2026-90421 Not yet scored PCI: Fix UAF when probe runs concurrent to dyn ID removal Assigned by Linux
Sep 17, 2026 CVE-2026-90420 Not yet scored nilfs2: fix infinite loop in nilfs_clean_segments() Assigned by Linux
Sep 17, 2026 CVE-2026-90419 High 7.1 nilfs2: prevent out-of-bounds read in super root block parsing Assigned by Linux
Sep 17, 2026 CVE-2026-90418 Not yet scored nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch Assigned by Linux
Sep 17, 2026 CVE-2026-90417 Not yet scored RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() Assigned by Linux
Sep 17, 2026 CVE-2026-90416 Not yet scored RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs Assigned by Linux
Sep 17, 2026 CVE-2026-90415 Not yet scored RDMA/cxgb4: free STAG index when TPT entry write fails Assigned by Linux
Sep 17, 2026 CVE-2026-90414 Critical 9.1 IB/isert: reject PDUs declaring more data than was received Assigned by Linux
Sep 17, 2026 CVE-2026-90413 Critical 9.1 IB/isert: reject login PDUs declaring more data than was received Assigned by Linux
Sep 17, 2026
Previous Page 31 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
