CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 11:00 UTC )
This week: 4,586 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,586 Show in the list Critical, last 7 days 305 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80691 High 7.5 scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE Assigned by Linux
Aug 28, 2026 CVE-2026-80690 Not yet scored scsi: ufs: core: Initialize hba->rpmbs list in ufshcd Assigned by Linux
Aug 28, 2026 CVE-2026-80689 Not yet scored tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions Assigned by Linux
Aug 28, 2026 CVE-2026-80688 Not yet scored riscv: drop __init from vec_check_unaligned_access_speed_all_cpus Assigned by Linux
Aug 28, 2026 CVE-2026-80687 Not yet scored iommufd/viommu: Release the igroup lock on the vdevice_size error path Assigned by Linux
Aug 28, 2026 CVE-2026-80686 Not yet scored mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE Assigned by Linux
Aug 28, 2026 CVE-2026-80685 High 7.1 mm/util: don't read __page_2 for order-1 folios in snapshot_page() Assigned by Linux
Aug 28, 2026 CVE-2026-80684 Critical 9.3 KVM: s390: pci: Fix NULL dereference on AIBV allocation failure Assigned by Linux
Aug 28, 2026 CVE-2026-80683 High 8.8 Bluetooth: SCO: give the socket its own sco_conn reference Assigned by Linux
Aug 28, 2026 CVE-2026-80682 High 7.8 riscv/mm: use physical alignment for vmemmap_start_pfn Assigned by Linux
Aug 28, 2026 CVE-2026-80681 Critical 9.8 vxlan: re-fetch eth header after route_shortcircuit() Assigned by Linux
Aug 28, 2026 CVE-2026-80680 High 7.8 i2c: amd-mp2: Unregister callback on adapter add failure Assigned by Linux
Aug 28, 2026 CVE-2026-80679 Not yet scored s390/dasd: Fix potential NULL pointer dereference Assigned by Linux
Aug 28, 2026 CVE-2026-80678 High 8.4 i2c: imx: Fix slave registration race and error handling Assigned by Linux
Aug 28, 2026 CVE-2026-80677 High 7.8 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Assigned by Linux
Aug 28, 2026 CVE-2026-80676 Not yet scored Drivers: hv: vmbus: use generic driver_override infrastructure Assigned by Linux
Aug 28, 2026 CVE-2026-80675 High 7.1 libbpf: Reject non-exclusive metadata maps in the signed loader Assigned by Linux
Aug 28, 2026 CVE-2026-80674 Critical 9.8 ntfs: validate resident attribute lists and harden the validator Assigned by Linux
Aug 28, 2026 CVE-2026-80673 Critical 9.8 ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() Assigned by Linux
Aug 28, 2026 CVE-2026-80672 High 8.8 ntfs: fix u16 truncation of restart-area length check Assigned by Linux
Aug 28, 2026 CVE-2026-80671 Critical 9.3 perf sched: Fix register_pid() overflow, strcpy, and BUG_ON Assigned by Linux
Aug 28, 2026 CVE-2026-80670 Critical 9.1 perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Assigned by Linux
Aug 28, 2026 CVE-2026-80669 Not yet scored bpf: Disable xfrm_decode_session hook attachment Assigned by Linux
Aug 28, 2026 CVE-2026-80668 Critical 9.8 netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Assigned by Linux
Aug 28, 2026 CVE-2026-80667 Not yet scored net/mlx5: LAG, MPESW, Fix missing complete() on devcom error Assigned by Linux
Aug 28, 2026 CVE-2026-80666 Not yet scored Bluetooth: sco: Fix a race condition in sco_sock_timeout() Assigned by Linux
Aug 28, 2026 CVE-2026-80665 High 7.1 KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN Assigned by Linux
Aug 28, 2026 CVE-2026-80664 High 7.3 netfilter: xt_nat: reject unsupported target families Assigned by Linux
Aug 28, 2026 CVE-2026-80663 High 7.1 tools/power/x86/intel-speed-select: Harden daemon pidfile open Assigned by Linux
Aug 28, 2026 CVE-2026-80662 High 7.1 cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size Assigned by Linux
Aug 28, 2026 CVE-2026-80661 High 7.8 ufs: core: tracing: Do not dereference pointers in TP_printk() Assigned by Linux
Aug 28, 2026 CVE-2026-80660 Not yet scored hwmon: (occ) unregister sysfs devices outside occ lock Assigned by Linux
Aug 28, 2026 CVE-2026-80659 Not yet scored mmc: vub300: defer reset until cmd_mutex is unlocked Assigned by Linux
Aug 28, 2026 CVE-2026-80658 Not yet scored drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Assigned by Linux
Aug 28, 2026 CVE-2026-80657 Not yet scored accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer Assigned by Linux
Aug 28, 2026 CVE-2026-80656 High 7.8 hfsplus: Add a sanity check for btree node size Assigned by Linux
Aug 28, 2026 CVE-2026-80655 Not yet scored soc: xilinx: Fix race condition in event registration Assigned by Linux
Aug 28, 2026 CVE-2026-80654 Not yet scored soc: xilinx: Shutdown and free rx mailbox channel Assigned by Linux
Aug 28, 2026 CVE-2026-80653 High 8.4 scsi: hisi_sas: Add slave_destroy interface for v3 hw Assigned by Linux
Aug 28, 2026 CVE-2026-80652 Not yet scored crypto: ccp - Treat zero-length cert chain as query for blob lengths Assigned by Linux
Aug 28, 2026 CVE-2026-80651 Not yet scored crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL Assigned by Linux
Aug 28, 2026 CVE-2026-80650 Not yet scored media: atomisp: gc2235: fix UAF and memory leak Assigned by Linux
Aug 28, 2026 CVE-2026-80649 High 7.8 firmware: arm_scmi: Fix OOB in scmi_power_name_get() Assigned by Linux
Aug 28, 2026 CVE-2026-80648 Not yet scored pinctrl: spacemit: fix NULL check in spacemit_pin_set_config Assigned by Linux
Aug 28, 2026 CVE-2026-80647 Not yet scored RDMA/hns: Fix warning in poll cq direct mode Assigned by Linux
Aug 28, 2026 CVE-2026-80646 High 7.5 ipv6: guard against possible NULL deref in __in6_dev_stats_get() Assigned by Linux
Aug 28, 2026 CVE-2026-80645 High 8.1 rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Assigned by Linux
Aug 28, 2026 CVE-2026-80644 Not yet scored ocfs2: don't BUG_ON an invalid journal dinode Assigned by Linux
Aug 28, 2026 CVE-2026-80643 Not yet scored EDAC/igen6: Fix call trace due to missing release() Assigned by Linux
Aug 28, 2026 CVE-2026-80642 Not yet scored liveupdate: Reference count incoming FLB data Assigned by Linux
Aug 28, 2026
Previous Page 58 of 178 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
