CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- unknown sadad qa paymentSadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass5.3 Medium
- unknown bitpay gateway for woocommerceBitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler5.3 Medium
- linuxDrivers: hv: Don't reset VMBus connection state on error/exit paths8.4 High
- linuxpower: supply: core: prevent unregistering a power supply while a callback runsNo score
- linuxdrm/vc4: hdmi: Move packet RAM enable to PM runtimeNo score
- linuxvsock: treat TCP_CLOSING as once-established7.8 High
- linuxnet/rds: don't let the rdma_cm destroy an id RDS still owns on route failure7.0 High
- linuxnetlink: reset skb headers before unicast and multicast filteringNo score
- linuxaccel/rocket: clear rdev on device init failureNo score
- linuxdrm/xe: skip eviction of a BO with no resourceNo score
- linuxdrm/xe/oa: Zero OA buffer at allocationNo score
- linuxscsi: target: Disable interrupts while holding delayed_cmd_lockNo score
- linuxscsi: target: iscsi: Fix race in discovery auth updatesNo score
- linuxsched/core: Call wakeup_preempt() for queued tasks during class changeNo score
- linuxocfs2/dlm: Protect the recovery list during debugfs readsNo score
- linuxpipe: preserve existing fasync readers on writer setup failure7.8 High
- linuxscsi: libsas: Fix SMP IO deadlock during HA resumeNo score
- linuxnetlink: avoid hashing the network namespace pointerNo score
- linuxnet: hisilicon: hisi_femac: Move setting of netops to fix crashNo score
- linuxnet: hisilicon: hip04_eth: Move setting of netops to fix crashNo score
- linuxnet: ethernet: actions: Move setting of netops to fix crashNo score
- linuxnet: mv643xx: move setting of netops to fix crashNo score
- linuxnet: au1000: move setting of netops to fix crashNo score
- linuxnet: ethoc: move setting of netops to fix crashNo score
- linuxnet: ethernet: aeroflex: move setting of netops to fix crashNo score
- linuxnet: ti: icssm-prueth: Move setting of netops to fix crashNo score
- linuxnet: bcmgenet: unshare the skb before writing the control blockNo score
- linuxcalipso: keep BIG TCP payload_len in calipso_skbuff_setattr()No score
- linuxgpiolib: fix memory leak in gpiod_set_array_value_complex() on error pathsNo score
- linuxgpio: mxc: fix race between chained IRQ handler install and probe completionNo score
- linuxnet: stmmac: dwmac1000: clear the RGMII status interruptNo score
- linuxperf: Fix perf_pmu_migrate_context() leaving events behindNo score
- linuxx86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()No score
- linuxfirewire: core: fix race condition in split transaction handling8.8 High
- linuxaccel/rocket: search every core slot when a core is removedNo score
- linuxaccel/rocket: search every core slot when looking up a schedulerNo score
- linuxASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH captureNo score
- linuxautofs: ignore notification errors from a replaced pipeNo score
- linuxunicode: free the map after a grace period7.8 High
- linuxwatch_queue: Fix note pool publication race in watch_queue_set_size()No score
- linuxx86/kvm: Don't consume async #PF flags on a kernel #PF in NMI contextNo score
- linuxKVM: SEV: Fix page dirtying in sev_gmem_post_populate()7.8 High
- linuxKVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-EntryNo score
- linuxfsnotify: prevent mark additions during connector teardownNo score
- linuxext4: free the sbi after a grace periodNo score
- linuxeventfs: Free the eventfs_inode after an rcu grace period too7.8 High
- linuxipc: drop the mqueue mount with kern_unmount() on setup failureNo score
- linuxntfs3: free the sbi after a grace periodNo score
- linuxnamespace: a mount that copy_tree() leaves out can't take over a lock8.8 High
- linuxfutex: Fix mm reuse handling for FUT_OFF_MMSHAREDNo score
- Show moreLoading…