CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 17:30 UTC )
This week: 5,375 CVEs published, 350 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,375 Show in the list Critical, last 7 days 350 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-98467 Not yet scored KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race Assigned by Linux
Oct 18, 2026 CVE-2026-98466 Not yet scored KVM: arm64: Transfer the hyp stack pages out of the host stage-2 Assigned by Linux
Oct 18, 2026 CVE-2026-98465 Not yet scored RISC-V: KVM: Serialize IMSIC attributes with vCPU migration Assigned by Linux
Oct 18, 2026 CVE-2026-98464 Not yet scored RISC-V: KVM: Synchronize hrtimer callback during teardown Assigned by Linux
Oct 18, 2026 CVE-2026-98463 Not yet scored sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags Assigned by Linux
Oct 18, 2026 CVE-2026-98462 Not yet scored Bluetooth: hci_conn: fix CIS hold ownership on reuse Assigned by Linux
Oct 18, 2026 CVE-2026-98461 Not yet scored Bluetooth: hci_sock: validate event length before filtering Assigned by Linux
Oct 18, 2026 CVE-2026-98460 Not yet scored Bluetooth: hci_sock: reject out-of-range OCF values Assigned by Linux
Oct 18, 2026 CVE-2026-98459 Not yet scored Bluetooth: ISO: balance the parent hold in hci_bind_bis() Assigned by Linux
Oct 18, 2026 CVE-2026-98458 Not yet scored Bluetooth: ISO: release unused CIS holds after channel attach Assigned by Linux
Oct 18, 2026 CVE-2026-98457 Not yet scored Bluetooth: L2CAP: validate frame length before control and FCS access Assigned by Linux
Oct 18, 2026 CVE-2026-98456 Not yet scored Bluetooth: mgmt: fix race in read_unconf_index_list() Assigned by Linux
Oct 18, 2026 CVE-2026-98455 Not yet scored Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Assigned by Linux
Oct 18, 2026 CVE-2026-98454 Not yet scored smb: client: fix create context out-of-bounds reads Assigned by Linux
Oct 18, 2026 CVE-2026-98453 Not yet scored smb: client: close handle after create-context parsing failure Assigned by Linux
Oct 18, 2026 CVE-2026-98452 Not yet scored smb: client: clean up failed cached directory opens Assigned by Linux
Oct 18, 2026 CVE-2026-98451 Not yet scored smb: client: use finish_no_open() for non-regular inodes Assigned by Linux
Oct 18, 2026 CVE-2026-98450 Not yet scored smb: client: close completed creates on compound wait errors Assigned by Linux
Oct 18, 2026 CVE-2026-98449 Not yet scored smb: client: delete compound mids on send failure before unlock Assigned by Linux
Oct 18, 2026 CVE-2026-98448 Not yet scored xfs: release orphanage dir inode if chown fails Assigned by Linux
Oct 18, 2026 CVE-2026-98447 Not yet scored xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots Assigned by Linux
Oct 18, 2026 CVE-2026-98446 Not yet scored xfs: don't let hidden_space go negative in xfs_metafile_resv_init Assigned by Linux
Oct 18, 2026 CVE-2026-98445 Not yet scored xfs: don't let memory failures leak blocks and kill repairs Assigned by Linux
Oct 18, 2026 CVE-2026-98444 Not yet scored xfs: drop dquot flush lock when we can't find a buffer to flush Assigned by Linux
Oct 18, 2026 CVE-2026-98443 Not yet scored xfs: fix cursor and pointer handling when recovering iunlink buckets Assigned by Linux
Oct 18, 2026 CVE-2026-98442 Not yet scored net/sched: act_ct: fix helper UAF due to extensions realloc Assigned by Linux
Oct 18, 2026 CVE-2026-98441 Not yet scored net/sched: act_ct: avoid modifying shared unconfirmed ct entry Assigned by Linux
Oct 18, 2026 CVE-2026-98440 Not yet scored KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction Assigned by Linux
Oct 18, 2026 CVE-2026-98439 Not yet scored smb/server: cancel async requests when closing connection Assigned by Linux
Oct 18, 2026 CVE-2026-98438 Not yet scored mptcp: options: fix uninit-value in mptcp_write_data_fin Assigned by Linux
Oct 18, 2026 CVE-2026-98437 Not yet scored media: qcom: iris: fix runtime PM reference leaks Assigned by Linux
Oct 18, 2026 CVE-2026-98436 Not yet scored accel/amdxdna: Disable device buffer exporting Assigned by Linux
Oct 18, 2026 CVE-2026-98435 Not yet scored EDAC/altera: Use parent device for devres in altr_portb_setup() Assigned by Linux
Oct 18, 2026 CVE-2026-98434 Not yet scored sysctl: Check range in proc_dointvec_ms_jiffies_minmax Assigned by Linux
Oct 18, 2026 CVE-2026-98433 Not yet scored KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Assigned by Linux
Oct 18, 2026 CVE-2026-99999 Critical 9.3 ipv4: validate checksum_start before completing checksum Assigned by Linux
Oct 15, 2026 CVE-2026-98432 Not yet scored ipv4: free inet_opt and ireq_opt after an RCU grace period Assigned by Linux
Oct 15, 2026 CVE-2026-98431 Not yet scored RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency Assigned by Linux
Oct 14, 2026 CVE-2026-98430 Not yet scored RDMA/efa: Keep admin queues alive while IRQ is registered Assigned by Linux
Oct 14, 2026 CVE-2026-98429 Not yet scored RDMA/efa: Keep EQ resources alive while IRQ is registered Assigned by Linux
Oct 14, 2026 CVE-2026-98428 Not yet scored ALSA: usb: 6fire: Avoid embedded URBs Assigned by Linux
Oct 14, 2026 CVE-2026-98427 Not yet scored net/sched: codel: bound the dropping loop per dequeue call Assigned by Linux
Oct 14, 2026 CVE-2026-98426 Not yet scored wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Assigned by Linux
Oct 14, 2026 CVE-2026-98425 Not yet scored wifi: mac80211: don't warn when an IBSS has no channel to scan Assigned by Linux
Oct 14, 2026 CVE-2026-98424 Not yet scored wifi: cfg80211: undo netns switch if renaming the wiphy fails Assigned by Linux
Oct 14, 2026 CVE-2026-98423 Not yet scored wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping Assigned by Linux
Oct 14, 2026 CVE-2026-98422 Not yet scored wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Assigned by Linux
Oct 14, 2026 CVE-2026-98421 Not yet scored wifi: mac80211: require a peer station for TDLS setup confirm Assigned by Linux
Oct 14, 2026 CVE-2026-98420 Not yet scored ksmbd: follow SMB2 session expiration semantics Assigned by Linux
Oct 14, 2026 CVE-2026-98419 Not yet scored drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Assigned by Linux
Oct 14, 2026
Previous Page 9 of 142 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
