CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 26, 2026, 5:40 AM ET )
This week: 4,042 CVEs published, 329 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,042 Show in the list Critical, last 7 days 329 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,756 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
4,687 CVEs, showing 1 to 50 Page 1 of 94 Next CVE Severity Title Published CVE-2026-98164 High 7.1 KVM: x86/mmu: Check write tracking in all address spaces Assigned by Linux
Sep 29, 2026 CVE-2026-98163 High 7.8 cgroup: Avoid iteration of dying tasks with zero refcount Assigned by Linux
Sep 26, 2026 CVE-2026-98162 Medium 5.5 smb/server: fix tree connection leak in smb2_tree_connect() Assigned by Linux
Sep 25, 2026 CVE-2026-98161 Medium 5.5 nvdimm: pmem: keep PREFLUSH before data writes Assigned by Linux
Sep 25, 2026 CVE-2026-98160 Medium 5.5 staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() Assigned by Linux
Sep 25, 2026 CVE-2026-100079 Medium 5.5 usb: typec: ucsi: unregister debugfs entries on teardown Assigned by Linux
Sep 25, 2026 CVE-2026-100078 Medium 5.5 wifi: iwlwifi: mei: pass correct argument to function Assigned by Linux
Sep 25, 2026 CVE-2026-100077 Medium 5.5 drm/msm: Recover HW before retire hung submit Assigned by Linux
Sep 25, 2026 CVE-2026-100076 Medium 5.5 staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths Assigned by Linux
Sep 25, 2026 CVE-2026-100075 Critical 9.8 RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters Assigned by Linux
Sep 25, 2026 CVE-2026-100074 Medium 5.5 bpf: Mark bpf_refcount field as unique Assigned by Linux
Sep 25, 2026 CVE-2026-100073 Medium 5.5 ext4: fix transaction overflow during writeback Assigned by Linux
Sep 25, 2026 CVE-2026-100072 High 7.8 ACPI: platform: Use acpi_bus_get_primary_device() Assigned by Linux
Sep 25, 2026 CVE-2026-100071 Medium 5.5 net: hsr: free learned nodes on device setup failure Assigned by Linux
Sep 25, 2026 CVE-2026-100070 Medium 5.5 netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet Assigned by Linux
Sep 25, 2026 CVE-2026-98159 Medium 5.5 wifi: mt76: mt7921: validate CLC firmware records Assigned by Linux
Sep 25, 2026 CVE-2026-98158 Medium 5.5 ppp_async: drop the errored frame instead of resetting its headroom Assigned by Linux
Sep 25, 2026 CVE-2026-98157 Medium 5.5 EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Assigned by Linux
Sep 25, 2026 CVE-2026-98156 High 7.8 drm/virtio: use the DMA API for resource backing on Xen Assigned by Linux
Sep 25, 2026 CVE-2026-98155 High 7.1 accel/qaic: Address potential out-of-bounds read in resp_worker() Assigned by Linux
Sep 25, 2026 CVE-2026-98154 High 7.0 nvme-rdma: fix -EIO cleanup order in queue_rq Assigned by Linux
Sep 25, 2026 CVE-2026-98153 Medium 5.5 nvme: fix racy access to FDP placement id array Assigned by Linux
Sep 25, 2026 CVE-2026-98152 Medium 5.5 nvmet-rdma: fix queue leak when connect backlog is exceeded Assigned by Linux
Sep 25, 2026 CVE-2026-98151 Medium 5.5 bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Assigned by Linux
Sep 25, 2026 CVE-2026-98150 High 7.0 bpf: Fix BPF_F_CPU validation for sparse CPU IDs Assigned by Linux
Sep 25, 2026 CVE-2026-98149 High 7.8 bpf: Fix percpu map update indexing with sparse CPU IDs Assigned by Linux
Sep 25, 2026 CVE-2026-98146 Medium 5.5 accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain Assigned by Linux
Sep 25, 2026 CVE-2026-98139 Medium 5.5 ntfs: only count successfully cleared runs when freeing clusters Assigned by Linux
Sep 25, 2026 CVE-2026-98138 Medium 5.5 ntfs: do not mark the volume clean in sync_fs when errors were recorded Assigned by Linux
Sep 25, 2026 CVE-2026-98137 Medium 5.5 ntfs: treat any nonzero dio zero-range return as an error Assigned by Linux
Sep 25, 2026 CVE-2026-98136 High 7.1 ntfs: bound $AttrDef table walk to the loaded table size Assigned by Linux
Sep 25, 2026 CVE-2026-98135 Medium 5.5 ntfs: reject invalid sectors_per_cluster in the boot sector Assigned by Linux
Sep 25, 2026 CVE-2026-98134 Medium 5.5 bpf: check_cond_jmp_op(): properly infer if register is null Assigned by Linux
Sep 25, 2026 CVE-2026-98133 Medium 5.5 ntfs: leave HasEA flag untouched on setxattr failure Assigned by Linux
Sep 25, 2026 CVE-2026-98132 Medium 5.5 bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO Assigned by Linux
Sep 25, 2026 CVE-2026-98131 Medium 5.5 net: stmmac: fix dma mapping leak in stmmac_tso_xmit() Assigned by Linux
Sep 25, 2026 CVE-2026-98130 High 8.1 sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Assigned by Linux
Sep 25, 2026 CVE-2026-98129 Medium 5.5 scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() Assigned by Linux
Sep 25, 2026 CVE-2026-98128 Medium 5.5 scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() Assigned by Linux
Sep 25, 2026 CVE-2026-98127 Medium 5.5 smb/client: validate new EOF for insert range Assigned by Linux
Sep 25, 2026 CVE-2026-98126 Medium 5.5 smb/client: validate new EOF for zero range Assigned by Linux
Sep 25, 2026 CVE-2026-98125 Medium 5.5 smb/client: fix stale page cache in insert/collapse range Assigned by Linux
Sep 25, 2026 CVE-2026-98124 Medium 5.5 smb/client: invalidate fscache for fallocate range operations Assigned by Linux
Sep 25, 2026 CVE-2026-98123 Medium 5.5 sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration Assigned by Linux
Sep 25, 2026 CVE-2026-98122 High 7.8 vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() Assigned by Linux
Sep 25, 2026 CVE-2026-98121 Medium 5.5 watchdog: msc313e: Fix NULL pointer dereference in PM callbacks Assigned by Linux
Sep 25, 2026 CVE-2026-98115 High 8.8 ksmbd: safely drain sessions during logoff Assigned by Linux
Sep 25, 2026 CVE-2026-98109 Medium 4.7 Bluetooth: hci_core: Fix race condition during device registration Assigned by Linux
Sep 25, 2026 CVE-2026-98095 Medium 5.5 af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). Assigned by Linux
Sep 25, 2026 CVE-2026-98094 Medium 5.5 staging: fbtft: make dirty_lock IRQ-safe Assigned by Linux
Sep 25, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosecsignals.com. Every record links back to the agency that published it.
