CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 06:40 UTC )
This week: 4,637 CVEs published, 314 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,637 Show in the list Critical, last 7 days 314 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80942 Not yet scored wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() Assigned by Linux
Sep 11, 2026 CVE-2026-80941 Not yet scored wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() Assigned by Linux
Sep 11, 2026 CVE-2026-80940 Not yet scored wifi: rtw88: pci: fix resource leak on failed NAPI setup Assigned by Linux
Sep 11, 2026 CVE-2026-80939 Not yet scored wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Assigned by Linux
Sep 11, 2026 CVE-2026-80938 Not yet scored wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex Assigned by Linux
Sep 11, 2026 CVE-2026-80937 High 8.8 wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy Assigned by Linux
Sep 11, 2026 CVE-2026-80936 High 7.8 wifi: mt76: mt7925: cancel mlo_pm_work on stop Assigned by Linux
Sep 11, 2026 CVE-2026-80935 High 8.8 wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy Assigned by Linux
Sep 11, 2026 CVE-2026-80934 Not yet scored wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames Assigned by Linux
Sep 11, 2026 CVE-2026-80933 High 7.8 wifi: mt76: mt7996: validate default EEPROM firmware size Assigned by Linux
Sep 11, 2026 CVE-2026-80932 High 8.4 vsock/virtio: flush works in dependency order Assigned by Linux
Sep 11, 2026 CVE-2026-80931 High 7.8 w1: ds28e17: reject an oversize length on an I2C block read Assigned by Linux
Sep 11, 2026 CVE-2026-80930 Not yet scored tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout Assigned by Linux
Sep 11, 2026 CVE-2026-80929 High 7.8 sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] Assigned by Linux
Sep 11, 2026 CVE-2026-80928 High 7.8 smack: fix cred UAF in smack_file_send_sigiotask() Assigned by Linux
Sep 11, 2026 CVE-2026-80927 Not yet scored timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() Assigned by Linux
Sep 11, 2026 CVE-2026-80926 Critical 9.8 ksmbd: fix use-after-free in oplock break notification Assigned by Linux
Sep 11, 2026 CVE-2026-80925 Not yet scored vlan: fix skb_under_panic and races when toggling HW VLAN offload Assigned by Linux
Sep 9, 2026 CVE-2026-80924 High 7.5 crypto: krb5 - use kfree_sensitive() for derived key buffers Assigned by Linux
Sep 9, 2026 CVE-2026-80923 Not yet scored xhci: dbgtty: Fix unregister on tty_register_driver() failure Assigned by Linux
Sep 9, 2026 CVE-2026-80922 Not yet scored crypto: qcom-rng - Allow zero as a random number Assigned by Linux
Sep 9, 2026 CVE-2026-80921 High 8.8 KVM: s390: vsie: zero stale crypto bits Assigned by Linux
Sep 9, 2026 CVE-2026-80920 Not yet scored io_uring: defer eventfd signaling when queued from a wakeup handler Assigned by Linux
Sep 9, 2026 CVE-2026-80919 Not yet scored drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format Assigned by Linux
Sep 9, 2026 CVE-2026-80918 Not yet scored HID: core: fix number/pointer type confusion on long items Assigned by Linux
Sep 9, 2026 CVE-2026-80917 Not yet scored PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems Assigned by Linux
Sep 9, 2026 CVE-2026-80916 Not yet scored kcov: fix data corruption and race conditions on PREEMPT_RT Assigned by Linux
Sep 9, 2026 CVE-2026-80915 Not yet scored drm/xe: Fix DPT allocation paths. Assigned by Linux
Sep 9, 2026 CVE-2026-80914 High 8.8 Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready Assigned by Linux
Sep 9, 2026 CVE-2026-80913 Not yet scored selinux: require every boolean value to be defined Assigned by Linux
Sep 4, 2026 CVE-2026-80912 Not yet scored selinux: reject an unclaimed class value in security_get_classes() Assigned by Linux
Sep 4, 2026 CVE-2026-80911 Not yet scored ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() Assigned by Linux
Sep 4, 2026 CVE-2026-80910 Not yet scored ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses Assigned by Linux
Sep 4, 2026 CVE-2026-80909 Not yet scored drm/amdgpu: Reject UVD message with invalid number of h265 refs Assigned by Linux
Sep 4, 2026 CVE-2026-80908 Not yet scored drm/amdgpu: Reject UVD message with dimensions above 4096 Assigned by Linux
Sep 4, 2026 CVE-2026-80907 Not yet scored drm/amdgpu: Fix UVD dpb min size calculation for H264 Assigned by Linux
Sep 4, 2026 CVE-2026-80906 Not yet scored net: packet: fix wrong transport_header when sending VLAN-tagged frame Assigned by Linux
Sep 4, 2026 CVE-2026-80905 Not yet scored net: tap: fix wrong transport_header when sending VLAN-tagged frame Assigned by Linux
Sep 4, 2026 CVE-2026-80904 Not yet scored net/tls: Fail tls_sw_splice_read() after a failed async decrypt Assigned by Linux
Sep 4, 2026 CVE-2026-80903 Not yet scored drm/xe/oa: Fix sync entry leak on OA config emit failure Assigned by Linux
Sep 4, 2026 CVE-2026-80902 Not yet scored dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA Assigned by Linux
Sep 4, 2026 CVE-2026-80901 Not yet scored ipvs: fix the checksum validations Assigned by Linux
Sep 4, 2026 CVE-2026-80900 Not yet scored ASoC: SDCA: Make UMP message size check more robust Assigned by Linux
Sep 4, 2026 CVE-2026-80899 Not yet scored erofs: remove fscache backend entirely Assigned by Linux
Sep 4, 2026 CVE-2026-80898 Not yet scored netfs: clear PG_private_2 on copy-to-cache append failure Assigned by Linux
Sep 4, 2026 CVE-2026-80897 Not yet scored netfs: release readahead folios on iterator preparation failure Assigned by Linux
Sep 4, 2026 CVE-2026-80896 Not yet scored mshv: Fix race in mshv_irqfd_deassign Assigned by Linux
Sep 4, 2026 CVE-2026-80895 Not yet scored mshv: Order pt_vp_array publish against irqfd assertion path Assigned by Linux
Sep 4, 2026 CVE-2026-80894 Not yet scored iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace Assigned by Linux
Sep 4, 2026 CVE-2026-80893 Not yet scored mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() Assigned by Linux
Sep 4, 2026
Previous Page 53 of 178 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
