CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 14:10 UTC )
This week: 5,511 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,511 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98668 Not yet scored iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. Assigned by Linux
Oct 18, 2026 CVE-2026-98667 Not yet scored iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data Assigned by Linux
Oct 18, 2026 CVE-2026-98666 Not yet scored iio: gyro: adis16136: fix unprotected debugfs reads Assigned by Linux
Oct 18, 2026 CVE-2026-98665 Not yet scored iio: health: max30102: fix NULL dereference in interrupt handler Assigned by Linux
Oct 18, 2026 CVE-2026-98664 Not yet scored iio: imu: adis16400: fix unprotected debugfs reads Assigned by Linux
Oct 18, 2026 CVE-2026-98663 Not yet scored iio: imu: adis16480: fix unprotected debugfs reads Assigned by Linux
Oct 18, 2026 CVE-2026-98662 Not yet scored iio: light: gp2ap020a00f: drain irq_work after free_irq Assigned by Linux
Oct 18, 2026 CVE-2026-98661 Not yet scored iio: light: rohm-bu27034: Fix infinite delay on error Assigned by Linux
Oct 18, 2026 CVE-2026-98660 Not yet scored iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup Assigned by Linux
Oct 18, 2026 CVE-2026-98659 Not yet scored iio: pressure: rohm-bm1390: Return error when read fails Assigned by Linux
Oct 18, 2026 CVE-2026-98658 Not yet scored iio: proximity: aw96103: validate firmware data length Assigned by Linux
Oct 18, 2026 CVE-2026-98657 Not yet scored iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure Assigned by Linux
Oct 18, 2026 CVE-2026-98656 Not yet scored iio: trigger: cancel reenable_work before freeing trigger Assigned by Linux
Oct 18, 2026 CVE-2026-98655 Not yet scored perf: Require kernel access for text poke events Assigned by Linux
Oct 18, 2026 CVE-2026-98654 Not yet scored drm/amd/display: Atomize IRQ register read/modify/write ops Assigned by Linux
Oct 18, 2026 CVE-2026-98653 Not yet scored KVM: s390: Fix _gaccess_shadow_fault() Assigned by Linux
Oct 18, 2026 CVE-2026-98652 Not yet scored KVM: s390: Add missing srcu in kvm_s390_set_irq_state() Assigned by Linux
Oct 18, 2026 CVE-2026-98651 Not yet scored KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() Assigned by Linux
Oct 18, 2026 CVE-2026-98650 Not yet scored KVM: s390: Fix potential races in dat skey functions Assigned by Linux
Oct 18, 2026 CVE-2026-98649 Not yet scored KVM: s390: Fix race in _destroy_pages_crste() Assigned by Linux
Oct 18, 2026 CVE-2026-98648 Not yet scored s390/uv: Prevent potential out-of-bounds read Assigned by Linux
Oct 18, 2026 CVE-2026-98647 Not yet scored bpf: Fix divide-by-zero in btf_struct_walk() Assigned by Linux
Oct 18, 2026 CVE-2026-98646 Not yet scored tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context Assigned by Linux
Oct 18, 2026 CVE-2026-98645 Not yet scored HID: winwing: fix use-after-free in force feedback teardown Assigned by Linux
Oct 18, 2026 CVE-2026-98644 Not yet scored bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Assigned by Linux
Oct 18, 2026 CVE-2026-98643 Not yet scored bpf: Fix out-of-bounds read of rtt_min in sock_ops Assigned by Linux
Oct 18, 2026 CVE-2026-98642 Not yet scored bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk Assigned by Linux
Oct 18, 2026 CVE-2026-98641 Not yet scored bpf, arm64: set up the frame pointer for the exception callback Assigned by Linux
Oct 18, 2026 CVE-2026-98640 Not yet scored HID: amd_sfh: Validate PCI BAR size before mapping Assigned by Linux
Oct 18, 2026 CVE-2026-98639 Not yet scored KVM: riscv: Fix NACL hfence entry update order Assigned by Linux
Oct 18, 2026 CVE-2026-98638 Not yet scored KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() Assigned by Linux
Oct 18, 2026 CVE-2026-98637 Not yet scored KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure Assigned by Linux
Oct 18, 2026 CVE-2026-98636 Not yet scored squashfs: Add dictionary size range check to prevent shift-out-of-bounds Assigned by Linux
Oct 18, 2026 CVE-2026-98635 Not yet scored scsi: block: Fix zones_cond out-of-bounds write on zone report Assigned by Linux
Oct 18, 2026 CVE-2026-98634 Not yet scored scsi: sd_zbc: Reject disks with too many zones Assigned by Linux
Oct 18, 2026 CVE-2026-98633 Not yet scored Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() Assigned by Linux
Oct 18, 2026 CVE-2026-98632 Not yet scored Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel Assigned by Linux
Oct 18, 2026 CVE-2026-98631 Not yet scored xsk: Use a 32-bit compare in xsk_map_gen_lookup Assigned by Linux
Oct 18, 2026 CVE-2026-98630 Not yet scored eth: fbnic: Fix payload page pool error cleanup Assigned by Linux
Oct 18, 2026 CVE-2026-98629 Not yet scored net/sched: cls_u32: fix manual hash table handle IDR aliasing Assigned by Linux
Oct 18, 2026 CVE-2026-98628 Not yet scored bpf: Make post-verification instruction rewrites killable Assigned by Linux
Oct 18, 2026 CVE-2026-98627 Not yet scored bpf: Preserve packet pointer class displacement in regsafe() Assigned by Linux
Oct 18, 2026 CVE-2026-98626 Not yet scored bpf: Restrict CO-RE poisoning to relocatable instructions Assigned by Linux
Oct 18, 2026 CVE-2026-98625 Not yet scored netfilter: flowtable: publish HW_DEAD after worker is done Assigned by Linux
Oct 18, 2026 CVE-2026-98624 Not yet scored netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Assigned by Linux
Oct 18, 2026 CVE-2026-98623 Not yet scored drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Assigned by Linux
Oct 18, 2026 CVE-2026-98622 Not yet scored net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Assigned by Linux
Oct 18, 2026 CVE-2026-98621 Not yet scored net: gue: reject invalid REMCSUM offsets Assigned by Linux
Oct 18, 2026 CVE-2026-98620 Not yet scored net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure Assigned by Linux
Oct 18, 2026 CVE-2026-98619 Not yet scored net: ethtool: keep rtnl_lock for the ioctl self test Assigned by Linux
Oct 18, 2026
Previous Page 5 of 138 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
