CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 15:50 UTC )
This week: 5,492 CVEs published, 353 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,492 Show in the list Critical, last 7 days 353 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98567 Not yet scored net: xps: reject an out of range traffic class Assigned by Linux
Oct 18, 2026 CVE-2026-98566 Not yet scored drm/imagination: clamp freelist reconstruction requests Assigned by Linux
Oct 18, 2026 CVE-2026-98565 Not yet scored net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 Assigned by Linux
Oct 18, 2026 CVE-2026-98564 Not yet scored net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq Assigned by Linux
Oct 18, 2026 CVE-2026-98563 Not yet scored net: phylink: record the PHY only once bringup cannot fail Assigned by Linux
Oct 18, 2026 CVE-2026-98562 Not yet scored net: libwx: fix races in Tx timestamp handling Assigned by Linux
Oct 18, 2026 CVE-2026-98561 Not yet scored nfp: hold IPsec RX state under the XArray lock Assigned by Linux
Oct 18, 2026 CVE-2026-98560 Not yet scored net/rds: size a connection's path set by the transport it ends up with Assigned by Linux
Oct 18, 2026 CVE-2026-98559 Not yet scored net/smc: fix UAF on lgr list traversal in smcr_port_err() Assigned by Linux
Oct 18, 2026 CVE-2026-98558 Not yet scored net: flush skb_defer_nodes in dev_cpu_dead() Assigned by Linux
Oct 18, 2026 CVE-2026-98557 Not yet scored gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO Assigned by Linux
Oct 18, 2026 CVE-2026-98556 Not yet scored gve: DQO: reject TSO packets with an out of range MSS Assigned by Linux
Oct 18, 2026 CVE-2026-98555 Not yet scored llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Assigned by Linux
Oct 18, 2026 CVE-2026-98554 Not yet scored vlan: ensure sufficient headroom in vlan_dev_hard_header() Assigned by Linux
Oct 18, 2026 CVE-2026-98553 Not yet scored autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Assigned by Linux
Oct 18, 2026 CVE-2026-98552 Not yet scored perf/core: Fix a refcount leak in attach_perf_ctx_data() Assigned by Linux
Oct 18, 2026 CVE-2026-98551 Not yet scored perf/core: Fill branch entries with a single assignment Assigned by Linux
Oct 18, 2026 CVE-2026-98550 Not yet scored tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Assigned by Linux
Oct 18, 2026 CVE-2026-98549 Not yet scored tcp: prevent collapsing skbs across boundary in rtx queue Assigned by Linux
Oct 18, 2026 CVE-2026-98548 Not yet scored sctp: discard the rest of the packet on a stale-cookie error Assigned by Linux
Oct 18, 2026 CVE-2026-98547 Not yet scored af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Assigned by Linux
Oct 18, 2026 CVE-2026-98546 Not yet scored arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 Assigned by Linux
Oct 18, 2026 CVE-2026-98545 Not yet scored ata: libata-scsi: bound the ATA passthru sense descriptor writes Assigned by Linux
Oct 18, 2026 CVE-2026-98544 Not yet scored bna: prevent IOC timer rearm during teardown Assigned by Linux
Oct 18, 2026 CVE-2026-98543 Not yet scored bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir Assigned by Linux
Oct 18, 2026 CVE-2026-98542 Not yet scored cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict Assigned by Linux
Oct 18, 2026 CVE-2026-98541 Not yet scored fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Assigned by Linux
Oct 18, 2026 CVE-2026-98540 Not yet scored fprobe: Terminate the fgraph_data list when the reservation is not filled Assigned by Linux
Oct 18, 2026 CVE-2026-98539 Not yet scored fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga Assigned by Linux
Oct 18, 2026 CVE-2026-98538 Not yet scored writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes Assigned by Linux
Oct 18, 2026 CVE-2026-98537 Not yet scored workqueue: Fix NULL current_pwq deref in flush dependency check Assigned by Linux
Oct 18, 2026 CVE-2026-98536 Not yet scored writeback: report a Tasks-RCU quiescent state per cgwb drain pass Assigned by Linux
Oct 18, 2026 CVE-2026-98535 Not yet scored fsl/fman: Fix clk reference leak in read_dts_node() Assigned by Linux
Oct 18, 2026 CVE-2026-98534 Not yet scored ipe: fix use-after-free when auditing a newly loaded policy Assigned by Linux
Oct 18, 2026 CVE-2026-98533 Not yet scored ipe: protect the dm-verity root hash with RCU Assigned by Linux
Oct 18, 2026 CVE-2026-98532 Not yet scored ipv6: do not let ipv6_find_hdr() return an offset past the packet end Assigned by Linux
Oct 18, 2026 CVE-2026-98531 Not yet scored ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Assigned by Linux
Oct 18, 2026 CVE-2026-98530 Not yet scored kprobes: Fix permanent hang when flushing the kprobe optimizer Assigned by Linux
Oct 18, 2026 CVE-2026-98529 Not yet scored gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Assigned by Linux
Oct 18, 2026 CVE-2026-98528 Not yet scored gpio: cdev: fix kernel stack leak to user-space in error path Assigned by Linux
Oct 18, 2026 CVE-2026-98527 Not yet scored gpio: zynq: fix runtime PM leak on request error path Assigned by Linux
Oct 18, 2026 CVE-2026-98526 Not yet scored llc: reserve device headroom for allocated frames Assigned by Linux
Oct 18, 2026 CVE-2026-98525 Not yet scored mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() Assigned by Linux
Oct 18, 2026 CVE-2026-98524 Not yet scored rds: ib: Clear the sg list when mapping an MR fails Assigned by Linux
Oct 18, 2026 CVE-2026-98523 Not yet scored drm/client: fix restore of partially initialized client Assigned by Linux
Oct 18, 2026 CVE-2026-98522 Not yet scored drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() Assigned by Linux
Oct 18, 2026 CVE-2026-98521 Not yet scored drm/i915: fix incorrect RCU teardown order Assigned by Linux
Oct 18, 2026 CVE-2026-98520 Not yet scored drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping Assigned by Linux
Oct 18, 2026 CVE-2026-98519 Not yet scored drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() Assigned by Linux
Oct 18, 2026 CVE-2026-98518 Not yet scored drm/nouveau/dmem: pin VRAM for the whole registered range Assigned by Linux
Oct 18, 2026
Previous Page 7 of 142 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
