CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 14:10 UTC )
This week: 5,056 CVEs published, 323 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,056 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-90160 Not yet scored lwt_bpf: Restore reserved headroom after xmit program Assigned by Linux
Sep 17, 2026 CVE-2026-90159 Not yet scored bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks Assigned by Linux
Sep 17, 2026 CVE-2026-90158 Not yet scored m68k: nfcon: Do not call console_is_registered() in nfcon_device() Assigned by Linux
Sep 17, 2026 CVE-2026-90157 Not yet scored bpf: Reject negative optlen in cgroup getsockopt hook Assigned by Linux
Sep 17, 2026 CVE-2026-90156 Not yet scored ksmbd: safely discard unregistered deferred locks Assigned by Linux
Sep 17, 2026 CVE-2026-90155 Not yet scored ksmbd: detach blocked lock requests before freeing Assigned by Linux
Sep 17, 2026 CVE-2026-90154 Not yet scored ksmbd: scope session state changes to bound connections Assigned by Linux
Sep 17, 2026 CVE-2026-90153 High 8.1 ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size Assigned by Linux
Sep 17, 2026 CVE-2026-90152 Not yet scored smb/server: fix session leak in ksmbd_session_register() Assigned by Linux
Sep 17, 2026 CVE-2026-90151 Critical 9.8 NFSv4: remove callback IDR entry on client allocation failure Assigned by Linux
Sep 17, 2026 CVE-2026-90150 Not yet scored pnfs/blocklayout: Fix device leaks on parse failure Assigned by Linux
Sep 17, 2026 CVE-2026-90149 High 7.5 NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers Assigned by Linux
Sep 17, 2026 CVE-2026-90148 Not yet scored NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() Assigned by Linux
Sep 17, 2026 CVE-2026-90147 Not yet scored clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() Assigned by Linux
Sep 17, 2026 CVE-2026-90146 High 7.8 bpf, xdp: move offload check into dev_xdp_install() Assigned by Linux
Sep 17, 2026 CVE-2026-90145 High 7.1 hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed Assigned by Linux
Sep 17, 2026 CVE-2026-90144 Not yet scored dpll: fix NULL deref in dpll_device_ops() during teardown race Assigned by Linux
Sep 17, 2026 CVE-2026-90143 High 7.8 net: kcm: Hold RCU read lock while running BPF parser Assigned by Linux
Sep 17, 2026 CVE-2026-90142 High 7.8 virtio_net: Fix resize of the RX ring Assigned by Linux
Sep 17, 2026 CVE-2026-90141 High 7.3 ipvs: fix integer overflow in ftp helper port/address parsing Assigned by Linux
Sep 17, 2026 CVE-2026-90140 Not yet scored cuse: wait for pending RCU callbacks on module exit Assigned by Linux
Sep 17, 2026 CVE-2026-90139 Not yet scored fuse: check for NULL root inode in fuse_fill_super_submount Assigned by Linux
Sep 17, 2026 CVE-2026-90138 Not yet scored vsock: don't check the listener's sk_err in vsock_accept() Assigned by Linux
Sep 17, 2026 CVE-2026-90137 High 7.7 platform/x86: hp-bioscfg: fix password encoding bounds check Assigned by Linux
Sep 17, 2026 CVE-2026-90136 Not yet scored platform/x86/amd/hsmp: Reject negative power cap writes in hwmon Assigned by Linux
Sep 17, 2026 CVE-2026-90135 Not yet scored net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() Assigned by Linux
Sep 17, 2026 CVE-2026-90134 Not yet scored ntfs: fix kmap_local_page() usage in compress Assigned by Linux
Sep 17, 2026 CVE-2026-90133 High 7.8 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() Assigned by Linux
Sep 17, 2026 CVE-2026-90132 High 7.1 ntfs: reject unprivileged writes to reserved $LX* xattrs Assigned by Linux
Sep 17, 2026 CVE-2026-90131 High 7.1 ntfs: serialize resident iomap reads with mrec_lock Assigned by Linux
Sep 17, 2026 CVE-2026-90130 Not yet scored vdpa_sim: fix cleanup after worker creation failure Assigned by Linux
Sep 17, 2026 CVE-2026-90129 Not yet scored virtio_balloon: quiesce balloon work before device shutdown Assigned by Linux
Sep 17, 2026 CVE-2026-90128 Not yet scored vdpa/mlx5: fix wrong list iterated in add_direct_chain error path Assigned by Linux
Sep 17, 2026 CVE-2026-90127 Not yet scored virtio: rtc: time out alarm requests Assigned by Linux
Sep 17, 2026 CVE-2026-90126 Not yet scored rtc: pcf8563: fix clock provider leak on unbind Assigned by Linux
Sep 17, 2026 CVE-2026-90125 Not yet scored smb: client: fix request buffer leak in smb2_new_read_req() Assigned by Linux
Sep 17, 2026 CVE-2026-90124 Not yet scored irqchip/renesas-rzg2l: Fix loss of interrupt Assigned by Linux
Sep 17, 2026 CVE-2026-90123 Not yet scored irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback Assigned by Linux
Sep 17, 2026 CVE-2026-90122 Not yet scored clk: visconti: Make sure clk_init_data is fully initialized Assigned by Linux
Sep 17, 2026 CVE-2026-90121 Not yet scored irqchip/gic-v5: Clear per-CPU IRS data on teardown Assigned by Linux
Sep 17, 2026 CVE-2026-90120 High 8.4 irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing Assigned by Linux
Sep 17, 2026 CVE-2026-90119 Not yet scored ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup Assigned by Linux
Sep 17, 2026 CVE-2026-90118 High 7.8 ntfs: fix off-by-one page overflow in ntfs_decompress() Assigned by Linux
Sep 17, 2026 CVE-2026-90117 Not yet scored ntfs: validate usa_ofs before preserving the update sequence number Assigned by Linux
Sep 17, 2026 CVE-2026-90116 Not yet scored ALSA: mtpav: shut down output timer before card teardown Assigned by Linux
Sep 17, 2026 CVE-2026-90115 Not yet scored xsk: fix NULL pointer dereference in __xsk_rcv() Assigned by Linux
Sep 17, 2026 CVE-2026-90114 Not yet scored net: bridge: Reject descending VLAN tunnel ranges Assigned by Linux
Sep 17, 2026 CVE-2026-90113 Not yet scored netdevsim: update queue NAPI association on queue reset Assigned by Linux
Sep 17, 2026 CVE-2026-90112 Not yet scored net: qlcnic: validate unified ROM sections before loading Assigned by Linux
Sep 17, 2026 CVE-2026-90111 High 7.8 ip6mr: do not clone dst in ip6mr_cache_report() Assigned by Linux
Sep 17, 2026
Previous Page 37 of 152 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
