CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 05:50 UTC )
This week: 4,643 CVEs published, 316 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,643 Show in the list Critical, last 7 days 316 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80992 High 7.8 net: ravb: avoid dereferencing an invalid PTP clock Assigned by Linux
Sep 11, 2026 CVE-2026-80991 High 7.8 net: ravb: serialize PTP clock teardown Assigned by Linux
Sep 11, 2026 CVE-2026-80990 Not yet scored net: thunderbolt: Release the Rx HopID that was handed out on mismatch Assigned by Linux
Sep 11, 2026 CVE-2026-80989 High 8.8 net: thunderbolt: Mark the connection down when bringing it up fails Assigned by Linux
Sep 11, 2026 CVE-2026-80988 Not yet scored NTB: ntb_transport: Fail TX enqueue when the QP link is down Assigned by Linux
Sep 11, 2026 CVE-2026-80987 High 7.5 NTB: ntb_transport: Reject oversized TX buffers Assigned by Linux
Sep 11, 2026 CVE-2026-80986 Critical 9.8 net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages Assigned by Linux
Sep 11, 2026 CVE-2026-80985 High 8.2 net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Assigned by Linux
Sep 11, 2026 CVE-2026-80984 Not yet scored net/smc: do not dereference an unset send buffer on the SMC-D teardown path Assigned by Linux
Sep 11, 2026 CVE-2026-80983 Not yet scored net/smc: fix socket refcount leak in smc_switch_conns() Assigned by Linux
Sep 11, 2026 CVE-2026-80982 High 7.8 net/smc: fix use-after-free in smc_rx_pipe_buf_release() Assigned by Linux
Sep 11, 2026 CVE-2026-80981 Critical 9.8 net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() Assigned by Linux
Sep 11, 2026 CVE-2026-80980 Critical 9.8 net/smc: stop killed, freed and out_of_sync sharing a byte Assigned by Linux
Sep 11, 2026 CVE-2026-80979 High 7.8 net/smc: unregister the connection before draining the rx tasklet Assigned by Linux
Sep 11, 2026 CVE-2026-80978 High 7.8 net: cap advertised IP tunnel headroom Assigned by Linux
Sep 11, 2026 CVE-2026-80977 High 7.8 net: skbuff: don't touch shared zerocopy state in skb_tx_error() Assigned by Linux
Sep 11, 2026 CVE-2026-80976 Critical 9.8 seg6: reset IP6CB after IPv6 decapsulation Assigned by Linux
Sep 11, 2026 CVE-2026-80975 High 7.8 mfd: qnap-mcu: keep the reply buffer alive past a command timeout Assigned by Linux
Sep 11, 2026 CVE-2026-80974 Not yet scored mfd: sm501: Fix potential memory leaks during remove Assigned by Linux
Sep 11, 2026 CVE-2026-80973 Not yet scored ALSA: 6fire: bound the MIDI event length from the device Assigned by Linux
Sep 11, 2026 CVE-2026-80972 Not yet scored ALSA: aloop: Check card index validity at probe Assigned by Linux
Sep 11, 2026 CVE-2026-80971 High 7.8 ALSA: bcd2000: clear the URB pointers on disconnect Assigned by Linux
Sep 11, 2026 CVE-2026-80970 Not yet scored ALSA: FCP: do not copy out an uninitialised init response Assigned by Linux
Sep 11, 2026 CVE-2026-80969 Not yet scored ALSA: mpu401: Check card index validity at probe Assigned by Linux
Sep 11, 2026 CVE-2026-80968 Not yet scored ALSA: mts64: Check card index validity at probe Assigned by Linux
Sep 11, 2026 CVE-2026-80967 High 8.4 ALSA: pcxhr: initialize mutexes before requesting threaded IRQ Assigned by Linux
Sep 11, 2026 CVE-2026-80966 Not yet scored ALSA: portman2x4: Check card index validity at probe Assigned by Linux
Sep 11, 2026 CVE-2026-80965 Not yet scored ALSA: serial-u16550: Check card index validity at probe Assigned by Linux
Sep 11, 2026 CVE-2026-80964 Not yet scored ALSA: virmidi: Check card index validity at probe Assigned by Linux
Sep 11, 2026 CVE-2026-80963 Not yet scored dm-stats: fix a crash if allocation of per-cpu data fails Assigned by Linux
Sep 11, 2026 CVE-2026-80962 High 7.8 dm-pcache: validate geometry fields from on-disk cache_info Assigned by Linux
Sep 11, 2026 CVE-2026-80961 High 7.8 dm-pcache: validate kset key_num and intra-segment bounds Assigned by Linux
Sep 11, 2026 CVE-2026-80960 Not yet scored dm-pcache: validate on-media seg_num against the cache device size Assigned by Linux
Sep 11, 2026 CVE-2026-80959 High 7.8 dm-pcache: bound the persisted tail-position offset Assigned by Linux
Sep 11, 2026 CVE-2026-80958 High 7.1 dm-pcache: clamp the tail kset read to the segment data region Assigned by Linux
Sep 11, 2026 CVE-2026-80957 Not yet scored dm-pcache: detect a cycle in the last-kset chain during replay Assigned by Linux
Sep 11, 2026 CVE-2026-80956 Not yet scored dm-pcache: only hand out initialized cache segments Assigned by Linux
Sep 11, 2026 CVE-2026-80955 High 7.8 dm-pcache: fix use-after-free and invalid seg operations in kset_replay() Assigned by Linux
Sep 11, 2026 CVE-2026-80954 High 7.8 i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() Assigned by Linux
Sep 11, 2026 CVE-2026-80953 High 8.4 i3c: master: adi: initialize the lock before enabling interrupts Assigned by Linux
Sep 11, 2026 CVE-2026-80952 High 7.8 i3c: master: Fix info leak and UAF in device unregister path Assigned by Linux
Sep 11, 2026 CVE-2026-80951 Not yet scored i3c: master: svc: bound IBI payload to the requested max_payload_len Assigned by Linux
Sep 11, 2026 CVE-2026-80950 High 7.8 i3c: renesas: Check that the transfer is valid before accessing it Assigned by Linux
Sep 11, 2026 CVE-2026-80949 Not yet scored wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() Assigned by Linux
Sep 11, 2026 CVE-2026-80948 Not yet scored wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() Assigned by Linux
Sep 11, 2026 CVE-2026-80947 High 7.8 wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop Assigned by Linux
Sep 11, 2026 CVE-2026-80946 Not yet scored fuse: copy request headers via a stack buffer for io-uring Assigned by Linux
Sep 11, 2026 CVE-2026-80945 Critical 9.1 crypto: iaa - unmap dst before software fallback on decompress Assigned by Linux
Sep 11, 2026 CVE-2026-80944 High 7.8 wifi: mwifiex: Detach sync cmd buffer on interrupted wait Assigned by Linux
Sep 11, 2026 CVE-2026-80943 High 7.6 wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids Assigned by Linux
Sep 11, 2026
Previous Page 52 of 178 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
