CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 11:00 UTC )
This week: 5,202 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,202 Show in the list Critical, last 7 days 329 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-90362 Not yet scored drm/msm/dsi: Drop dev_pm_opp_set_rate(0) Assigned by Linux
Sep 17, 2026 CVE-2026-90361 Not yet scored wifi: ath11k: fix leak in ath11k_service_ready_ext_event() Assigned by Linux
Sep 17, 2026 CVE-2026-90360 Not yet scored regulator: core: use system_freezable_wq for init complete work Assigned by Linux
Sep 17, 2026 CVE-2026-90359 Not yet scored bpf: Reject >8 byte return values on return-reading trampoline paths Assigned by Linux
Sep 17, 2026 CVE-2026-90358 High 7.8 bpf, x86: Fix trampoline stack size for 128-bit arguments Assigned by Linux
Sep 17, 2026 CVE-2026-90357 High 8.8 wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement Assigned by Linux
Sep 17, 2026 CVE-2026-90356 Not yet scored wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset Assigned by Linux
Sep 17, 2026 CVE-2026-90355 Not yet scored wifi: mt76: mt7996: clear stale link state on full reset Assigned by Linux
Sep 17, 2026 CVE-2026-90354 Not yet scored wifi: mt76: mt7915: fix double hif2 init on the non-WED path Assigned by Linux
Sep 17, 2026 CVE-2026-90353 High 7.0 wifi: mt76: mt7915: fix ext PHY use-after-free on register error path Assigned by Linux
Sep 17, 2026 CVE-2026-90352 Not yet scored wifi: mt76: mt7915: release hif2 reference on probe IRQ failure Assigned by Linux
Sep 17, 2026 CVE-2026-90351 Not yet scored wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed Assigned by Linux
Sep 17, 2026 CVE-2026-90350 Not yet scored wifi: mt76: reject out-of-range link ids in mt76_vif_link() Assigned by Linux
Sep 17, 2026 CVE-2026-90349 Not yet scored wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx() Assigned by Linux
Sep 17, 2026 CVE-2026-90348 Not yet scored wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump Assigned by Linux
Sep 17, 2026 CVE-2026-90347 High 8.4 arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry Assigned by Linux
Sep 17, 2026 CVE-2026-90346 Not yet scored wifi: nl80211: clean up color-change beacon data on errors Assigned by Linux
Sep 17, 2026 CVE-2026-90345 Not yet scored wifi: brcmfmac: fix P2P action frame handling without device vif Assigned by Linux
Sep 17, 2026 CVE-2026-90344 Not yet scored wifi: mac80211: disconnect on CSA to channel 0 Assigned by Linux
Sep 17, 2026 CVE-2026-90343 High 7.8 wifi: cfg80211: stop PMSR before P2P and NAN teardown Assigned by Linux
Sep 17, 2026 CVE-2026-90342 Not yet scored bpf: Fix mmap_lock deadlock on arena lock failure Assigned by Linux
Sep 17, 2026 CVE-2026-90341 High 7.7 firmware: coreboot: Validate table bounds Assigned by Linux
Sep 17, 2026 CVE-2026-90340 Not yet scored pinctrl: generic: free maps on pinctrl_generic_to_map() failure Assigned by Linux
Sep 17, 2026 CVE-2026-90339 Not yet scored powerpc/syscall: Fix syscall skip handling for seccomp and ptrace Assigned by Linux
Sep 17, 2026 CVE-2026-90338 Not yet scored serial: amba-pl011: keep console clock enabled for atomic writes Assigned by Linux
Sep 17, 2026 CVE-2026-90337 Not yet scored serial: core: do fallible allocations before the console can be registered Assigned by Linux
Sep 17, 2026 CVE-2026-90336 Not yet scored serial: core: clear freed pointers on uart_register_driver() failure Assigned by Linux
Sep 17, 2026 CVE-2026-90335 Not yet scored tty: skip cdev_del() when no cdev is registered Assigned by Linux
Sep 17, 2026 CVE-2026-90334 Not yet scored tty: clear cdev pointer after cdev_add() failure Assigned by Linux
Sep 17, 2026 CVE-2026-90333 Not yet scored dm-integrity: replace forgeable discard filler with a keyed sector marker Assigned by Linux
Sep 17, 2026 CVE-2026-90332 High 8.2 PCI: dwc: ep: Flush cached MSI write before unmapping the iATU Assigned by Linux
Sep 17, 2026 CVE-2026-90331 Not yet scored HID: asus: refactor the two workqueues and init sequence Assigned by Linux
Sep 17, 2026 CVE-2026-90330 Not yet scored HID: logitech-hidpp: Fix FF device cleanup on init failure Assigned by Linux
Sep 17, 2026 CVE-2026-90329 High 8.8 HID: synchronize input before cleaning up a failed probe Assigned by Linux
Sep 17, 2026 CVE-2026-90328 Not yet scored HID: steam: Reject short reads Assigned by Linux
Sep 17, 2026 CVE-2026-90327 Not yet scored phonet: pep: do not write beyond optlen in getsockopt Assigned by Linux
Sep 17, 2026 CVE-2026-90326 High 7.8 blk-cgroup: fix race between policy activation and blkg destruction Assigned by Linux
Sep 17, 2026 CVE-2026-90325 High 7.8 blk-cgroup: skip dying blkg in blkcg_activate_policy() Assigned by Linux
Sep 17, 2026 CVE-2026-90324 High 7.8 ublk: check import_ubuf() return value Assigned by Linux
Sep 17, 2026 CVE-2026-90323 Not yet scored ublk: validate auto buf reg before taking uring_cmd Assigned by Linux
Sep 17, 2026 CVE-2026-90322 Not yet scored ocfs2/cluster: keep heartbeat local node stable Assigned by Linux
Sep 17, 2026 CVE-2026-90321 High 7.8 ocfs2: validate inline xattrs during inode block validation Assigned by Linux
Sep 17, 2026 CVE-2026-90320 High 7.8 ocfs2: validate external xattr entries when reading metadata Assigned by Linux
Sep 17, 2026 CVE-2026-90319 Not yet scored rapidio: clear mport->net when rio_add_net() fails Assigned by Linux
Sep 17, 2026 CVE-2026-90318 Not yet scored fat: release buffer head after rebuilding parent Assigned by Linux
Sep 17, 2026 CVE-2026-90317 High 7.8 bpf: Invalidate RCU pointers after final spin unlock Assigned by Linux
Sep 17, 2026 CVE-2026-90316 High 7.8 drm/omap: dsi: Do not copy isr table Assigned by Linux
Sep 17, 2026 CVE-2026-90315 Not yet scored PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Assigned by Linux
Sep 17, 2026 CVE-2026-90314 Not yet scored remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() Assigned by Linux
Sep 17, 2026 CVE-2026-90313 Not yet scored bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed Assigned by Linux
Sep 17, 2026
Previous Page 33 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
