CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 15:50 UTC )
This week: 5,093 CVEs published, 323 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,093 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-90060 Not yet scored ALSA: control: Don't add invalid kcontrols to LED layer Assigned by Linux
Sep 17, 2026 CVE-2026-90059 High 7.5 net: stmmac: restore NET_IP_ALIGN in the RX DMA offset Assigned by Linux
Sep 17, 2026 CVE-2026-90058 Not yet scored net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup Assigned by Linux
Sep 17, 2026 CVE-2026-90057 High 7.8 slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() Assigned by Linux
Sep 17, 2026 CVE-2026-90056 Not yet scored net: fec: only stop PTP if it was initialized Assigned by Linux
Sep 17, 2026 CVE-2026-90055 Not yet scored usb: atm: usbatm: fix invalid ci_range initialization Assigned by Linux
Sep 17, 2026 CVE-2026-90054 Not yet scored tcp: fix corruption of urgent data on multi-segment retransmit Assigned by Linux
Sep 17, 2026 CVE-2026-90053 Not yet scored net/sched: sch_htb: limit htb_classify inner-class filter hops Assigned by Linux
Sep 17, 2026 CVE-2026-90051 High 7.8 tcp: reject non zerocopy devmem tx Assigned by Linux
Sep 17, 2026 CVE-2026-90049 Critical 9.3 net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() Assigned by Linux
Sep 16, 2026 CVE-2026-90048 Critical 9.8 fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() Assigned by Linux
Sep 16, 2026 CVE-2026-90047 High 7.8 drm/xe: Don't hand out the flat CCS storage as usable VRAM Assigned by Linux
Sep 16, 2026 CVE-2026-90046 High 7.8 mm/page_alloc: don't spin_trylock() in NMI on UP Assigned by Linux
Sep 16, 2026 CVE-2026-90045 High 7.8 USB: gadget: ffs: fix mm lifetime handling Assigned by Linux
Sep 16, 2026 CVE-2026-90044 High 7.8 usb: gadget: f_fs: Fix Use-After-Free in AIO error path Assigned by Linux
Sep 16, 2026 CVE-2026-90043 High 7.8 zram: fix slot lock bit position on big-endian 64-bit Assigned by Linux
Sep 16, 2026 CVE-2026-90042 Critical 9.8 ceph: properly decrypt filenames in vmalloc() buffers Assigned by Linux
Sep 16, 2026 CVE-2026-90041 High 8.8 HID: sony: clean up device list on probe failure Assigned by Linux
Sep 16, 2026 CVE-2026-90040 Not yet scored KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Assigned by Linux
Sep 16, 2026 CVE-2026-90039 Not yet scored NFSD: Guard admin state-revocation walks with NFSD_NET_UP Assigned by Linux
Sep 16, 2026 CVE-2026-90038 Critical 9.8 NFSD: Prevent client use-after-free during export state revocation Assigned by Linux
Sep 16, 2026 CVE-2026-90037 Critical 9.8 NFSD: Prevent client use-after-free during close_lru reaping Assigned by Linux
Sep 16, 2026 CVE-2026-90036 Critical 9.8 NFSD: Prevent client use-after-free during blocked-lock reaping Assigned by Linux
Sep 16, 2026 CVE-2026-90035 Not yet scored drm/amd/display: fix division by zero in get_estimated_bw() Assigned by Linux
Sep 16, 2026 CVE-2026-90034 Not yet scored usb: image: mdc800: change kmalloc() to kzalloc() Assigned by Linux
Sep 16, 2026 CVE-2026-90033 Not yet scored ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() Assigned by Linux
Sep 16, 2026 CVE-2026-90032 High 7.8 media: usbtv: keep device alive while ALSA card exists Assigned by Linux
Sep 16, 2026 CVE-2026-90031 Not yet scored usb-storage: ene_ub6250: fix race between scan work and probe Assigned by Linux
Sep 16, 2026 CVE-2026-90030 High 7.8 usb: dwc3: clear forceRM when issuing EndTransfer Assigned by Linux
Sep 16, 2026 CVE-2026-90029 Not yet scored usb: storage: realtek_cr: fix use-after-free on disconnect Assigned by Linux
Sep 16, 2026 CVE-2026-90028 Not yet scored usb: typec: hd3ss3220: track VBUS enable state per consumer Assigned by Linux
Sep 16, 2026 CVE-2026-90027 High 7.8 usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop Assigned by Linux
Sep 16, 2026 CVE-2026-90026 High 7.8 usb: typec: qcom-pmic: cancel reset_work on stop Assigned by Linux
Sep 16, 2026 CVE-2026-90025 High 7.7 usb: typec: ucsi: displayport: Fix OOB altmode array index Assigned by Linux
Sep 16, 2026 CVE-2026-90024 Not yet scored usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs Assigned by Linux
Sep 16, 2026 CVE-2026-90023 Not yet scored usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() Assigned by Linux
Sep 16, 2026 CVE-2026-90022 High 7.8 usb: gadget: f_midi2: fix use-after-free in string attribute show path Assigned by Linux
Sep 16, 2026 CVE-2026-90021 Not yet scored usb: gadget: f_midi: initialize work in f_midi_alloc() Assigned by Linux
Sep 16, 2026 CVE-2026-90020 Not yet scored USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() Assigned by Linux
Sep 16, 2026 CVE-2026-90019 Not yet scored usb: gadget: fix null pointer dereference in usb_put_function_instance() Assigned by Linux
Sep 16, 2026 CVE-2026-90018 High 8.8 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() Assigned by Linux
Sep 16, 2026 CVE-2026-90017 High 7.1 staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() Assigned by Linux
Sep 16, 2026 CVE-2026-90016 High 7.1 staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() Assigned by Linux
Sep 16, 2026 CVE-2026-90015 Not yet scored xhci: fix lost bounce buffers on TDs spanning several ring segments Assigned by Linux
Sep 16, 2026 CVE-2026-90014 High 7.8 tracing: Have show_event_filters/triggers files take trace array ref Assigned by Linux
Sep 16, 2026 CVE-2026-90013 High 7.8 tracing: Take trace_array reference when opening options file Assigned by Linux
Sep 16, 2026 CVE-2026-90012 Critical 9.8 spi: Fix DMA mapping ownership on partial map failure Assigned by Linux
Sep 16, 2026 CVE-2026-90011 Critical 9.1 scsi: target: iscsi: Reserve a terminator byte for the login payload Assigned by Linux
Sep 16, 2026 CVE-2026-90010 High 7.8 scsi: bsg: Cap io_uring sense copy to max_response_len Assigned by Linux
Sep 16, 2026 CVE-2026-90009 High 7.8 scsi: bsg: Fix TOCTOU in io_uring passthrough command setup Assigned by Linux
Sep 16, 2026
Previous Page 39 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
