CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 07:30 UTC )
This week: 4,627 CVEs published, 315 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,627 Show in the list Critical, last 7 days 315 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80892 Not yet scored erofs: cap LZMA stream pool size Assigned by Linux
Sep 4, 2026 CVE-2026-80891 Not yet scored KVM: s390: pci: Validate AIBV and AISB before pinning guest pages Assigned by Linux
Sep 4, 2026 CVE-2026-80890 Not yet scored sctp: reject stale cookies with mismatched verification tags Assigned by Linux
Sep 4, 2026 CVE-2026-80889 Not yet scored can: isotp: fix timer drain order, wakeup handling and tx_gen ordering Assigned by Linux
Sep 4, 2026 CVE-2026-80888 Not yet scored drm/vmwgfx: drop dma_buf reference on foreign-fd prime import Assigned by Linux
Sep 4, 2026 CVE-2026-80887 Not yet scored drm/vmwgfx: use check_add_overflow for shader size+offset bound Assigned by Linux
Sep 4, 2026 CVE-2026-80886 Not yet scored serial: msm: Disable DMA for kernel console UART Assigned by Linux
Sep 4, 2026 CVE-2026-80885 Not yet scored afs: Fix uncancelled rxrpc OOB message handler Assigned by Linux
Sep 4, 2026 CVE-2026-80884 Not yet scored ntb: Store original DMA address for future release Assigned by Linux
Sep 4, 2026 CVE-2026-80883 Not yet scored drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Assigned by Linux
Sep 4, 2026 CVE-2026-80882 Not yet scored crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Assigned by Linux
Sep 4, 2026 CVE-2026-80881 Not yet scored ocfs2: fix buffer head management in ocfs2_read_blocks() Assigned by Linux
Sep 4, 2026 CVE-2026-80880 Not yet scored IB/mlx5: Properly support implicit ODP rereg_mr Assigned by Linux
Sep 4, 2026 CVE-2026-80879 Not yet scored ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Assigned by Linux
Sep 4, 2026 CVE-2026-80878 Not yet scored afs: Fix leak of ungot volume Assigned by Linux
Sep 4, 2026 CVE-2026-80877 Not yet scored afs: Fix vllist leak Assigned by Linux
Sep 4, 2026 CVE-2026-80876 Not yet scored ring-buffer: Fix event length with forced 8-byte alignment Assigned by Linux
Sep 4, 2026 CVE-2026-80875 Not yet scored ipvs: use parsed transport offset in TCP state lookup Assigned by Linux
Sep 4, 2026 CVE-2026-80874 Not yet scored arm64: dts: renesas: ironhide: Describe inline ECC carveouts Assigned by Linux
Sep 4, 2026 CVE-2026-80873 Not yet scored KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions Assigned by Linux
Sep 4, 2026 CVE-2026-80872 Not yet scored ALSA: hda/tas2781: Cancel async firmware request at unbind Assigned by Linux
Sep 4, 2026 CVE-2026-80871 Not yet scored crypto: xilinx-trng - Remove crypto_rng interface Assigned by Linux
Sep 4, 2026 CVE-2026-80870 Not yet scored drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Assigned by Linux
Sep 4, 2026 CVE-2026-80869 Not yet scored ntfs: bound the attribute-list entry in ntfs_read_inode_mount() Assigned by Linux
Sep 4, 2026 CVE-2026-80868 Not yet scored ntfs3: Allocate iomap inline_data using alloc_page Assigned by Linux
Sep 4, 2026 CVE-2026-80867 Not yet scored alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Assigned by Linux
Sep 4, 2026 CVE-2026-80866 Not yet scored tipc: avoid busy looping in tipc_exit_net() Assigned by Linux
Sep 4, 2026 CVE-2026-80865 Not yet scored bpf: Add missing access_ok call to copy_user_syms Assigned by Linux
Sep 4, 2026 CVE-2026-80864 Not yet scored RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp Assigned by Linux
Sep 4, 2026 CVE-2026-80863 Not yet scored RDMA/rxe: Fix OOB in free_rd_atomic_resources() Assigned by Linux
Sep 4, 2026 CVE-2026-80862 Not yet scored nvme-tcp: fix usage of page_frag_cache Assigned by Linux
Sep 4, 2026 CVE-2026-80861 Not yet scored usb: xhci: bail out of setup if the controller is inaccessible Assigned by Linux
Sep 4, 2026 CVE-2026-80860 Not yet scored fuse: fix race between interrupt and resend Assigned by Linux
Sep 4, 2026 CVE-2026-80859 Not yet scored fuse: fix missing barrier when checking io-uring readiness Assigned by Linux
Sep 4, 2026 CVE-2026-80858 Not yet scored fuse: publish io-uring queues with release semantics Assigned by Linux
Sep 4, 2026 CVE-2026-80857 Not yet scored fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free Assigned by Linux
Sep 4, 2026 CVE-2026-80856 Not yet scored fuse: fix invalidate lock leak on setattr writeback failure Assigned by Linux
Sep 4, 2026 CVE-2026-80855 Not yet scored fuse: fix invalidate lock leak on open O_TRUNC DAX failure Assigned by Linux
Sep 4, 2026 CVE-2026-80854 Not yet scored usb: gadget: f_tcm: keep port count until LUN teardown completes Assigned by Linux
Sep 4, 2026 CVE-2026-80853 Not yet scored KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts Assigned by Linux
Sep 4, 2026 CVE-2026-80852 Not yet scored tls: device: fix out-of-bounds write in tls_append_frag() Assigned by Linux
Sep 4, 2026 CVE-2026-80851 Not yet scored gtp: serialize PDP context updates Assigned by Linux
Sep 4, 2026 CVE-2026-80850 Not yet scored tcp: fix AO info use-after-free in tcp_ao_connect_init() Assigned by Linux
Sep 4, 2026 CVE-2026-80849 Not yet scored net/tcp-ao: fix use-after-free of current_key on reconnect to another peer Assigned by Linux
Sep 4, 2026 CVE-2026-80848 Not yet scored xfrm: espintcp: fix UAF during close Assigned by Linux
Sep 4, 2026 CVE-2026-80847 Not yet scored tcp: clamp route advmss to TCP_MIN_MSS Assigned by Linux
Sep 4, 2026 CVE-2026-80846 Not yet scored xfrm: drop ESP-in-TCP packets with no ingress device Assigned by Linux
Sep 4, 2026 CVE-2026-80845 Not yet scored xfrm: avoid lock inversion in nat keepalive work Assigned by Linux
Sep 4, 2026 CVE-2026-80844 Not yet scored xfrm: ah6: validate routing header segments_left Assigned by Linux
Sep 4, 2026 CVE-2026-80843 Not yet scored xfrm: fix xfrm_state_construct() auth-trunc leak Assigned by Linux
Sep 4, 2026
Previous Page 54 of 178 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
