CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 11:40 UTC )
This week: 5,206 CVEs published, 331 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,206 Show in the list Critical, last 7 days 331 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-90312 High 7.8 bpf: Check load-acquire src ptr type before the load Assigned by Linux
Sep 17, 2026 CVE-2026-90311 Not yet scored thermal: hwmon: Remove hwmon class device along with its parent Assigned by Linux
Sep 17, 2026 CVE-2026-90309 High 7.8 RDMA/erdma: Hold CQ references when processing EQ events Assigned by Linux
Sep 17, 2026 CVE-2026-90308 High 7.8 RDMA/erdma: Hold QP references for AE and CM processing Assigned by Linux
Sep 17, 2026 CVE-2026-90307 Not yet scored RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ Assigned by Linux
Sep 17, 2026 CVE-2026-90306 Not yet scored ARM: 9481/2: breakpoint: CFI breakpoints only on demand Assigned by Linux
Sep 17, 2026 CVE-2026-90305 Not yet scored ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK Assigned by Linux
Sep 17, 2026 CVE-2026-90304 Not yet scored ARM: 9484/1: enable interrupts when unhandled user faults are triggered Assigned by Linux
Sep 17, 2026 CVE-2026-90303 Not yet scored ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults Assigned by Linux
Sep 17, 2026 CVE-2026-90302 Not yet scored ocfs2: synchronize heartbeat callbacks with o2net teardown Assigned by Linux
Sep 17, 2026 CVE-2026-90301 High 8.1 ocfs2: o2hb: quiesce negotiate handlers and timeout work Assigned by Linux
Sep 17, 2026 CVE-2026-90300 Not yet scored bpf: Clear buf on error in __bpf_get_task_stack Assigned by Linux
Sep 17, 2026 CVE-2026-90299 Not yet scored bpf: Fix sleepable check for tracing/lsm prog Assigned by Linux
Sep 17, 2026 CVE-2026-90298 Not yet scored drm/sun4i: tcon: Drop TCON TOP device reference Assigned by Linux
Sep 17, 2026 CVE-2026-90297 Not yet scored drm/sun4i: crtc: Propagate layer initialization error Assigned by Linux
Sep 17, 2026 CVE-2026-90296 Not yet scored cpufreq: imx6q: fix devres accumulation across driver rebind Assigned by Linux
Sep 17, 2026 CVE-2026-90295 Not yet scored cpufreq: imx6q: fix out-of-bounds write when probed more than once Assigned by Linux
Sep 17, 2026 CVE-2026-90294 High 7.5 IB/isert: delay the final Login Response until the session is registered Assigned by Linux
Sep 17, 2026 CVE-2026-90293 High 7.5 IB/isert: post the full-feature receive buffers after session registration Assigned by Linux
Sep 17, 2026 CVE-2026-90292 High 7.8 RDMA/siw: Fix use-after-free in siw_accept() Assigned by Linux
Sep 17, 2026 CVE-2026-90291 High 7.8 module/dups: Fix use-after-free in kmod_dup_req lifetime handling Assigned by Linux
Sep 17, 2026 CVE-2026-90290 Not yet scored arm64: hibernate: Restore DAIF state on error Assigned by Linux
Sep 17, 2026 CVE-2026-90289 High 7.8 drm/amd/display: Resize MST HDCP per-connector arrays to 32 Assigned by Linux
Sep 17, 2026 CVE-2026-90288 High 7.4 phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure Assigned by Linux
Sep 17, 2026 CVE-2026-90287 Not yet scored phy: sunplus: fix error handling in sp_uphy_init() Assigned by Linux
Sep 17, 2026 CVE-2026-90286 High 8.8 drm/amdgpu/gfx6: Use PFP on the compute queues too Assigned by Linux
Sep 17, 2026 CVE-2026-90285 Not yet scored scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path Assigned by Linux
Sep 17, 2026 CVE-2026-90284 Not yet scored firmware_loader: do not queue completed sysfs fallback requests Assigned by Linux
Sep 17, 2026 CVE-2026-90283 Not yet scored hugetlbfs: release subpool on fill_super failure Assigned by Linux
Sep 17, 2026 CVE-2026-90282 Not yet scored phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend Assigned by Linux
Sep 17, 2026 CVE-2026-90281 Not yet scored phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Assigned by Linux
Sep 17, 2026 CVE-2026-90280 Not yet scored phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend Assigned by Linux
Sep 17, 2026 CVE-2026-90279 Not yet scored md/raid5: round bitmap stripes with sector division Assigned by Linux
Sep 17, 2026 CVE-2026-90278 Not yet scored md: wait for behind writes before destroying bitmap Assigned by Linux
Sep 17, 2026 CVE-2026-90277 Not yet scored md/md-llbitmap: prevent create failure bitmap UAF Assigned by Linux
Sep 17, 2026 CVE-2026-90276 Not yet scored md/md-llbitmap: stop daemon timer rearm on destroy Assigned by Linux
Sep 17, 2026 CVE-2026-90275 Not yet scored md/raid1: don't set array_frozen in raid1_takeover() Assigned by Linux
Sep 17, 2026 CVE-2026-90274 Not yet scored coresight: etm4x: fix underflow for usage of (nrseqstate - 1) Assigned by Linux
Sep 17, 2026 CVE-2026-90273 Not yet scored coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable Assigned by Linux
Sep 17, 2026 CVE-2026-90272 Not yet scored perf: arm_pmuv3: Zero initialize hw_id branch stack field Assigned by Linux
Sep 17, 2026 CVE-2026-90271 Not yet scored arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt Assigned by Linux
Sep 17, 2026 CVE-2026-90270 Not yet scored arm_mpam: Disable driver unbind to avoid UAF Assigned by Linux
Sep 17, 2026 CVE-2026-90269 Not yet scored bpf: Reject load-acquire from pointers requiring fault protection Assigned by Linux
Sep 17, 2026 CVE-2026-90268 High 8.1 scsi: sd: Fix error handling in sd_probe() after large pool creation failure Assigned by Linux
Sep 17, 2026 CVE-2026-90267 Not yet scored scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails Assigned by Linux
Sep 17, 2026 CVE-2026-90266 Not yet scored btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge Assigned by Linux
Sep 17, 2026 CVE-2026-90265 Not yet scored btrfs: defrag: fix deadlock between defrag and delalloc space reservation Assigned by Linux
Sep 17, 2026 CVE-2026-90264 Not yet scored btrfs: always wait for ordered extents to avoid OE races Assigned by Linux
Sep 17, 2026 CVE-2026-90263 Not yet scored btrfs: check if root is readonly when setting posix acl Assigned by Linux
Sep 17, 2026 CVE-2026-90262 Not yet scored btrfs: retry verity reads for not-uptodate Merkle folios Assigned by Linux
Sep 17, 2026
Previous Page 34 of 150 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
