CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 05:00 UTC )
This week: 4,653 CVEs published, 316 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,653 Show in the list Critical, last 7 days 316 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-89459 High 7.0 s390/percpu: Fix MVIY_PERCPU() with older binutils Assigned by Linux
Sep 11, 2026 CVE-2026-89458 Not yet scored s390/dasd: Do not complete a failed ESE read as successful Assigned by Linux
Sep 11, 2026 CVE-2026-89457 Not yet scored s390/dasd: Guard sysfs discipline callbacks against unallocated private data Assigned by Linux
Sep 11, 2026 CVE-2026-89456 High 7.0 s390/dasd: Propagate partial completion length across ERP recovery Assigned by Linux
Sep 11, 2026 CVE-2026-89455 Not yet scored PCI: plda: Fix use-after-free of event IRQs during teardown Assigned by Linux
Sep 11, 2026 CVE-2026-89454 Not yet scored PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() Assigned by Linux
Sep 11, 2026 CVE-2026-89453 Not yet scored iommu/amd: Put PCI device after handling PPR faults Assigned by Linux
Sep 11, 2026 CVE-2026-89452 High 8.4 iommu/msm: Unwind probe state on registration failure Assigned by Linux
Sep 11, 2026 CVE-2026-89451 Not yet scored iommu/sva: Set handle->dev before the SVA handle is visible Assigned by Linux
Sep 11, 2026 CVE-2026-89450 High 8.8 iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field Assigned by Linux
Sep 11, 2026 CVE-2026-89449 Not yet scored iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add Assigned by Linux
Sep 11, 2026 CVE-2026-89448 Critical 9.3 iommu/vt-d: Force requesting ACS when tboot is enabled Assigned by Linux
Sep 11, 2026 CVE-2026-89447 Not yet scored iommufd: Avoid locking internal accesses during unmap Assigned by Linux
Sep 11, 2026 CVE-2026-89446 Not yet scored iommufd: Release current IOAS on xa_store() failure Assigned by Linux
Sep 11, 2026 CVE-2026-89445 High 8.8 iommufd: Fix UAF in selftest IOPF reporting Assigned by Linux
Sep 11, 2026 CVE-2026-89444 Not yet scored platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer Assigned by Linux
Sep 11, 2026 CVE-2026-89443 High 7.1 platform/x86: ISST: Validate level in perf mask ioctls Assigned by Linux
Sep 11, 2026 CVE-2026-89442 High 7.8 platform/x86: ISST: Validate socket ID in clos_assoc ioctl Assigned by Linux
Sep 11, 2026 CVE-2026-89441 High 7.8 mmc: via-sdmmc: cancel card-detect work on remove Assigned by Linux
Sep 11, 2026 CVE-2026-89440 High 7.8 mmc: via-sdmmc: stop card-detect handling on probe failure Assigned by Linux
Sep 11, 2026 CVE-2026-89439 Not yet scored platform/x86: ISST: Add a NULL check for sst_inst[] Assigned by Linux
Sep 11, 2026 CVE-2026-89438 Not yet scored platform/x86: ISST: Validate logical CPU id and clos id Assigned by Linux
Sep 11, 2026 CVE-2026-89437 Not yet scored platform/x86: int1092: Fix potential memory leak in sar_probe() Assigned by Linux
Sep 11, 2026 CVE-2026-89436 High 7.8 platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[] Assigned by Linux
Sep 11, 2026 CVE-2026-81018 Not yet scored platform/x86: think-lmi: Free system certificate signatures Assigned by Linux
Sep 11, 2026 CVE-2026-81017 High 8.4 platform/chrome: sensorhub: Bound the EC-reported sensor number Assigned by Linux
Sep 11, 2026 CVE-2026-81016 High 7.7 platform/x86/amd/pmc: Propagate SMU errors and validate S2D address Assigned by Linux
Sep 11, 2026 CVE-2026-81015 High 7.8 platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails Assigned by Linux
Sep 11, 2026 CVE-2026-81014 Not yet scored platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() Assigned by Linux
Sep 11, 2026 CVE-2026-81013 Not yet scored platform/x86: hp-bioscfg: fix heap OOB read on empty password write Assigned by Linux
Sep 11, 2026 CVE-2026-81012 High 8.4 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() Assigned by Linux
Sep 11, 2026 CVE-2026-81011 High 7.1 platform/x86: hp-bioscfg: pass validated element count to package parsers Assigned by Linux
Sep 11, 2026 CVE-2026-81010 High 7.8 io_uring/waitid: honor task_work cancellation Assigned by Linux
Sep 11, 2026 CVE-2026-81009 Not yet scored io_uring/query: cap user size passed to copy_struct_to_user Assigned by Linux
Sep 11, 2026 CVE-2026-81008 High 7.8 interconnect: Fix use after free in icc_get() and of_icc_get_by_index() Assigned by Linux
Sep 11, 2026 CVE-2026-81007 High 7.1 ipmi: ipmb: validate write message length Assigned by Linux
Sep 11, 2026 CVE-2026-81006 High 7.8 ipmi: Remove all sysfs files on registration failure Assigned by Linux
Sep 11, 2026 CVE-2026-81005 Not yet scored ipmi: si: Fix NULL pointer dereference after failed registration Assigned by Linux
Sep 11, 2026 CVE-2026-81004 High 8.4 ipmi:msghandler: Cancel work cleanly on an error Assigned by Linux
Sep 11, 2026 CVE-2026-81003 High 8.1 net/iucv: filter frames in afiucv_hs_rcv() by ingress device Assigned by Linux
Sep 11, 2026 CVE-2026-81002 Critical 9.8 xdp: fix zero-copy frame layout Assigned by Linux
Sep 11, 2026 CVE-2026-81001 High 7.8 slip: fix use-after-free in sl_sync() Assigned by Linux
Sep 11, 2026 CVE-2026-81000 High 7.8 net: tun: bound receive headroom Assigned by Linux
Sep 11, 2026 CVE-2026-80999 Not yet scored net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO Assigned by Linux
Sep 11, 2026 CVE-2026-80998 High 7.5 net: bnxt: ring the doorbell when SW USO exits early Assigned by Linux
Sep 11, 2026 CVE-2026-80997 High 7.5 net: ipa: fix stalled modem TX queue after runtime resume Assigned by Linux
Sep 11, 2026 CVE-2026-80996 Not yet scored net: l2tp: do not propagate multicast notification errors Assigned by Linux
Sep 11, 2026 CVE-2026-80995 High 7.8 net: mctp: hold a reference to the route device in mctp_route_lookup() Assigned by Linux
Sep 11, 2026 CVE-2026-80994 High 7.8 net: openvswitch: fix flow mask use-after-free on flow deletion Assigned by Linux
Sep 11, 2026 CVE-2026-80993 Not yet scored net: phylink: correctly validate returned PCS in phylink_inband_caps Assigned by Linux
Sep 11, 2026
Previous Page 51 of 177 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
