CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 16:40 UTC )
This week: 5,345 CVEs published, 351 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,345 Show in the list Critical, last 7 days 351 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98517 Not yet scored drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM Assigned by Linux
Oct 18, 2026 CVE-2026-98516 Not yet scored drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Assigned by Linux
Oct 18, 2026 CVE-2026-98515 Not yet scored drm/nouveau: fix double-free in nvif_vmm_dtor Assigned by Linux
Oct 18, 2026 CVE-2026-98514 Not yet scored drm/nouveau: Fix gem reference leak in validate_init() Assigned by Linux
Oct 18, 2026 CVE-2026-98513 Not yet scored drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() Assigned by Linux
Oct 18, 2026 CVE-2026-98512 Not yet scored drm/nouveau: RCU-free the scheduler-containing nouveau_sched Assigned by Linux
Oct 18, 2026 CVE-2026-98511 Not yet scored drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Assigned by Linux
Oct 18, 2026 CVE-2026-98510 Not yet scored drm/xe/vm: nuke PTs only after unlinking contested VMAs Assigned by Linux
Oct 18, 2026 CVE-2026-98509 Not yet scored drm/virtio: fix memory leak of fence event on execbuffer failure Assigned by Linux
Oct 18, 2026 CVE-2026-98508 Not yet scored drm/virtio: fix NULL pointer dereference on fence allocation failure Assigned by Linux
Oct 18, 2026 CVE-2026-98507 Not yet scored mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish Assigned by Linux
Oct 18, 2026 CVE-2026-98506 Not yet scored mm/hugetlb: do not dissolve gigantic pages without runtime support Assigned by Linux
Oct 18, 2026 CVE-2026-98505 Not yet scored mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() Assigned by Linux
Oct 18, 2026 CVE-2026-98504 Not yet scored PCI: of_property: Omit bus properties without a subordinate bus Assigned by Linux
Oct 18, 2026 CVE-2026-98503 Not yet scored packet: use ubuf_info completion for TX_RING packets Assigned by Linux
Oct 18, 2026 CVE-2026-98502 Not yet scored HID: alps: unregister DualPoint Stick input device on remove Assigned by Linux
Oct 18, 2026 CVE-2026-98501 Not yet scored HID: alps: fix use-after-free on input2 registration failure Assigned by Linux
Oct 18, 2026 CVE-2026-98500 Not yet scored HID: hid-oxp: use cancel_delayed_work_sync() in remove Assigned by Linux
Oct 18, 2026 CVE-2026-98499 Not yet scored HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Assigned by Linux
Oct 18, 2026 CVE-2026-98498 Not yet scored net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Assigned by Linux
Oct 18, 2026 CVE-2026-98497 Not yet scored net/mlx5e: fix swapped IPv6 IPsec policy masks Assigned by Linux
Oct 18, 2026 CVE-2026-98496 Not yet scored net: airoha: npu: cancel wdt_work after releasing the WDT IRQ Assigned by Linux
Oct 18, 2026 CVE-2026-98495 Not yet scored net: arp: terminate device name before lookup Assigned by Linux
Oct 18, 2026 CVE-2026-98494 Not yet scored net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Assigned by Linux
Oct 18, 2026 CVE-2026-98493 Not yet scored net: ipconfig: bound DHCP option construction Assigned by Linux
Oct 18, 2026 CVE-2026-98492 Not yet scored net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths Assigned by Linux
Oct 18, 2026 CVE-2026-98491 Not yet scored net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Assigned by Linux
Oct 18, 2026 CVE-2026-98490 Not yet scored net: openvswitch: conntrack: fix helper UAF due to extensions realloc Assigned by Linux
Oct 18, 2026 CVE-2026-98489 Not yet scored net: atl1c: fix soft lockup on out-of-range tpd_cons read Assigned by Linux
Oct 18, 2026 CVE-2026-98488 Not yet scored net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Assigned by Linux
Oct 18, 2026 CVE-2026-98487 Not yet scored net: bridge: mdb: restart port group walk after deletion Assigned by Linux
Oct 18, 2026 CVE-2026-98486 Not yet scored net: ena: fix MMIO read buffer leak on probe failure Assigned by Linux
Oct 18, 2026 CVE-2026-98485 Not yet scored netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Assigned by Linux
Oct 18, 2026 CVE-2026-98484 Not yet scored netfilter: nf_tables: skip expired catchall elements on insert and delete Assigned by Linux
Oct 18, 2026 CVE-2026-98483 Not yet scored nfc: fix use-after-free in nfc_get_local_general_bytes Assigned by Linux
Oct 18, 2026 CVE-2026-98482 Not yet scored nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Assigned by Linux
Oct 18, 2026 CVE-2026-98481 Not yet scored nfc: port100: reject frames whose declared length exceeds the received data Assigned by Linux
Oct 18, 2026 CVE-2026-98480 Not yet scored nfc: trf7970a: power down on startup RX gain failure Assigned by Linux
Oct 18, 2026 CVE-2026-98479 Not yet scored scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Assigned by Linux
Oct 18, 2026 CVE-2026-98478 Not yet scored scsi: ufs: core: Keep internal commands dispatchable during error handling Assigned by Linux
Oct 18, 2026 CVE-2026-98477 Not yet scored perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() Assigned by Linux
Oct 18, 2026 CVE-2026-98476 Not yet scored s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Assigned by Linux
Oct 18, 2026 CVE-2026-98475 Not yet scored s390/cmf: Fix virtual vs physical address confusion Assigned by Linux
Oct 18, 2026 CVE-2026-98474 Not yet scored s390/pci: Fix missing device lock in zpci_report_status() Assigned by Linux
Oct 18, 2026 CVE-2026-98473 Not yet scored s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Assigned by Linux
Oct 18, 2026 CVE-2026-98472 Not yet scored KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV Assigned by Linux
Oct 18, 2026 CVE-2026-98471 Not yet scored KVM: SEV: Do cache maintenance on the source VM during intra-host migration Assigned by Linux
Oct 18, 2026 CVE-2026-98470 Not yet scored KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode Assigned by Linux
Oct 18, 2026 CVE-2026-98469 Not yet scored KVM: arm64: Fix AArch32 DBGBXVR<n> handling Assigned by Linux
Oct 18, 2026 CVE-2026-98468 Not yet scored KVM: arm64: Fix spurious warning for benign stage 2 teardown race Assigned by Linux
Oct 18, 2026
Previous Page 8 of 142 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
