CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 12:40 UTC )
This week: 4,613 CVEs published, 307 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,613 Show in the list Critical, last 7 days 307 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80591 High 7.8 f2fs: fix listxattr handling of corrupted xattr entries Assigned by Linux
Aug 28, 2026 CVE-2026-80590 High 8.6 inet: frags: strip GSO state from fragments before reassembly Assigned by Linux
Aug 28, 2026 CVE-2026-80589 Critical 9.8 block: stop the timeout timer when releasing a never added disk Assigned by Linux
Aug 26, 2026 CVE-2026-80588 High 7.5 mptcp: reclaim forward-allocated memory on RX path errors Assigned by Linux
Aug 26, 2026 CVE-2026-80587 Critical 9.8 mptcp: avoid combining some incoming suboptions Assigned by Linux
Aug 26, 2026 CVE-2026-80586 Critical 9.8 mptcp: options: reset DSS fields in case of unexpected size Assigned by Linux
Aug 26, 2026 CVE-2026-80585 Critical 9.4 mptcp: fastopen: only mark MPTFO subflows with SYN data Assigned by Linux
Aug 26, 2026 CVE-2026-80584 High 8.4 s390/qeth: validate user buffer length in SNMP and ARP query ioctls Assigned by Linux
Aug 26, 2026 CVE-2026-80583 High 7.8 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses Assigned by Linux
Aug 26, 2026 CVE-2026-80582 High 7.8 drm/shmem_helper: Check VMA boundaries for PMD mappings Assigned by Linux
Aug 26, 2026 CVE-2026-80581 Not yet scored ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Assigned by Linux
Aug 26, 2026 CVE-2026-80580 High 7.8 fbdev: bound mode sysfs output to the sysfs buffer Assigned by Linux
Aug 26, 2026 CVE-2026-80579 High 7.8 fbdev: clear fb_info->mode before deleting a videomode Assigned by Linux
Aug 26, 2026 CVE-2026-80578 High 7.3 fbdev: core: Fix pointer desynchronization in fb_io_read() Assigned by Linux
Aug 26, 2026 CVE-2026-80577 Not yet scored drm/panthor: skip zero-sized firmware sections Assigned by Linux
Aug 26, 2026 CVE-2026-80576 High 8.8 drm/amdgpu: reject oversized IBs with per-ring packet limits Assigned by Linux
Aug 26, 2026 CVE-2026-80575 High 7.8 Input: cs40l50-vibra - validate custom data from user space Assigned by Linux
Aug 26, 2026 CVE-2026-80574 High 8.4 Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet Assigned by Linux
Aug 26, 2026 CVE-2026-80573 Not yet scored Input: iforce - validate input packet lengths Assigned by Linux
Aug 26, 2026 CVE-2026-80572 High 7.8 Input: byd - synchronize timer deletion before freeing private data Assigned by Linux
Aug 26, 2026 CVE-2026-80571 Not yet scored powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak Assigned by Linux
Aug 26, 2026 CVE-2026-80570 High 7.8 Input: synaptics-rmi4 - zero report size on F54 work error Assigned by Linux
Aug 26, 2026 CVE-2026-80569 High 7.8 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer Assigned by Linux
Aug 26, 2026 CVE-2026-80568 High 7.8 Input: synaptics-rmi4 - block s_input when F54 queue is busy Assigned by Linux
Aug 26, 2026 CVE-2026-80567 Not yet scored Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Assigned by Linux
Aug 26, 2026 CVE-2026-80566 Not yet scored Input: hynitron_cstxxx - validate touch count and finger IDs Assigned by Linux
Aug 26, 2026 CVE-2026-80565 High 7.8 crypto: qce - fix error path in devm_qce_register_algs Assigned by Linux
Aug 26, 2026 CVE-2026-80564 Not yet scored gve: fix NULL dereference due to missing ptp adjfine Assigned by Linux
Aug 26, 2026 CVE-2026-80563 Not yet scored gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind Assigned by Linux
Aug 26, 2026 CVE-2026-80562 Not yet scored gpio: ml-ioh: use raw_spinlock_t for the register lock Assigned by Linux
Aug 26, 2026 CVE-2026-80561 Critical 9.8 libceph: fix multiple unsafe decodes in decode_locker() Assigned by Linux
Aug 26, 2026 CVE-2026-80560 High 7.8 openrisc: signal: do not restore privileged SR bits on sigreturn Assigned by Linux
Aug 26, 2026 CVE-2026-80559 High 7.8 Input: sur40 - fix input device registration ordering Assigned by Linux
Aug 26, 2026 CVE-2026-80558 Critical 9.8 libceph: Avoid using invalid osd indices from primary_temp Assigned by Linux
Aug 26, 2026 CVE-2026-80557 Critical 9.8 libceph: fix OOB read in decode_watchers() via missing bounds check Assigned by Linux
Aug 26, 2026 CVE-2026-80556 High 7.8 mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition Assigned by Linux
Aug 26, 2026 CVE-2026-80555 High 7.1 s390/vfio_ccw: Free all memory if cp_init() fails Assigned by Linux
Aug 26, 2026 CVE-2026-80554 Critical 9.3 s390/vfio_ccw: Limit the number of channel program segments Assigned by Linux
Aug 26, 2026 CVE-2026-80553 High 8.8 s390/vfio_ccw: Cancel existing workqueues Assigned by Linux
Aug 26, 2026 CVE-2026-80552 High 8.8 s390/vfio_ccw: Ensure index for read/write regions are within range Assigned by Linux
Aug 26, 2026 CVE-2026-80551 Critical 9.3 s390/vfio_ccw: Ensure first IDAW remains constant Assigned by Linux
Aug 26, 2026 CVE-2026-80550 High 7.9 s390/vfio_ccw: Fix out of bounds check on CCW array Assigned by Linux
Aug 26, 2026 CVE-2026-80549 High 8.2 s390/vfio_ccw: Move cp cleanup out of not operational Assigned by Linux
Aug 26, 2026 CVE-2026-80548 High 8.8 s390/vfio_ccw: Selectively expand io_mutex Assigned by Linux
Aug 26, 2026 CVE-2026-80547 High 8.8 s390/vfio_ccw: Implement a crw lock Assigned by Linux
Aug 26, 2026 CVE-2026-80546 High 7.8 s390/zcrypt: Improve CCA CPRB length and overflow checks Assigned by Linux
Aug 26, 2026 CVE-2026-80545 High 7.8 s390/zcrypt: Improve EP11 CPRB length and overflow checks Assigned by Linux
Aug 26, 2026 CVE-2026-80544 High 7.8 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing Assigned by Linux
Aug 26, 2026 CVE-2026-80543 Not yet scored s390/zcrypt: Pad trailing CCA or EP11 message with zeros Assigned by Linux
Aug 26, 2026 CVE-2026-80542 Not yet scored drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() Assigned by Linux
Aug 26, 2026
Previous Page 60 of 179 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
