CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 17:50 UTC )
This week: 5,379 CVEs published, 347 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,379 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2024-40941 High 8.1 wifi: iwlwifi: mvm: don't read past the mfuart notifcation Assigned by Linux
Jul 12, 2024 CVE-2024-40942 Medium 5.5 wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects Assigned by Linux
Jul 12, 2024 CVE-2024-40945 Medium 5.5 iommu: Return right value in iommu_sva_bind_device() Assigned by Linux
Jul 12, 2024 CVE-2024-40958 High 7.8 netns: Make get_net_ns() handle zero refcount net Assigned by Linux
Jul 12, 2024 CVE-2024-40959 Medium 5.5 xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() Assigned by Linux
Jul 12, 2024 CVE-2024-40960 Medium 5.5 ipv6: prevent possible NULL dereference in rt6_probe() Assigned by Linux
Jul 12, 2024 CVE-2024-40961 Medium 5.5 ipv6: prevent possible NULL deref in fib6_nh_init() Assigned by Linux
Jul 12, 2024 CVE-2024-40971 High 7.3 f2fs: remove clear SB_INLINECRYPT flag in default_options Assigned by Linux
Jul 12, 2024 CVE-2024-40978 High 7.1 scsi: qedi: Fix crash while reading debugfs attribute Assigned by Linux
Jul 12, 2024 CVE-2024-40980 High 7.5 drop_monitor: replace spin_lock by raw_spin_lock Assigned by Linux
Jul 12, 2024 CVE-2024-40984 High 7.8 ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Assigned by Linux
Jul 12, 2024 CVE-2024-40993 Medium 5.5 netfilter: ipset: Fix suspicious rcu_dereference_protected() Assigned by Linux
Jul 12, 2024 CVE-2024-40995 Medium 5.5 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() Assigned by Linux
Jul 12, 2024 CVE-2024-41000 High 7.8 block/ioctl: prefer different overflow check Assigned by Linux
Jul 12, 2024 CVE-2024-41004 Medium 5.5 tracing: Build event generation tests only as modules Assigned by Linux
Jul 12, 2024 CVE-2024-41005 Medium 4.7 netpoll: Fix race condition in netpoll_owner_active Assigned by Linux
Jul 12, 2024 CVE-2024-41006 Medium 5.5 netrom: Fix a memory leak in nr_heartbeat_expiry() Assigned by Linux
Jul 12, 2024 CVE-2022-48827 High 7.5 NFSD: Fix the behavior of READ near OFFSET_MAX Assigned by Linux
Jul 16, 2024 CVE-2022-48828 Critical 9.1 NFSD: Fix ia_size underflow Assigned by Linux
Jul 16, 2024 CVE-2022-48829 Critical 9.1 NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes Assigned by Linux
Jul 16, 2024 CVE-2024-41016 High 7.8 ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() Assigned by Linux
Jul 29, 2024 CVE-2024-41046 High 8.8 net: ethernet: lantiq_etop: fix double free in detach Assigned by Linux
Jul 29, 2024 CVE-2024-42070 Medium 5.5 netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers Assigned by Linux
Jul 29, 2024 CVE-2024-42079 Medium 5.5 gfs2: Fix NULL pointer dereference in gfs2_log_flush Assigned by Linux
Jul 29, 2024 CVE-2024-42082 Medium 5.5 xdp: Remove WARN() from __xdp_reg_mem_model() Assigned by Linux
Jul 29, 2024 CVE-2024-42090 Medium 5.5 pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER Assigned by Linux
Jul 29, 2024 CVE-2024-42093 High 7.3 net/dpaa2: Avoid explicit cpumask var allocation on stack Assigned by Linux
Jul 29, 2024 CVE-2024-42094 High 7.1 net/iucv: Avoid explicit cpumask var allocation on stack Assigned by Linux
Jul 29, 2024 CVE-2024-42096 Medium 5.5 x86: stop playing stack games in profile_pc() Assigned by Linux
Jul 29, 2024 CVE-2024-42097 High 7.8 ALSA: emux: improve patch ioctl data validation Assigned by Linux
Jul 29, 2024 CVE-2024-42106 Medium 5.5 inet_diag: Initialize pad field in struct inet_diag_req_v2 Assigned by Linux
Jul 30, 2024 CVE-2024-42114 Medium 4.4 wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values Assigned by Linux
Jul 30, 2024 CVE-2024-42131 Medium 4.4 mm: avoid overflows in dirty throttling logic Assigned by Linux
Jul 30, 2024 CVE-2024-42154 Medium 4.4 tcp_metrics: validate source addr length Assigned by Linux
Jul 30, 2024 CVE-2024-42259 High 7.8 drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Assigned by Linux
Aug 14, 2024 CVE-2024-42265 Medium 5.5 protect the fetch of ->fd[fd] in do_dup2() from mispredictions Assigned by Linux
Aug 17, 2024 CVE-2024-42272 High 7.8 sched: act_ct: take care of padding in struct zones_ht_key Assigned by Linux
Aug 17, 2024 CVE-2024-42276 High 7.8 nvme-pci: add missing condition check for existence of mapped data Assigned by Linux
Aug 17, 2024 CVE-2024-42281 Medium 5.5 bpf: Fix a segment issue when downgrading gso_size Assigned by Linux
Aug 17, 2024 CVE-2024-42283 Medium 5.5 net: nexthop: Initialize all fields in dumped nexthops Assigned by Linux
Aug 17, 2024 CVE-2024-42292 High 7.1 kobject_uevent: Fix OOB access within zap_modalias_env() Assigned by Linux
Aug 17, 2024 CVE-2024-42302 High 7.8 PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Assigned by Linux
Aug 17, 2024 CVE-2024-42304 High 7.8 ext4: make sure the first directory block is not a hole Assigned by Linux
Aug 17, 2024 CVE-2024-42305 Medium 5.5 ext4: check dot and dotdot of dx_root before making dir indexed Assigned by Linux
Aug 17, 2024 CVE-2024-42306 High 7.8 udf: Avoid using corrupted block bitmap buffer Assigned by Linux
Aug 17, 2024 CVE-2024-42312 Medium 5.5 sysctl: always initialize i_uid/i_gid Assigned by Linux
Aug 17, 2024 CVE-2024-43828 Medium 5.5 ext4: fix infinite loop when replaying fast_commit Assigned by Linux
Aug 17, 2024 CVE-2024-43830 High 7.8 leds: trigger: Unregister sysfs attributes before calling deactivate() Assigned by Linux
Aug 17, 2024 CVE-2024-43834 Medium 5.5 xdp: fix invalid wait context of page_pool_destroy() Assigned by Linux
Aug 17, 2024 CVE-2024-43856 High 7.8 dma: fix call order in dmam_free_coherent Assigned by Linux
Aug 17, 2024
Previous Page 10 of 85 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
