CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 00:10 UTC )
This week: 4,848 CVEs published, 323 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,848 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-89608 High 7.1 ecryptfs: pass packet set buffer size to parser Assigned by Linux
Sep 11, 2026 CVE-2026-89607 High 7.8 ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet Assigned by Linux
Sep 11, 2026 CVE-2026-89606 High 7.8 ecryptfs: reject too-small tag 70 packets Assigned by Linux
Sep 11, 2026 CVE-2026-89605 High 7.8 ecryptfs: release message context on send failure Assigned by Linux
Sep 11, 2026 CVE-2026-89604 Not yet scored efivarfs: Rate limit statfs() handler Assigned by Linux
Sep 11, 2026 CVE-2026-89602 High 7.8 erofs: skip sufficiently large global buffers when resizing Assigned by Linux
Sep 11, 2026 CVE-2026-89601 High 8.8 ext2: Fix lost inode updates for IS_SYNC inodes Assigned by Linux
Sep 11, 2026 CVE-2026-89600 High 7.8 fanotify: fix use-after-free of file range info Assigned by Linux
Sep 11, 2026 CVE-2026-89599 High 8.4 fbdev: omapfb: panel-dsi-cm: initialize lock before registering display Assigned by Linux
Sep 11, 2026 CVE-2026-89598 Not yet scored fbdev: ssd1307fb: defer I2C transfers from damage callbacks Assigned by Linux
Sep 11, 2026 CVE-2026-89597 High 7.8 fbdev: uvesafb: unregister connector callback on init failure Assigned by Linux
Sep 11, 2026 CVE-2026-89596 High 7.1 forcedeth: fix off-by-one when saving/restoring non-PCI config space Assigned by Linux
Sep 11, 2026 CVE-2026-89595 Not yet scored fsnotify: Fix stale object mask after concurrent mark updates Assigned by Linux
Sep 11, 2026 CVE-2026-89594 High 7.8 hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device Assigned by Linux
Sep 11, 2026 CVE-2026-89593 High 7.1 hugetlb: only adjust reservation during unmapping if mapcount is 0 Assigned by Linux
Sep 11, 2026 CVE-2026-89592 Not yet scored accel/rocket: fix NULL dereference and integer overflow in rocket_job_push() Assigned by Linux
Sep 11, 2026 CVE-2026-89591 Not yet scored accel/rocket: initialize job domain before cleanup paths Assigned by Linux
Sep 11, 2026 CVE-2026-89590 Not yet scored accel/rocket: Fix error path handling in rocket_job_run() Assigned by Linux
Sep 11, 2026 CVE-2026-89589 Not yet scored acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks Assigned by Linux
Sep 11, 2026 CVE-2026-89588 High 8.4 ACPI: APEI: GHES: fix ARM section length accounting after header Assigned by Linux
Sep 11, 2026 CVE-2026-89587 High 7.8 ACPI: pfr_update: fix stack buffer overflow in query_capability() Assigned by Linux
Sep 11, 2026 CVE-2026-89586 High 8.2 ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes Assigned by Linux
Sep 11, 2026 CVE-2026-89585 High 7.8 auxdisplay: charlcd: cancel backlight work on registration failure Assigned by Linux
Sep 11, 2026 CVE-2026-89584 High 7.8 block: validate user space vectors during extraction Assigned by Linux
Sep 11, 2026 CVE-2026-89583 High 8.1 Bluetooth: eir: Fix OOB read in eir_get_service_data() Assigned by Linux
Sep 11, 2026 CVE-2026-89582 Not yet scored bnx2x: fix double free in bnx2x_init_firmware() error path Assigned by Linux
Sep 11, 2026 CVE-2026-89581 High 7.8 bpf, x86: Fix per-CPU address resolution into an extended register Assigned by Linux
Sep 11, 2026 CVE-2026-89580 High 7.8 bpf: Disable preemption in __bpf_get_stack Assigned by Linux
Sep 11, 2026 CVE-2026-89579 High 7.8 bpf: Harden bloom filter sizing and indexing on 32-bit kernels Assigned by Linux
Sep 11, 2026 CVE-2026-89578 Not yet scored dm-io: clone the source bio instead of copying its biovec Assigned by Linux
Sep 11, 2026 CVE-2026-89577 Not yet scored dm-io: report non-retryable errors separatedly Assigned by Linux
Sep 11, 2026 CVE-2026-89576 Not yet scored dm-era: fix shadowed superblock leak on take-snap failure Assigned by Linux
Sep 11, 2026 CVE-2026-89575 Not yet scored dm raid1: reserve space for NUL-terminator in build_constructor_string() Assigned by Linux
Sep 11, 2026 CVE-2026-89574 High 7.8 dm array: validate array block headers on read Assigned by Linux
Sep 11, 2026 CVE-2026-89573 High 7.8 dm array: reject an array block whose value size is not the caller's Assigned by Linux
Sep 11, 2026 CVE-2026-89572 Not yet scored cpufreq: apple-soc: Fix OPP table cleanup Assigned by Linux
Sep 11, 2026 CVE-2026-89571 High 7.1 cxl/features: bound fwctl command payload to the input buffer Assigned by Linux
Sep 11, 2026 CVE-2026-89570 High 7.8 cxl/mce: Make the MCE notifier per-region Assigned by Linux
Sep 11, 2026 CVE-2026-89569 High 8.8 Bluetooth: RFCOMM: serialize security confirmation handling Assigned by Linux
Sep 11, 2026 CVE-2026-89568 Not yet scored kho: fix size calculation in kho_preserved_memory_reserve() Assigned by Linux
Sep 11, 2026 CVE-2026-89567 Not yet scored jbd2: bound shrinker scans by examined checkpoint buffers Assigned by Linux
Sep 11, 2026 CVE-2026-89566 Not yet scored jbd2: check need_resched() when skipping busy checkpoint buffers Assigned by Linux
Sep 11, 2026 CVE-2026-89565 Not yet scored ipip: fix skb leak in collect_md mode when metadata_dst allocation fails Assigned by Linux
Sep 11, 2026 CVE-2026-89564 High 7.8 ip: orphan prefetched skbs before multicast forwarding Assigned by Linux
Sep 11, 2026 CVE-2026-89563 High 7.8 ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() Assigned by Linux
Sep 11, 2026 CVE-2026-89562 High 7.8 ip6_gre: fix hardware header length for NBMA tunnels Assigned by Linux
Sep 11, 2026 CVE-2026-89561 High 7.5 ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() Assigned by Linux
Sep 11, 2026 CVE-2026-89560 High 8.4 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Assigned by Linux
Sep 11, 2026 CVE-2026-89559 High 7.8 libnvdimm/labels: Prevent integer overflow in __nd_label_validate() Assigned by Linux
Sep 11, 2026 CVE-2026-89558 Critical 9.8 md/raid10: fix still_degraded being inverted in raid10_sync_request() Assigned by Linux
Sep 11, 2026
Previous Page 48 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
