CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 11:40 UTC )
This week: 4,624 CVEs published, 309 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,624 Show in the list Critical, last 7 days 309 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80641 Not yet scored wifi: wlcore: enable the right set of ciphers Assigned by Linux
Aug 28, 2026 CVE-2026-80640 Not yet scored cxl/fwctl: Fix __fortify_panic Assigned by Linux
Aug 28, 2026 CVE-2026-80639 Not yet scored cxl/test: Fix __fortify_panic Assigned by Linux
Aug 28, 2026 CVE-2026-80638 High 8.8 ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent Assigned by Linux
Aug 28, 2026 CVE-2026-80637 High 7.5 netfilter: synproxy: fix unaligned memory access in timestamp adjustment Assigned by Linux
Aug 28, 2026 CVE-2026-80636 Not yet scored netfilter: conntrack: revert ct extension genid infrastructure Assigned by Linux
Aug 28, 2026 CVE-2026-80635 High 8.8 wifi: wcn36xx: fix OOB read from short trigger BA firmware response Assigned by Linux
Aug 28, 2026 CVE-2026-80634 Critical 9.8 netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag Assigned by Linux
Aug 28, 2026 CVE-2026-80633 High 8.8 iommufd: Take dma_resv lock before dma_buf_unpin() in release path Assigned by Linux
Aug 28, 2026 CVE-2026-80632 Not yet scored wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() Assigned by Linux
Aug 28, 2026 CVE-2026-80631 High 7.5 btrfs: lzo: reject compressed segment that overflows the compressed input Assigned by Linux
Aug 28, 2026 CVE-2026-80630 Critical 9.8 net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Assigned by Linux
Aug 28, 2026 CVE-2026-80629 Not yet scored octeontx2-af: npc: Fix size of entry2cntr_map Assigned by Linux
Aug 28, 2026 CVE-2026-80628 High 7.8 ALSA: seq: oss: Serialize readq reset state with q->lock Assigned by Linux
Aug 28, 2026 CVE-2026-80627 Not yet scored MIPS: mm: Fix out-of-bounds write in maar_res_walk() Assigned by Linux
Aug 28, 2026 CVE-2026-80626 Not yet scored powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Assigned by Linux
Aug 28, 2026 CVE-2026-80625 Not yet scored RDMA/hns: Fix memory leak of bonding resources Assigned by Linux
Aug 28, 2026 CVE-2026-80624 Not yet scored mfd: cs42l43: Sanity check firmware size Assigned by Linux
Aug 28, 2026 CVE-2026-80623 Not yet scored coresight: ete: Always save state on power down Assigned by Linux
Aug 28, 2026 CVE-2026-80622 High 7.8 char: tlclk: fix use-after-free in tlclk_cleanup() Assigned by Linux
Aug 28, 2026 CVE-2026-80621 Not yet scored PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability Assigned by Linux
Aug 28, 2026 CVE-2026-80620 Not yet scored Revert "PCI/MSI: Unmap MSI-X region on error" Assigned by Linux
Aug 28, 2026 CVE-2026-80619 High 7.8 apparmor: fix potential UAF in aa_replace_profiles Assigned by Linux
Aug 28, 2026 CVE-2026-80618 Not yet scored drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Assigned by Linux
Aug 28, 2026 CVE-2026-80617 Critical 9.8 net: airoha: fix foe_check_time allocation size Assigned by Linux
Aug 28, 2026 CVE-2026-80616 Not yet scored ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Assigned by Linux
Aug 28, 2026 CVE-2026-80615 High 8.2 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone Assigned by Linux
Aug 28, 2026 CVE-2026-80614 High 7.5 net: emac: Fix NULL pointer dereference in emac_probe Assigned by Linux
Aug 28, 2026 CVE-2026-80613 High 7.8 veth: fix NAPI leak in XDP enable error path Assigned by Linux
Aug 28, 2026 CVE-2026-80612 Critical 9.8 net: lwtunnel: Drop skb metadata before LWT encapsulation Assigned by Linux
Aug 28, 2026 CVE-2026-80611 Not yet scored ACPI: processor_idle: Mark LPI enter functions as __cpuidle Assigned by Linux
Aug 28, 2026 CVE-2026-80610 Not yet scored net: enetc: fix potential divide-by-zero when num_vsi is zero Assigned by Linux
Aug 28, 2026 CVE-2026-80609 Critical 9.8 qede: fix out-of-bounds check for cqe->len_list[] Assigned by Linux
Aug 28, 2026 CVE-2026-80608 High 8.8 accel/amdxdna: Fix iommu domain lifetime race during device removal Assigned by Linux
Aug 28, 2026 CVE-2026-80607 Not yet scored tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Assigned by Linux
Aug 28, 2026 CVE-2026-80606 High 7.8 drm/xe/userptr: Hold notifier_lock for write on inject test path Assigned by Linux
Aug 28, 2026 CVE-2026-80605 Not yet scored HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Assigned by Linux
Aug 28, 2026 CVE-2026-80604 High 8.8 HID: core: Fix OOB read in hid_get_report for numbered reports Assigned by Linux
Aug 28, 2026 CVE-2026-80603 Critical 9.1 netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Assigned by Linux
Aug 28, 2026 CVE-2026-80602 Not yet scored perf/x86/amd/lbr: Fix kernel address leakage Assigned by Linux
Aug 28, 2026 CVE-2026-80601 High 8.8 batman-adv: gw: acquire ethernet header only after skb realloc Assigned by Linux
Aug 28, 2026 CVE-2026-80600 Critical 9.8 batman-adv: dat: acquire ARP hw source only after skb realloc Assigned by Linux
Aug 28, 2026 CVE-2026-80599 High 8.1 batman-adv: dat: ensure accessible eth_hdr proto field Assigned by Linux
Aug 28, 2026 CVE-2026-80598 High 7.8 ntfs3: fix out-of-bounds read in decompress_lznt Assigned by Linux
Aug 28, 2026 CVE-2026-80597 Not yet scored mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Assigned by Linux
Aug 28, 2026 CVE-2026-80596 High 8.4 Input: ims-pcu - only expose sysfs attributes on control interface Assigned by Linux
Aug 28, 2026 CVE-2026-80595 Not yet scored Input: ims-pcu - add response length checks Assigned by Linux
Aug 28, 2026 CVE-2026-80594 Not yet scored Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Assigned by Linux
Aug 28, 2026 CVE-2026-80593 High 8.4 hwmon: (asus_atk0110) Check package count before accessing element Assigned by Linux
Aug 28, 2026 CVE-2026-80592 Not yet scored samples/damon/mtier: fail early if address range parameters are invalid Assigned by Linux
Aug 28, 2026
Previous Page 59 of 179 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
