CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 15:00 UTC )
This week: 5,055 CVEs published, 320 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,055 Show in the list Critical, last 7 days 320 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-90110 Critical 9.4 inetpeer: randomize RB-tree node comparison using SipHash Assigned by Linux
Sep 17, 2026 CVE-2026-90109 Not yet scored net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue Assigned by Linux
Sep 17, 2026 CVE-2026-90108 Not yet scored net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition Assigned by Linux
Sep 17, 2026 CVE-2026-90107 Not yet scored net/smc: free pending qentry in smc_llc_flow_stop() before memset Assigned by Linux
Sep 17, 2026 CVE-2026-90106 Not yet scored net: bridge: arp/nd proxy: fix reading neigh ha Assigned by Linux
Sep 17, 2026 CVE-2026-90105 Not yet scored vxlan: fix reading neigh ha Assigned by Linux
Sep 17, 2026 CVE-2026-90104 Critical 9.8 NFSv4.1: zero referring call lists before decoding Assigned by Linux
Sep 17, 2026 CVE-2026-90103 High 7.5 NFSv4.2: fix LAYOUTSTATS send buffer exhaustion Assigned by Linux
Sep 17, 2026 CVE-2026-90102 High 7.5 NFSv4/pnfs: key the data server cache on the NFS version Assigned by Linux
Sep 17, 2026 CVE-2026-90101 Not yet scored bnxt_en: Fix call to hardware monitoring event handler Assigned by Linux
Sep 17, 2026 CVE-2026-90100 Not yet scored ptp: netc: fix period truncation and potential divide-by-zero in PEROUT Assigned by Linux
Sep 17, 2026 CVE-2026-90099 Not yet scored net/sched: account classifier filter allocations to memcg Assigned by Linux
Sep 17, 2026 CVE-2026-90098 Not yet scored net: sparx5: fix sleep in atomic context in MAC table access Assigned by Linux
Sep 17, 2026 CVE-2026-90097 Not yet scored Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition Assigned by Linux
Sep 17, 2026 CVE-2026-90096 Not yet scored fuse: invalidate the correct range after O_APPEND direct write Assigned by Linux
Sep 17, 2026 CVE-2026-90095 Not yet scored fuse: Fix the condition to enable over-io-uring Assigned by Linux
Sep 17, 2026 CVE-2026-90094 Not yet scored arm64: process: Fix context switching MTE store-only tag check Assigned by Linux
Sep 17, 2026 CVE-2026-90093 High 7.8 Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Assigned by Linux
Sep 17, 2026 CVE-2026-90092 High 8.0 Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN Assigned by Linux
Sep 17, 2026 CVE-2026-90091 High 8.0 Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan Assigned by Linux
Sep 17, 2026 CVE-2026-90090 Not yet scored Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path Assigned by Linux
Sep 17, 2026 CVE-2026-90089 High 7.1 Bluetooth: btnxpuart: Validate the FW dump header length Assigned by Linux
Sep 17, 2026 CVE-2026-90088 Not yet scored Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop Assigned by Linux
Sep 17, 2026 CVE-2026-90087 Not yet scored Bluetooth: do not leak an hci_conn when a second LE connect is rejected Assigned by Linux
Sep 17, 2026 CVE-2026-90086 Not yet scored xsk: honor XDP_TX_METADATA in zero-copy path Assigned by Linux
Sep 17, 2026 CVE-2026-90085 Not yet scored octeontx2-af: fix NULL deref in NIX TM tree debugfs read path Assigned by Linux
Sep 17, 2026 CVE-2026-90084 Not yet scored octeontx2-vf: fix workqueue and netdev race in probe/remove Assigned by Linux
Sep 17, 2026 CVE-2026-90083 Not yet scored net/sched: act_ife: Only operate on Ethernet frames Assigned by Linux
Sep 17, 2026 CVE-2026-90082 Not yet scored net: mana: Cap MSI-X vectors to the device MSI-X table size Assigned by Linux
Sep 17, 2026 CVE-2026-90081 Not yet scored net/rds: use wq_has_sleeper() in rds_cong_map_updated() Assigned by Linux
Sep 17, 2026 CVE-2026-90080 Not yet scored octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup Assigned by Linux
Sep 17, 2026 CVE-2026-90079 Not yet scored octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() Assigned by Linux
Sep 17, 2026 CVE-2026-90078 Not yet scored net/sched: act_skbmod: fix length calculations and avoid invalid header warnings Assigned by Linux
Sep 17, 2026 CVE-2026-90077 Not yet scored net: fix a resource leak in copy_net_ns() error handling path Assigned by Linux
Sep 17, 2026 CVE-2026-90076 Not yet scored net/sched: fq: add overflow bounds to quantum and initial quantum Assigned by Linux
Sep 17, 2026 CVE-2026-90075 Not yet scored net/sched: fq_codel: clamp default quantum and mtu Assigned by Linux
Sep 17, 2026 CVE-2026-90074 Not yet scored net/sched: fq_pie: clamp default quantum to avoid signed overflow Assigned by Linux
Sep 17, 2026 CVE-2026-90073 Not yet scored net/sched: hhf: clamp quantum before hhf_change() to avoid overflow Assigned by Linux
Sep 17, 2026 CVE-2026-90072 Not yet scored net/sched: sfq: clamp quantum to avoid signed overflow soft lockup Assigned by Linux
Sep 17, 2026 CVE-2026-90071 High 7.8 net/sched: sch_teql: restore skb->dev on the slave failure path Assigned by Linux
Sep 17, 2026 CVE-2026-90070 Not yet scored tpm: st33zp24: Return zero on status read failure Assigned by Linux
Sep 17, 2026 CVE-2026-90069 High 7.8 crypto: acomp - allocate async request context when cloning Assigned by Linux
Sep 17, 2026 CVE-2026-90068 Not yet scored ASoC: dapm: Fix off-by-one check on the second enum channel Assigned by Linux
Sep 17, 2026 CVE-2026-90067 High 7.5 libceph: validate banner payload length Assigned by Linux
Sep 17, 2026 CVE-2026-90066 Not yet scored samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify Assigned by Linux
Sep 17, 2026 CVE-2026-90065 Not yet scored net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure Assigned by Linux
Sep 17, 2026 CVE-2026-90064 Not yet scored drm/xe: Reject page faults from non-fault-mode scratch VMs Assigned by Linux
Sep 17, 2026 CVE-2026-90063 Not yet scored virtio-net: Ensure that TCP packets don't overflow gso_segs Assigned by Linux
Sep 17, 2026 CVE-2026-90062 High 7.1 netfilter: nf_tables: move hardware offload step after building the chain blob Assigned by Linux
Sep 17, 2026 CVE-2026-90061 Not yet scored netfilter: nf_tables: skip double clone set expressions on element insert Assigned by Linux
Sep 17, 2026
Previous Page 38 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
