CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 15:00 UTC )
This week: 5,499 CVEs published, 356 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,499 Show in the list Critical, last 7 days 356 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98617 Not yet scored eth: fbnic: use the Rx queue napi pointer to find the napi vector Assigned by Linux
Oct 18, 2026 CVE-2026-98616 Not yet scored eth: fbnic: reset num_napi when the napi vectors are freed Assigned by Linux
Oct 18, 2026 CVE-2026-98615 Not yet scored eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox Assigned by Linux
Oct 18, 2026 CVE-2026-98614 Not yet scored sctp: avoid livelock while updating retransmit path Assigned by Linux
Oct 18, 2026 CVE-2026-98613 Not yet scored bpf: Bound ownership depth through local kptrs and graph roots Assigned by Linux
Oct 18, 2026 CVE-2026-98612 Not yet scored net: usb: catc: bound the RX packet length in catc_rx_done() Assigned by Linux
Oct 18, 2026 CVE-2026-98611 Not yet scored bpf: Check params size before reading reserved fields Assigned by Linux
Oct 18, 2026 CVE-2026-98610 Not yet scored net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Assigned by Linux
Oct 18, 2026 CVE-2026-98609 Not yet scored drm/virtio: fix object leak when drm_gem_handle_create() fails Assigned by Linux
Oct 18, 2026 CVE-2026-98608 Not yet scored drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Assigned by Linux
Oct 18, 2026 CVE-2026-98607 Not yet scored drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Assigned by Linux
Oct 18, 2026 CVE-2026-98606 Not yet scored drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Assigned by Linux
Oct 18, 2026 CVE-2026-98605 Not yet scored drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach Assigned by Linux
Oct 18, 2026 CVE-2026-98604 Not yet scored ovpn: replace bind when learning local endpoint Assigned by Linux
Oct 18, 2026 CVE-2026-98603 Not yet scored ovpn: replace bind when clearing stale local source Assigned by Linux
Oct 18, 2026 CVE-2026-98602 Not yet scored Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Assigned by Linux
Oct 18, 2026 CVE-2026-98601 Not yet scored Bluetooth: btintel_pcie: validate device-supplied DMA indices Assigned by Linux
Oct 18, 2026 CVE-2026-98600 Not yet scored Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Assigned by Linux
Oct 18, 2026 CVE-2026-98599 Not yet scored bpf: Reject non-negative offsets in stack_slot_obj_get_spi() Assigned by Linux
Oct 18, 2026 CVE-2026-98598 Not yet scored ipv6: Prevent rt6_insert_exception() for dying fib6_info. Assigned by Linux
Oct 18, 2026 CVE-2026-98597 Not yet scored net: usb: sr9700: include receive overhead in the length check Assigned by Linux
Oct 18, 2026 CVE-2026-98596 Not yet scored ipv6: Fix dst leak for uncached routes. Assigned by Linux
Oct 18, 2026 CVE-2026-98595 Not yet scored udp: remove a disconnected socket from the 4-tuple hash table Assigned by Linux
Oct 18, 2026 CVE-2026-98594 Not yet scored tg3: clean up PHYLIB resources on probe failure Assigned by Linux
Oct 18, 2026 CVE-2026-98593 Not yet scored s390/debug: Fix NULL pointer dereference in debug_info_copy() Assigned by Linux
Oct 18, 2026 CVE-2026-98592 Not yet scored net: spacemit: clear TX descriptor on fragment mapping failure Assigned by Linux
Oct 18, 2026 CVE-2026-98591 Not yet scored bpf: Fix bounds check for skb-backed dynptrs Assigned by Linux
Oct 18, 2026 CVE-2026-98590 Not yet scored bpf: Fix bpf_sock context code generation Assigned by Linux
Oct 18, 2026 CVE-2026-98589 Not yet scored bpf: Reject pkt arguments in mutating subprogs Assigned by Linux
Oct 18, 2026 CVE-2026-98588 Not yet scored bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Assigned by Linux
Oct 18, 2026 CVE-2026-98587 Not yet scored firewire: cdev: fix back-transition for iso_resource_auto client resource Assigned by Linux
Oct 18, 2026 CVE-2026-98586 Not yet scored sctp: hold asoc or transport before mod_timer() in timer handlers Assigned by Linux
Oct 18, 2026 CVE-2026-98585 Not yet scored eth: fbnic: Avoid rounding zero ring sizes Assigned by Linux
Oct 18, 2026 CVE-2026-98584 Not yet scored net/sched: fix potential stack infoleak in em_text_dump() Assigned by Linux
Oct 18, 2026 CVE-2026-98583 Not yet scored nfc: nfcmrvl: validate helper command length before pull Assigned by Linux
Oct 18, 2026 CVE-2026-98582 Not yet scored nfc: st21nfca: validate received frame size Assigned by Linux
Oct 18, 2026 CVE-2026-98581 Not yet scored nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Assigned by Linux
Oct 18, 2026 CVE-2026-98580 Not yet scored nfc: llcp: Fix race condition in accept_queue lifecycle Assigned by Linux
Oct 18, 2026 CVE-2026-98579 Not yet scored nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Assigned by Linux
Oct 18, 2026 CVE-2026-98578 Not yet scored nfc: st21nfca: validate ISO15693 inventory length Assigned by Linux
Oct 18, 2026 CVE-2026-98577 Not yet scored nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Assigned by Linux
Oct 18, 2026 CVE-2026-98576 Not yet scored nfc: llcp: fix slab-out-of-bounds reads when logging service names Assigned by Linux
Oct 18, 2026 CVE-2026-98575 Not yet scored nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Assigned by Linux
Oct 18, 2026 CVE-2026-98574 Not yet scored net: bcmgenet: stop Tx NAPI before disabling the queues Assigned by Linux
Oct 18, 2026 CVE-2026-98573 Not yet scored net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Assigned by Linux
Oct 18, 2026 CVE-2026-98572 Not yet scored bpf: Fix immediate JMP JEQ/JNE on MIPS32 Assigned by Linux
Oct 18, 2026 CVE-2026-98571 Not yet scored net: stmmac: clear stale buf->page after recycling on skb build failure Assigned by Linux
Oct 18, 2026 CVE-2026-98570 Not yet scored net: ipv6: keep room for the mac header in dst_dev_overhead() Assigned by Linux
Oct 18, 2026 CVE-2026-98569 Not yet scored ip_gre: Reject enabling collect metadata through changelink Assigned by Linux
Oct 18, 2026 CVE-2026-98568 Not yet scored vxlan: use one headroom snapshot for neighbour replies Assigned by Linux
Oct 18, 2026
Previous Page 6 of 142 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
