CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 03:10 UTC )
This week: 4,658 CVEs published, 317 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,658 Show in the list Critical, last 7 days 317 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-89559 High 7.8 libnvdimm/labels: Prevent integer overflow in __nd_label_validate() Assigned by Linux
Sep 11, 2026 CVE-2026-89558 Critical 9.8 md/raid10: fix still_degraded being inverted in raid10_sync_request() Assigned by Linux
Sep 11, 2026 CVE-2026-89557 High 7.8 md: do overflow check for sb->bblog_shift in super_1_load() Assigned by Linux
Sep 11, 2026 CVE-2026-89556 Not yet scored module: validate string table section types Assigned by Linux
Sep 11, 2026 CVE-2026-89555 Critical 9.8 mpls: reload header after pskb_may_pull() Assigned by Linux
Sep 11, 2026 CVE-2026-89554 High 8.2 mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction Assigned by Linux
Sep 11, 2026 CVE-2026-89553 High 7.8 nouveau/gem: reserve the bo in the info ioctl around the vma lookup Assigned by Linux
Sep 11, 2026 CVE-2026-89552 Not yet scored params: fix charp corruption on allocation failure Assigned by Linux
Sep 11, 2026 CVE-2026-89551 Critical 9.8 SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow Assigned by Linux
Sep 11, 2026 CVE-2026-89550 Critical 9.8 SUNRPC: svcauth_gss: enforce krb5 token minimum length Assigned by Linux
Sep 11, 2026 CVE-2026-89549 High 7.5 sunrpc: route to a populated pool in svc_pool_for_cpu() Assigned by Linux
Sep 11, 2026 CVE-2026-89548 High 7.8 SUNRPC: always drain cache_cleaner before destroying a cache_detail Assigned by Linux
Sep 11, 2026 CVE-2026-89547 High 8.1 SUNRPC: Check svc pool percpu counter allocation Assigned by Linux
Sep 11, 2026 CVE-2026-89546 Critical 9.8 SUNRPC: close backchannel before destroying callback service Assigned by Linux
Sep 11, 2026 CVE-2026-89545 High 7.8 sunrpc: defer rq_argp and rq_resp free until after RCU grace period Assigned by Linux
Sep 11, 2026 CVE-2026-89544 High 7.5 SUNRPC: fix gssx_dec_option_array error path bugs Assigned by Linux
Sep 11, 2026 CVE-2026-89543 Not yet scored sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir Assigned by Linux
Sep 11, 2026 CVE-2026-89542 Critical 9.8 SUNRPC: harden gss_krb5_unwrap_v2 against short tokens Assigned by Linux
Sep 11, 2026 CVE-2026-89541 Critical 9.8 SUNRPC: harden gss_unwrap_resp_priv length checks Assigned by Linux
Sep 11, 2026 CVE-2026-89540 High 7.8 sunrpc: init gssp_lock before publishing proc entry Assigned by Linux
Sep 11, 2026 CVE-2026-89539 Not yet scored SUNRPC: reject duplicate CREDS_VALUE options Assigned by Linux
Sep 11, 2026 CVE-2026-89538 Critical 9.8 SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field Assigned by Linux
Sep 11, 2026 CVE-2026-89537 Critical 9.1 SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 Assigned by Linux
Sep 11, 2026 CVE-2026-89536 Critical 9.8 SUNRPC: wait for in-flight client TLS handshake callback Assigned by Linux
Sep 11, 2026 CVE-2026-89535 High 8.1 svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id Assigned by Linux
Sep 11, 2026 CVE-2026-89534 High 8.8 svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails Assigned by Linux
Sep 11, 2026 CVE-2026-89533 Critical 9.8 svcrdma: Fix offset arithmetic in read_chunk_range Assigned by Linux
Sep 11, 2026 CVE-2026-89532 Critical 9.1 svcrdma: Fix pcl_for_each_segment for empty chunks Assigned by Linux
Sep 11, 2026 CVE-2026-89531 Not yet scored svcrdma: Reject connection when transport allocation fails Assigned by Linux
Sep 11, 2026 CVE-2026-89530 Critical 9.8 svcrdma: Reject inline replies that overflow the pull-up buffer Assigned by Linux
Sep 11, 2026 CVE-2026-89529 Not yet scored svcrdma: Reject oversized Read segments at decode time Assigned by Linux
Sep 11, 2026 CVE-2026-89528 High 7.5 svcrdma: Reject Read lists that exceed the page budget Assigned by Linux
Sep 11, 2026 CVE-2026-89527 Not yet scored svcrdma: Use svc_xprt_put to free listener on create failure Assigned by Linux
Sep 11, 2026 CVE-2026-89526 Critical 9.8 svcrdma: Validate Read chunk positions before reconstruction Assigned by Linux
Sep 11, 2026 CVE-2026-89525 Not yet scored udf: reject VAT indexes equal to the entry count Assigned by Linux
Sep 11, 2026 CVE-2026-89524 High 8.1 wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets Assigned by Linux
Sep 11, 2026 CVE-2026-89523 High 7.8 wifi: mt76: mt7925: cancel pending mlo_pm_work Assigned by Linux
Sep 11, 2026 CVE-2026-89522 High 7.8 media: staging/ipu7: fix async notifier UAF on probe error path Assigned by Linux
Sep 11, 2026 CVE-2026-89521 High 7.3 sched/core: Handle pick_task() releasing the rq lock Assigned by Linux
Sep 11, 2026 CVE-2026-89520 High 7.8 sched/core: Make core-sched flips wait for in-flight selections Assigned by Linux
Sep 11, 2026 CVE-2026-89519 Not yet scored sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return Assigned by Linux
Sep 11, 2026 CVE-2026-89518 Not yet scored sched_ext: Fix this_rq() assumptions in dispatch kfuncs Assigned by Linux
Sep 11, 2026 CVE-2026-89517 Not yet scored sched_ext: Fix rq->core_pick corruption under core scheduling Assigned by Linux
Sep 11, 2026 CVE-2026-89516 Not yet scored sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users Assigned by Linux
Sep 11, 2026 CVE-2026-89515 Not yet scored scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() Assigned by Linux
Sep 11, 2026 CVE-2026-89514 Not yet scored scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock Assigned by Linux
Sep 11, 2026 CVE-2026-89513 High 8.8 RISC-V: KVM: Fix PMU event info array size overflow Assigned by Linux
Sep 11, 2026 CVE-2026-89512 Not yet scored remoteproc: scp: Fix device reference leak on failed lookup Assigned by Linux
Sep 11, 2026 CVE-2026-89511 High 7.5 qede: Fix NULL pointer dereference in TPA fragment processing Assigned by Linux
Sep 11, 2026 CVE-2026-89510 High 7.8 RDMA/cxgb4: Cancel reg_work before freeing device on remove Assigned by Linux
Sep 11, 2026
Previous Page 49 of 177 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
