CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:00 UTC )
This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
6,816 CVEs, showing 1 to 50 Page 1 of 137 Next CVE Severity Title Published CVE-2026-98868 Not yet scored dm-pcache: reject a kset that overruns its segment Assigned by Linux
Oct 18, 2026 CVE-2026-98867 Not yet scored dm-pcache: bound the logical key offset from persistent memory Assigned by Linux
Oct 18, 2026 CVE-2026-98866 Not yet scored sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Assigned by Linux
Oct 18, 2026 CVE-2026-98865 Not yet scored sched_ext: Don't run ops.dequeue() with a DSQ lock held Assigned by Linux
Oct 18, 2026 CVE-2026-98864 Not yet scored sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task Assigned by Linux
Oct 18, 2026 CVE-2026-98863 Not yet scored KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Assigned by Linux
Oct 18, 2026 CVE-2026-98862 Not yet scored audit: fix exe mark UAF in kill_rules() Assigned by Linux
Oct 18, 2026 CVE-2026-98861 Not yet scored fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() Assigned by Linux
Oct 18, 2026 CVE-2026-98860 Not yet scored HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request Assigned by Linux
Oct 18, 2026 CVE-2026-98859 Not yet scored HID: multitouch: stop the release timer from being rearmed on remove Assigned by Linux
Oct 18, 2026 CVE-2026-98858 Not yet scored io_uring: fix task_work add use-after-free with SQPOLL Assigned by Linux
Oct 18, 2026 CVE-2026-98857 Not yet scored ipvs: bound LBLCR and LBLC cache growth Assigned by Linux
Oct 18, 2026 CVE-2026-98856 Not yet scored kprobes: Skip disarmed probes when checking optkprobe overlap Assigned by Linux
Oct 18, 2026 CVE-2026-98855 Not yet scored of/overlay: put property on deadprops only after changeset add succeeds Assigned by Linux
Oct 18, 2026 CVE-2026-98854 Not yet scored of/overlay: only treat a positive changeset id as registered Assigned by Linux
Oct 18, 2026 CVE-2026-98853 Not yet scored net: gso: limit recursive IP-in-IP segmentation Assigned by Linux
Oct 18, 2026 CVE-2026-98852 Not yet scored net: extend IPv6 exthdr detection of tunneled packets Assigned by Linux
Oct 18, 2026 CVE-2026-98851 Not yet scored netfilter: nft_flow_offload: drop flowtable reference on init error path Assigned by Linux
Oct 18, 2026 CVE-2026-98850 Not yet scored net/packet: prevent TX_RING byte count overflow Assigned by Linux
Oct 18, 2026 CVE-2026-98849 Not yet scored pfcp: fix socket lifetime on netdevice registration failure Assigned by Linux
Oct 18, 2026 CVE-2026-98848 Not yet scored rtc: ac100: Assign .num before accessing .hws Assigned by Linux
Oct 18, 2026 CVE-2026-98847 Not yet scored rtc: spear: initialize IRQ state before requesting alarm IRQ Assigned by Linux
Oct 18, 2026 CVE-2026-98846 Not yet scored sctp: check RCV_SHUTDOWN after the sendmsg connect wait Assigned by Linux
Oct 18, 2026 CVE-2026-98845 Not yet scored tpm: Disable TPM on null key name mismatch Assigned by Linux
Oct 18, 2026 CVE-2026-98844 Not yet scored netfs: clear post-EOF pagecache when extending a file via write Assigned by Linux
Oct 18, 2026 CVE-2026-98843 Not yet scored netfs: zero gaps in read-gaps folio to avoid writing back stale data Assigned by Linux
Oct 18, 2026 CVE-2026-98842 Not yet scored module: fix lost error code from codetag_load_module() Assigned by Linux
Oct 18, 2026 CVE-2026-98841 Not yet scored virt: vmgenid: set driver_data before registering notification handlers Assigned by Linux
Oct 18, 2026 CVE-2026-98840 Not yet scored vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF Assigned by Linux
Oct 18, 2026 CVE-2026-98839 Not yet scored vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() Assigned by Linux
Oct 18, 2026 CVE-2026-98838 Not yet scored vt: skip screen update for DEC alignment test on backgroup consoles Assigned by Linux
Oct 18, 2026 CVE-2026-98837 Not yet scored ALSA: caiaq: unregister the input device when probe fails Assigned by Linux
Oct 18, 2026 CVE-2026-98836 Not yet scored ALSA: line6: reject oversized playback packets Assigned by Linux
Oct 18, 2026 CVE-2026-98835 Not yet scored iio: accel: kionix-kx022a: Fix array boundary check Assigned by Linux
Oct 18, 2026 CVE-2026-98834 Not yet scored mtd: core: avoid double-free of OTP NVMEM device Assigned by Linux
Oct 18, 2026 CVE-2026-98833 Not yet scored mtd: core: call _get_device() with the master MTD Assigned by Linux
Oct 18, 2026 CVE-2026-98832 Not yet scored blk-cgroup: save IRQ state in blkg_tryget_closest() Assigned by Linux
Oct 18, 2026 CVE-2026-98831 Not yet scored of/overlay: don't leak fragment references when changeset init fails Assigned by Linux
Oct 18, 2026 CVE-2026-98830 Not yet scored wifi: wfx: validate MIB read length before copying to caller Assigned by Linux
Oct 18, 2026 CVE-2026-98829 Not yet scored wifi: mac80211: drop oversized fragments to avoid extra_len overflow Assigned by Linux
Oct 18, 2026 CVE-2026-98828 Not yet scored wifi: ath9k: reject short WMI command responses Assigned by Linux
Oct 18, 2026 CVE-2026-98827 Not yet scored wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE Assigned by Linux
Oct 18, 2026 CVE-2026-98826 Not yet scored rtc: ac100: Fix clock provider use-after-free on probe failure Assigned by Linux
Oct 18, 2026 CVE-2026-98825 Not yet scored rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() Assigned by Linux
Oct 18, 2026 CVE-2026-98824 Not yet scored wifi: mac80211: validate TX status rate metadata Assigned by Linux
Oct 18, 2026 CVE-2026-98823 Not yet scored wifi: cfg80211: preserve hidden-group beacon IE ownership Assigned by Linux
Oct 18, 2026 CVE-2026-98822 Not yet scored wifi: mac80211: prevent AP VLAN tx from other interfaces Assigned by Linux
Oct 18, 2026 CVE-2026-98821 Not yet scored block: reject polled dio with user integrity metadata Assigned by Linux
Oct 18, 2026 CVE-2026-98820 Not yet scored blk-mq: set RQF_USE_SCHED when the operation is known Assigned by Linux
Oct 18, 2026 CVE-2026-98819 Not yet scored Bluetooth: btintel: validate DDC record lengths Assigned by Linux
Oct 18, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
