CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 16:20 UTC )
This week: 5,355 CVEs published, 351 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,355 Show in the list Critical, last 7 days 351 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2025-21640 High 7.1 sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy Assigned by Linux
Jan 19, 2025 CVE-2025-21645 Medium 5.5 platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Assigned by Linux
Jan 19, 2025 CVE-2025-21647 High 7.3 sched: sch_cake: add bounds checks to host bulk flow fairness counts Assigned by Linux
Jan 19, 2025 CVE-2025-21648 Medium 5.5 netfilter: conntrack: clamp maximum hashtable size to INT_MAX Assigned by Linux
Jan 19, 2025 CVE-2025-21653 Not yet scored net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute Assigned by Linux
Jan 19, 2025 CVE-2024-57913 Medium 4.7 usb: gadget: f_fs: Remove WARN_ON in functionfs_bind Assigned by Linux
Jan 19, 2025 CVE-2024-57917 High 7.8 topology: Keep the cpumask unchanged when printing cpumap Assigned by Linux
Jan 19, 2025 CVE-2024-57924 Medium 5.5 fs: relax assertions on failure to encode file handles Assigned by Linux
Jan 19, 2025 CVE-2024-57929 High 7.8 dm array: fix releasing a faulty array block twice in dm_array_cursor_end Assigned by Linux
Jan 19, 2025 CVE-2025-21655 High 7.8 io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period Assigned by Linux
Jan 20, 2025 CVE-2024-57932 Critical 9.8 gve: guard XDP xmit NDO on existence of xdp queues Assigned by Linux
Jan 21, 2025 CVE-2024-57936 Critical 9.8 RDMA/bnxt_re: Fix max SGEs for the Work Request Assigned by Linux
Jan 21, 2025 CVE-2024-57940 Medium 5.5 exfat: fix the infinite loop in exfat_readdir() Assigned by Linux
Jan 21, 2025 CVE-2025-21664 High 7.8 dm thin: make get_first_thin use rcu-safe list first function Assigned by Linux
Jan 21, 2025 CVE-2024-57948 Medium 5.5 mac802154: check local interfaces before deleting sdata list Assigned by Linux
Jan 31, 2025 CVE-2025-21666 Medium 5.5 vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Assigned by Linux
Jan 31, 2025 CVE-2025-21669 High 7.8 vsock/virtio: discard packets if the transport changes Assigned by Linux
Jan 31, 2025 CVE-2025-21676 High 7.5 net: fec: handle page_pool_dev_alloc_pages error Assigned by Linux
Jan 31, 2025 CVE-2025-21678 High 7.8 gtp: Destroy device along with udp socket's netns dismantle. Assigned by Linux
Jan 31, 2025 CVE-2025-21682 High 7.3 eth: bnxt: always recalculate features after XDP clearing, fix null-deref Assigned by Linux
Jan 31, 2025 CVE-2025-21683 Medium 5.5 bpf: Fix bpf_sk_select_reuseport() memory leak Assigned by Linux
Jan 31, 2025 CVE-2025-21692 High 7.8 net: sched: fix ets qdisc OOB Indexing Assigned by Linux
Feb 10, 2025 CVE-2024-57951 High 7.8 hrtimers: Handle CPU state correctly on hotplug Assigned by Linux
Feb 12, 2025 CVE-2025-21694 Medium 5.5 fs/proc: fix softlockup in __read_vmcore (part 2) Assigned by Linux
Feb 12, 2025 CVE-2025-21700 High 7.8 net: sched: Disallow replacing of child qdisc from one parent to another Assigned by Linux
Feb 13, 2025 CVE-2025-21701 High 7.8 net: avoid race between device unregistration and ethnl ops Assigned by Linux
Feb 13, 2025 CVE-2025-21702 High 7.8 pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Assigned by Linux
Feb 18, 2025 CVE-2025-21703 High 7.8 netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() Assigned by Linux
Feb 18, 2025 CVE-2025-21704 High 7.8 usb: cdc-acm: Check control transfer buffer size before access Assigned by Linux
Feb 22, 2025 CVE-2022-49048 High 7.5 ipv6: fix panic when forwarding a pkt with no in6 dev Assigned by Linux
Feb 26, 2025 CVE-2022-49089 High 7.8 IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition Assigned by Linux
Feb 26, 2025 CVE-2022-49092 High 7.1 net: ipv4: fix route with nexthop object delete warning Assigned by Linux
Feb 26, 2025 CVE-2022-49094 Critical 9.8 net/tls: fix slab-out-of-bounds bug in decrypt_internal Assigned by Linux
Feb 26, 2025 CVE-2022-49110 High 7.5 netfilter: conntrack: revisit gc autotuning Assigned by Linux
Feb 26, 2025 CVE-2022-49149 Critical 9.8 rxrpc: Fix call timer start racing with call destruction Assigned by Linux
Feb 26, 2025 CVE-2022-49159 High 8.8 scsi: qla2xxx: Implement ref count for SRB Assigned by Linux
Feb 26, 2025 CVE-2022-49174 High 7.8 ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit Assigned by Linux
Feb 26, 2025 CVE-2022-49178 High 7.8 memstick/mspro_block: fix handling of read-only devices Assigned by Linux
Feb 26, 2025 CVE-2022-49407 Critical 9.8 dlm: fix plock invalid read Assigned by Linux
Feb 26, 2025 CVE-2022-49554 High 7.8 zsmalloc: fix races between asynchronous zspage free and page migration Assigned by Linux
Feb 26, 2025 CVE-2022-49581 High 7.8 be2net: Fix buffer overflow in be_get_module_eeprom Assigned by Linux
Feb 26, 2025 CVE-2024-57973 High 8.1 rdma/cxgb4: Prevent potential integer overflow on 32bit Assigned by Linux
Feb 27, 2025 CVE-2024-57977 Medium 5.5 memcg: fix soft lockup in the OOM process Assigned by Linux
Feb 27, 2025 CVE-2024-57979 High 7.8 pps: Fix a use-after-free Assigned by Linux
Feb 27, 2025 CVE-2024-57980 High 7.8 media: uvcvideo: Fix double free in error path Assigned by Linux
Feb 27, 2025 CVE-2024-57981 Medium 5.5 usb: xhci: Fix NULL pointer dereference on certain command aborts Assigned by Linux
Feb 27, 2025 CVE-2024-57985 High 7.0 firmware: qcom: scm: Cleanup global '__scm' on probe failures Assigned by Linux
Feb 27, 2025 CVE-2024-57986 High 7.1 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections Assigned by Linux
Feb 27, 2025 CVE-2024-57993 Medium 5.5 HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check Assigned by Linux
Feb 27, 2025 CVE-2024-57996 High 7.8 net_sched: sch_sfq: don't allow 1 packet limit Assigned by Linux
Feb 27, 2025
Previous Page 10 of 142 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
