CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 08:10 UTC )
This week: 4,629 CVEs published, 315 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,629 Show in the list Critical, last 7 days 315 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80842 Not yet scored net: bridge: mcast: fix use-after-free of a master VLAN's multicast context Assigned by Linux
Sep 4, 2026 CVE-2026-80841 Not yet scored net/packet: defer vmalloc TX_RING free until skbs finish Assigned by Linux
Sep 4, 2026 CVE-2026-80840 Not yet scored ipv6: seg6: clear IPv4 control block on IPIP decapsulation Assigned by Linux
Sep 4, 2026 CVE-2026-80839 Not yet scored batman-adv: reject unrepresentable multicast TVLV offsets Assigned by Linux
Sep 4, 2026 CVE-2026-80838 Not yet scored vxlan: keep the last remote linked during FDB flush Assigned by Linux
Sep 4, 2026 CVE-2026-80837 Not yet scored netfilter: nf_tables: don't queue packet path object notifications Assigned by Linux
Sep 4, 2026 CVE-2026-80836 Not yet scored crypto: virtio - bound the akcipher result length Assigned by Linux
Sep 4, 2026 CVE-2026-80835 Not yet scored crypto: qcom-rng - Remove crypto_rng interface Assigned by Linux
Sep 4, 2026 CVE-2026-80834 Not yet scored crypto: sun8i-ce - Remove crypto_rng interface Assigned by Linux
Sep 4, 2026 CVE-2026-80833 Not yet scored crypto: sun8i-ss - Remove crypto_rng interface Assigned by Linux
Sep 4, 2026 CVE-2026-80832 Not yet scored crypto: qce - fix CCM AAD buffer underallocation Assigned by Linux
Sep 4, 2026 CVE-2026-80831 Not yet scored crypto: mxs-dcp - fix source scatterlist length access Assigned by Linux
Sep 4, 2026 CVE-2026-80830 Not yet scored usb: core: Add lock to usb_wakeup_notification() Assigned by Linux
Sep 4, 2026 CVE-2026-80829 Not yet scored ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() Assigned by Linux
Sep 4, 2026 CVE-2026-80828 Not yet scored ALSA: usb-audio: Complete cleanup after system-resume errors Assigned by Linux
Sep 4, 2026 CVE-2026-80827 Not yet scored USB: serial: option: fix slab OOB read in interrupt URB callback Assigned by Linux
Sep 4, 2026 CVE-2026-80826 Not yet scored USB: c67x00: fix use-after-free in c67x00_add_iso_urb() Assigned by Linux
Sep 4, 2026 CVE-2026-80825 Not yet scored wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb Assigned by Linux
Sep 4, 2026 CVE-2026-80824 Not yet scored usb: usbfs: fix use-after-free of usb_device in usbdev_release() Assigned by Linux
Sep 4, 2026 CVE-2026-80823 Not yet scored nfc: st21nfca: validate ATR_REQ length against the received frame Assigned by Linux
Sep 4, 2026 CVE-2026-80822 Not yet scored mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() Assigned by Linux
Sep 4, 2026 CVE-2026-80821 Not yet scored nvmet: pci-epf: put CQ ref on create_cq mapping failure Assigned by Linux
Sep 4, 2026 CVE-2026-80820 Not yet scored xfs: don't livelock in scrub on a circular unlinked list Assigned by Linux
Sep 4, 2026 CVE-2026-80819 Not yet scored Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept Assigned by Linux
Sep 4, 2026 CVE-2026-80818 Not yet scored iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown Assigned by Linux
Sep 4, 2026 CVE-2026-80817 Not yet scored iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages Assigned by Linux
Sep 4, 2026 CVE-2026-80816 Not yet scored ALSA: FCP: Use a private URB for the notification endpoint Assigned by Linux
Sep 4, 2026 CVE-2026-80815 Not yet scored ALSA: scarlett2: Use a private URB for the notification endpoint Assigned by Linux
Sep 4, 2026 CVE-2026-80814 Not yet scored rndis_host: add overflow check in rndis_rx_fixup() Assigned by Linux
Sep 4, 2026 CVE-2026-80813 Not yet scored nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() Assigned by Linux
Sep 4, 2026 CVE-2026-80812 Not yet scored ALSA: dummy: Check card index validity at probe Assigned by Linux
Sep 4, 2026 CVE-2026-80811 Not yet scored io_uring/cmd: fix iovec leak when the async cmd is not recycled Assigned by Linux
Sep 4, 2026 CVE-2026-80810 Not yet scored io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec() Assigned by Linux
Sep 4, 2026 CVE-2026-80809 Not yet scored ocfs2: fix missing metadata reservation for large xattrs Assigned by Linux
Sep 4, 2026 CVE-2026-80808 Not yet scored ext4: stop retrying saturated xattr cache entries Assigned by Linux
Sep 4, 2026 CVE-2026-80807 Not yet scored nilfs2: reject invalid block index in GC ioctl Assigned by Linux
Sep 4, 2026 CVE-2026-80806 Not yet scored ext4: don't enable DAX on new encrypted files Assigned by Linux
Sep 4, 2026 CVE-2026-80805 Not yet scored xfs: validate attr entry pointer before field access Assigned by Linux
Sep 4, 2026 CVE-2026-80804 Not yet scored xfs: restore nofs context unconditionally in xfs_trans_roll Assigned by Linux
Sep 4, 2026 CVE-2026-80803 Not yet scored nfc: digital: clamp SENSF_RES length to the destination buffer Assigned by Linux
Sep 4, 2026 CVE-2026-80802 Not yet scored nfc: fdp: bound the device-reported read length and fix an skb leak Assigned by Linux
Sep 4, 2026 CVE-2026-80801 Not yet scored nfc: microread: validate target discovery payload lengths Assigned by Linux
Sep 4, 2026 CVE-2026-80800 Not yet scored nfc: llcp: bound the connect_sn TLV walk to the skb Assigned by Linux
Sep 4, 2026 CVE-2026-80799 Not yet scored nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers Assigned by Linux
Sep 4, 2026 CVE-2026-80798 Not yet scored nfc: llcp: reject PDUs shorter than the LLCP header Assigned by Linux
Sep 4, 2026 CVE-2026-80797 Not yet scored nfc: pn533: purge fragmented skbs during cleanup Assigned by Linux
Sep 4, 2026 CVE-2026-80796 Not yet scored nfc: nci: add data_len bound checks to activation parameter extractors Assigned by Linux
Sep 4, 2026 CVE-2026-80795 Not yet scored nfc: nci: fix out-of-bounds write in nci_target_auto_activated() Assigned by Linux
Sep 4, 2026 CVE-2026-80794 Not yet scored nfc: nci: fix uninit-value in the RF discover/activated NTF handlers Assigned by Linux
Sep 4, 2026 CVE-2026-80793 Not yet scored ipv4: reject undersized MTUs in ip_do_fragment() Assigned by Linux
Sep 4, 2026
Previous Page 55 of 178 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
