CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 10:20 UTC )
This week: 5,182 CVEs published, 330 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,182 Show in the list Critical, last 7 days 330 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-90412 Not yet scored nvmet: fix return status of RMI log page on allocation failure Assigned by Linux
Sep 17, 2026 CVE-2026-90411 Not yet scored nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request Assigned by Linux
Sep 17, 2026 CVE-2026-90410 Not yet scored spi: davinci: switch to managed controller allocation Assigned by Linux
Sep 17, 2026 CVE-2026-90409 Not yet scored drm/panthor: Add vm_bind region with kbo range overlap check Assigned by Linux
Sep 17, 2026 CVE-2026-90408 High 7.7 wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() Assigned by Linux
Sep 17, 2026 CVE-2026-90407 High 7.7 wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() Assigned by Linux
Sep 17, 2026 CVE-2026-90406 Not yet scored media: qcom: iris: handle runtime PM resume failure in core deinit Assigned by Linux
Sep 17, 2026 CVE-2026-90405 Not yet scored media: stm32: dcmi: fix some error handling bugs in probe() Assigned by Linux
Sep 17, 2026 CVE-2026-90404 Not yet scored platform/chrome: cros_ec_debugfs: Unregister panic notifier Assigned by Linux
Sep 17, 2026 CVE-2026-90403 High 7.0 wifi: rtlwifi: pci: fix error path in rtl_pci_probe() Assigned by Linux
Sep 17, 2026 CVE-2026-90402 High 7.0 bus: mhi: host: Fix controller cleanup on EDL sysfs failure Assigned by Linux
Sep 17, 2026 CVE-2026-90401 High 7.1 md: remove REQ_NOWAIT support from raid1/10/456 Assigned by Linux
Sep 17, 2026 CVE-2026-90400 Not yet scored md: recheck spare changes before starting sync Assigned by Linux
Sep 17, 2026 CVE-2026-90399 High 8.4 wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() Assigned by Linux
Sep 17, 2026 CVE-2026-90398 High 8.4 wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() Assigned by Linux
Sep 17, 2026 CVE-2026-90397 Not yet scored firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published Assigned by Linux
Sep 17, 2026 CVE-2026-90396 Not yet scored block: fix dio leak on metadata mapping error Assigned by Linux
Sep 17, 2026 CVE-2026-90395 Not yet scored power: supply: isp1704_charger: cancel work on remove Assigned by Linux
Sep 17, 2026 CVE-2026-90394 Not yet scored power: supply: sc2731_charger: cancel work on remove Assigned by Linux
Sep 17, 2026 CVE-2026-90393 Not yet scored bpf: Fix potential UAF in bpf_netns_link_update_prog Assigned by Linux
Sep 17, 2026 CVE-2026-90392 High 7.8 bpf: Fix potential UAF when reading bpf link info Assigned by Linux
Sep 17, 2026 CVE-2026-90391 Not yet scored lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone Assigned by Linux
Sep 17, 2026 CVE-2026-90390 Not yet scored md/bitmap: resume array on backlog_store() error path Assigned by Linux
Sep 17, 2026 CVE-2026-90389 Not yet scored md: scope memalloc_noio to allocation critical sections Assigned by Linux
Sep 17, 2026 CVE-2026-90388 High 7.8 iommu/dma: Check atomic pool allocation result directly Assigned by Linux
Sep 17, 2026 CVE-2026-90387 High 7.8 swiotlb: Preserve allocation virtual address for dynamic pools Assigned by Linux
Sep 17, 2026 CVE-2026-90386 Not yet scored i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices Assigned by Linux
Sep 17, 2026 CVE-2026-90385 Not yet scored md/raid1: create serial pool adding rdev to array with serialize_policy=1 Assigned by Linux
Sep 17, 2026 CVE-2026-90384 Not yet scored iomap: release the folio batch on iomap callback failures Assigned by Linux
Sep 17, 2026 CVE-2026-90383 High 7.8 misc: sgi-gru: remove interrupt-context page-table walks Assigned by Linux
Sep 17, 2026 CVE-2026-90382 Not yet scored wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length Assigned by Linux
Sep 17, 2026 CVE-2026-90381 High 8.8 wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() Assigned by Linux
Sep 17, 2026 CVE-2026-90380 High 8.8 wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete Assigned by Linux
Sep 17, 2026 CVE-2026-90379 High 8.8 wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash Assigned by Linux
Sep 17, 2026 CVE-2026-90378 Not yet scored wifi: mt76: mt792x: Fix memory leak in SDIO TX path Assigned by Linux
Sep 17, 2026 CVE-2026-90377 Not yet scored wifi: mt76: fix RX data queuing of RRO 3.0 Assigned by Linux
Sep 17, 2026 CVE-2026-90376 Not yet scored wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP Assigned by Linux
Sep 17, 2026 CVE-2026-90375 Not yet scored wifi: mt76: fix non-AQL packet accounting for MLO stations Assigned by Linux
Sep 17, 2026 CVE-2026-90374 Not yet scored wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] Assigned by Linux
Sep 17, 2026 CVE-2026-90373 Not yet scored wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear Assigned by Linux
Sep 17, 2026 CVE-2026-90372 High 7.1 wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss Assigned by Linux
Sep 17, 2026 CVE-2026-90371 High 8.8 wifi: mt76: fix RXDMAD_C buffer recycling race Assigned by Linux
Sep 17, 2026 CVE-2026-90370 Not yet scored wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config Assigned by Linux
Sep 17, 2026 CVE-2026-90369 Not yet scored wifi: mt76: fix out-of-bounds access in mmio copy helpers Assigned by Linux
Sep 17, 2026 CVE-2026-90368 Not yet scored wifi: mt76: mt7915: unwind state on add_interface failure Assigned by Linux
Sep 17, 2026 CVE-2026-90367 High 8.8 wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER Assigned by Linux
Sep 17, 2026 CVE-2026-90366 Not yet scored wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV Assigned by Linux
Sep 17, 2026 CVE-2026-90365 Not yet scored wifi: mt76: cancel reset and rc work on device unregister Assigned by Linux
Sep 17, 2026 CVE-2026-90364 Not yet scored ACPI: processor: Unregister cpufreq notifier on init failure Assigned by Linux
Sep 17, 2026 CVE-2026-90363 Not yet scored drm/msm: don't tear down KMS twice when KMS init fails Assigned by Linux
Sep 17, 2026
Previous Page 32 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
