CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 16:50 UTC )
This week: 5,038 CVEs published, 314 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,038 Show in the list Critical, last 7 days 314 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-90008 High 7.8 scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame Assigned by Linux
Sep 16, 2026 CVE-2026-90007 High 7.8 scsi: pm8001: Use rollback index when freeing MSI-X vectors Assigned by Linux
Sep 16, 2026 CVE-2026-90006 Not yet scored samples/damon/mtier: handle damon_stop() failure Assigned by Linux
Sep 16, 2026 CVE-2026-90005 Not yet scored samples/damon/wsse: handle damon_start() failure Assigned by Linux
Sep 16, 2026 CVE-2026-90004 Not yet scored mm/damon/core: handle region split failure in apply_min_nr_regions() Assigned by Linux
Sep 16, 2026 CVE-2026-90003 High 7.8 futex: Prevent rcuwait use-after-free during requeue PI Assigned by Linux
Sep 16, 2026 CVE-2026-90002 High 7.8 ftrace: Take trace_array reference before accessing its ftrace_ops Assigned by Linux
Sep 16, 2026 CVE-2026-90001 High 7.8 HID: bpf: serialize device reference release in struct_ops destroy path Assigned by Linux
Sep 16, 2026 CVE-2026-90000 High 8.8 HID: rmi: fix OOB access with undersized RMI reports Assigned by Linux
Sep 16, 2026 CVE-2026-89999 High 8.1 HID: wacom: validate report length in wacom_intuos_pro2_bt_irq Assigned by Linux
Sep 16, 2026 CVE-2026-89998 High 7.8 dm: fix race when loading and unloading a table Assigned by Linux
Sep 16, 2026 CVE-2026-89997 High 7.8 dm: fix resume-vs-remove race Assigned by Linux
Sep 16, 2026 CVE-2026-89996 Not yet scored dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds Assigned by Linux
Sep 16, 2026 CVE-2026-89995 High 8.8 dma-direct: return struct page from dma_direct_alloc_from_pool() Assigned by Linux
Sep 16, 2026 CVE-2026-89994 High 7.8 dmaengine: fsl-edma: tracing: no ptr dereference during log output Assigned by Linux
Sep 16, 2026 CVE-2026-89993 Not yet scored dmaengine: dw-edma: Initialize IRQ data before requesting IRQs Assigned by Linux
Sep 16, 2026 CVE-2026-89992 High 8.4 cpuidle: dt_idle_genpd: kfree() the original name allocation Assigned by Linux
Sep 16, 2026 CVE-2026-89991 Not yet scored bpf: Fix infinite loop in pcpu_freelist push with one possible CPU Assigned by Linux
Sep 16, 2026 CVE-2026-89990 Critical 9.8 ceph: lock mutex in ceph_mds_check_access() Assigned by Linux
Sep 16, 2026 CVE-2026-89989 Not yet scored ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() Assigned by Linux
Sep 16, 2026 CVE-2026-89988 High 7.8 kprobes: Protect kprobe_blacklist with RCU Assigned by Linux
Sep 16, 2026 CVE-2026-89987 Not yet scored mm/huge_memory: transfer the pmd dirty bit to the folio on zap Assigned by Linux
Sep 16, 2026 CVE-2026-89986 High 7.8 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() Assigned by Linux
Sep 16, 2026 CVE-2026-89985 High 7.8 memcg: keep folio's objcg same as its node Assigned by Linux
Sep 16, 2026 CVE-2026-89984 Not yet scored perf/x86/intel: Fix kernel address leakages in LBR stack Assigned by Linux
Sep 16, 2026 CVE-2026-89983 Not yet scored i2c: core: fix debugfs UAF on adapter removal Assigned by Linux
Sep 16, 2026 CVE-2026-89982 Not yet scored i2c: mux: Fix channel node leak on adapter add failure Assigned by Linux
Sep 16, 2026 CVE-2026-89981 Not yet scored arm64: Don't read GMID_EL1 when MTE is disabled Assigned by Linux
Sep 16, 2026 CVE-2026-89980 High 8.4 ALSA: harmony: initialize locks before requesting IRQ Assigned by Linux
Sep 16, 2026 CVE-2026-89979 High 7.8 ALSA: pcm: Fix race between non-atomic ops and trigger-start Assigned by Linux
Sep 16, 2026 CVE-2026-89978 Not yet scored accel/amdxdna: return early from a zero-length flush Assigned by Linux
Sep 16, 2026 CVE-2026-89977 Not yet scored accel/ethosu: check MMIO mapping errors in probe Assigned by Linux
Sep 16, 2026 CVE-2026-89976 Not yet scored accel/ethosu: fix job completion fence cleanup Assigned by Linux
Sep 16, 2026 CVE-2026-89975 Not yet scored nvme-fabrics: fix DHCHAP secret leak on parse failure Assigned by Linux
Sep 16, 2026 CVE-2026-89974 High 7.5 nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails Assigned by Linux
Sep 16, 2026 CVE-2026-89973 High 8.2 nvme-tcp: check the data direction of a C2HData PDU Assigned by Linux
Sep 16, 2026 CVE-2026-89972 Critical 9.8 nvme: add missing SRCU grace period in error path Assigned by Linux
Sep 16, 2026 CVE-2026-89971 High 7.5 nvme: skip the zoned limits update if the zone info query failed Assigned by Linux
Sep 16, 2026 CVE-2026-89970 Critical 9.8 nvmet-auth: Synchronize timeout work during SQ teardown Assigned by Linux
Sep 16, 2026 CVE-2026-89969 Critical 9.8 nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU Assigned by Linux
Sep 16, 2026 CVE-2026-89968 High 7.5 nvmet-tcp: reject unsolicited H2CData PDUs Assigned by Linux
Sep 16, 2026 CVE-2026-89967 High 7.8 mm/migrate_device: avoid out-of-bounds writes for compound folios Assigned by Linux
Sep 16, 2026 CVE-2026-89966 Not yet scored mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio Assigned by Linux
Sep 16, 2026 CVE-2026-89965 High 7.8 nvdimm/btt: reject an arena whose nfree is below the lane count Assigned by Linux
Sep 16, 2026 CVE-2026-89964 Not yet scored parisc: eisa: Fix infinite loop when parsing invalid IRQ value Assigned by Linux
Sep 16, 2026 CVE-2026-89963 Not yet scored powerpc/kexec_file: Fix null-ptr-def in extra size calculation Assigned by Linux
Sep 16, 2026 CVE-2026-89962 Not yet scored powerpc/kexec_file: Prevent kexec range truncation Assigned by Linux
Sep 16, 2026 CVE-2026-89961 High 7.8 powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population Assigned by Linux
Sep 16, 2026 CVE-2026-89960 High 8.8 s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() Assigned by Linux
Sep 16, 2026 CVE-2026-89959 High 8.8 s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove Assigned by Linux
Sep 16, 2026
Previous Page 40 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
