CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 19:40 UTC )
This week: 3,540 CVEs published, 247 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 3,540 Show in the list Critical, last 7 days 247 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-89858 Not yet scored scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() Assigned by Linux
Sep 16, 2026 CVE-2026-89857 Critical 9.8 scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject Assigned by Linux
Sep 16, 2026 CVE-2026-89856 High 8.4 scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation Assigned by Linux
Sep 16, 2026 CVE-2026-89855 Not yet scored scsi: qla2xxx: Serialize flash version read in reset handler Assigned by Linux
Sep 16, 2026 CVE-2026-89854 High 7.8 scsi: qla2xxx: Fix cs84xx use-after-free on host teardown Assigned by Linux
Sep 16, 2026 CVE-2026-89853 Not yet scored scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump Assigned by Linux
Sep 16, 2026 CVE-2026-89852 Not yet scored scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() Assigned by Linux
Sep 16, 2026 CVE-2026-89851 Not yet scored scsi: qla2xxx: Fix FCE trace enable parsing in debugfs Assigned by Linux
Sep 16, 2026 CVE-2026-89850 Not yet scored scsi: qla2xxx: Don't query firmware state while chip is down Assigned by Linux
Sep 16, 2026 CVE-2026-89849 High 8.8 scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path Assigned by Linux
Sep 16, 2026 CVE-2026-89848 High 8.1 scsi: qla2xxx: Quiesce response IRQ before freeing request queue Assigned by Linux
Sep 16, 2026 CVE-2026-89847 Critical 9.8 scsi: qla2xxx: Avoid double completion in async IOCB timeout Assigned by Linux
Sep 16, 2026 CVE-2026-89846 Critical 9.1 scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read Assigned by Linux
Sep 16, 2026 CVE-2026-89845 Not yet scored scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() Assigned by Linux
Sep 16, 2026 CVE-2026-89844 High 8.8 scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition Assigned by Linux
Sep 16, 2026 CVE-2026-89843 Not yet scored scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Assigned by Linux
Sep 16, 2026 CVE-2026-89842 Not yet scored scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started Assigned by Linux
Sep 16, 2026 CVE-2026-89841 High 7.8 f2fs: only redirty pinned folios in redirty_blocks Assigned by Linux
Sep 16, 2026 CVE-2026-89840 High 7.1 f2fs: validate MOVE_RANGE destination size Assigned by Linux
Sep 16, 2026 CVE-2026-89839 Not yet scored f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() Assigned by Linux
Sep 16, 2026 CVE-2026-89838 High 7.1 f2fs: limit recovery filename logging to stored length Assigned by Linux
Sep 16, 2026 CVE-2026-89837 Not yet scored f2fs: fix dentry folio leak in find_in_level Assigned by Linux
Sep 16, 2026 CVE-2026-89836 High 7.8 f2fs: fix folio_nr_pages() race after put in large folio invalidate Assigned by Linux
Sep 16, 2026 CVE-2026-89835 Not yet scored f2fs: avoid NULL checkpoint thread access in sysfs Assigned by Linux
Sep 16, 2026 CVE-2026-89834 Not yet scored f2fs: fix to migrate all curseg types during free_segment_range Assigned by Linux
Sep 16, 2026 CVE-2026-89833 Not yet scored f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() Assigned by Linux
Sep 16, 2026 CVE-2026-89832 High 7.8 f2fs: fix to clear dirty flag on folio in error path Assigned by Linux
Sep 16, 2026 CVE-2026-89831 Not yet scored f2fs: protect critical_task_priority updates with s_umount Assigned by Linux
Sep 16, 2026 CVE-2026-89830 Not yet scored f2fs: fix valid block count leak on data block allocation failure Assigned by Linux
Sep 16, 2026 CVE-2026-89829 High 7.8 f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer() Assigned by Linux
Sep 16, 2026 CVE-2026-89828 Not yet scored drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init() Assigned by Linux
Sep 16, 2026 CVE-2026-89827 Not yet scored drm/amdgpu: avoid force-completing uninitialized UVD rings Assigned by Linux
Sep 16, 2026 CVE-2026-89826 High 7.1 drm/panthor: harden firmware build-info bounds checks Assigned by Linux
Sep 16, 2026 CVE-2026-89825 High 7.8 drm/panthor: fix firmware control interface bounds checks Assigned by Linux
Sep 16, 2026 CVE-2026-89824 Not yet scored drm/panel-edp: fix i2c adapter leak on probe failure Assigned by Linux
Sep 16, 2026 CVE-2026-89823 High 7.8 drm: fix race between partial drm_dev_register() failure and ioctl Assigned by Linux
Sep 16, 2026 CVE-2026-89822 Not yet scored drm/i915: Guard against NULL driver_data in i915_pci_probe() Assigned by Linux
Sep 16, 2026 CVE-2026-89821 Not yet scored drm/amd/display: avoid divide-by-zero in __is_lut_linear() Assigned by Linux
Sep 16, 2026 CVE-2026-89820 Not yet scored drm/amd/display: fix dc_lock leak on GPU reset error paths Assigned by Linux
Sep 16, 2026 CVE-2026-89819 High 7.8 drm/amd/display: validate plane degamma LUT size for private color prop Assigned by Linux
Sep 16, 2026 CVE-2026-89818 High 7.1 drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check Assigned by Linux
Sep 16, 2026 CVE-2026-89817 Not yet scored drm/gud: NUL-terminate TV mode names read from the device Assigned by Linux
Sep 16, 2026 CVE-2026-89816 Not yet scored drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used Assigned by Linux
Sep 16, 2026 CVE-2026-89815 High 7.8 drm/ttm: Drop tt->restore after successful restore Assigned by Linux
Sep 16, 2026 CVE-2026-89814 High 7.8 drm/amdgpu: clamp the isolation index for rings outside a partition Assigned by Linux
Sep 16, 2026 CVE-2026-89813 Not yet scored drm/amdgpu: force complete the KIQ ring fences on reset Assigned by Linux
Sep 16, 2026 CVE-2026-89812 Not yet scored drm/amdgpu: force complete the MES ring fences on reset Assigned by Linux
Sep 16, 2026 CVE-2026-89811 High 8.8 drm/amdkfd: Add TLB flush after MES queue eviction/suspension Assigned by Linux
Sep 16, 2026 CVE-2026-89810 High 7.8 drm/amdkfd: Fix error path at svm_migrate_copy_to_ram Assigned by Linux
Sep 16, 2026 CVE-2026-89809 Not yet scored drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds Assigned by Linux
Sep 16, 2026
Previous Page 43 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
