CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 08:00 UTC )
This week: 4,389 CVEs published, 331 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,389 Show in the list Critical, last 7 days 331 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72310 High 8.1 smb: client: fix overflow in passthrough ioctl bounds check Assigned by Linux
Aug 15, 2026 CVE-2026-72311 Not yet scored drm/xe: free madvise VMA array on L2 flush failure Assigned by Linux
Aug 15, 2026 CVE-2026-72312 High 7.9 octeontx2-af: fix VF bringup affecting PF promiscuous state Assigned by Linux
Aug 15, 2026 CVE-2026-72313 Not yet scored drm/fb-helper: Only consider active CRTCs for vblank sync Assigned by Linux
Aug 15, 2026 CVE-2026-72314 High 7.8 regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Assigned by Linux
Aug 15, 2026 CVE-2026-72315 High 7.8 smb: client: fix busy dentry warning on unmount after DIO Assigned by Linux
Aug 15, 2026 CVE-2026-72316 Not yet scored dm era: fix NULL pointer dereference in metadata_open() Assigned by Linux
Aug 15, 2026 CVE-2026-72317 Critical 9.8 SUNRPC: pin upper rpc_clnt across the TLS connect_worker Assigned by Linux
Aug 15, 2026 CVE-2026-72318 Critical 9.4 cifs: validate DFS referral string offsets Assigned by Linux
Aug 15, 2026 CVE-2026-72319 Critical 9.8 ipvs: ensure inner headers in ICMP errors are in headroom Assigned by Linux
Aug 15, 2026 CVE-2026-72320 Critical 9.1 netfilter: nft_lookup: fix catchall element handling with inverted lookups Assigned by Linux
Aug 15, 2026 CVE-2026-72321 Not yet scored ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Assigned by Linux
Aug 15, 2026 CVE-2026-72322 Critical 9.8 ipv6: mcast: Fix potential UAF in MLD delayed work Assigned by Linux
Aug 15, 2026 CVE-2026-72323 Critical 9.8 ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Assigned by Linux
Aug 15, 2026 CVE-2026-72324 Not yet scored gpio: mvebu: free generic chips on unbind Assigned by Linux
Aug 15, 2026 CVE-2026-72325 Not yet scored perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Assigned by Linux
Aug 15, 2026 CVE-2026-72326 Not yet scored net/sched: cake: reject overhead values that underflow length Assigned by Linux
Aug 15, 2026 CVE-2026-72327 Not yet scored drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Assigned by Linux
Aug 15, 2026 CVE-2026-72328 High 7.8 accel/amdxdna: Fix potential amdxdna_umap lifetime race Assigned by Linux
Aug 15, 2026 CVE-2026-72329 Critical 9.3 net/liquidio: drop cached VF pci_dev LUT Assigned by Linux
Aug 15, 2026 CVE-2026-72330 High 7.5 net/tls: Consume empty data records in tls_sw_read_sock() Assigned by Linux
Aug 15, 2026 CVE-2026-72331 High 7.8 accel/amdxdna: Fix VMA access race Assigned by Linux
Aug 15, 2026 CVE-2026-72332 Not yet scored accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() Assigned by Linux
Aug 15, 2026 CVE-2026-72333 Not yet scored Bluetooth: L2CAP: fix tx ident leak for commands without a response Assigned by Linux
Aug 15, 2026 CVE-2026-72334 High 8.8 Bluetooth: ISO: fix malformed ISO_END/CONT handling Assigned by Linux
Aug 15, 2026 CVE-2026-72335 High 7.8 Bluetooth: MGMT: Fix adv monitor add failure cleanup Assigned by Linux
Aug 15, 2026 CVE-2026-72336 Not yet scored Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Assigned by Linux
Aug 15, 2026 CVE-2026-72337 Not yet scored Bluetooth: 6lowpan: avoid untracked enable work Assigned by Linux
Aug 15, 2026 CVE-2026-72338 High 7.8 net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Assigned by Linux
Aug 15, 2026 CVE-2026-72339 Critical 9.8 qede: fix off-by-one in BD ring consumption on build_skb failure Assigned by Linux
Aug 15, 2026 CVE-2026-72340 High 7.8 net: microchip: vcap: fix races on the shared Super VCAP block Assigned by Linux
Aug 15, 2026 CVE-2026-72341 Not yet scored net/mlx5e: Fix publication race for priv->channel_stats[] Assigned by Linux
Aug 15, 2026 CVE-2026-72342 High 8.4 net/mlx5e: Fix HV VHCA stats agent registration race Assigned by Linux
Aug 15, 2026 CVE-2026-72343 High 8.4 net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Assigned by Linux
Aug 15, 2026 CVE-2026-72344 High 7.8 net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable Assigned by Linux
Aug 15, 2026 CVE-2026-72345 High 7.8 net/mlx5: LAG, Fix off-by-one in single-FDB error rollback Assigned by Linux
Aug 15, 2026 CVE-2026-72346 Not yet scored platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume Assigned by Linux
Aug 15, 2026 CVE-2026-72347 High 7.3 netfilter: xt_connmark: reject invalid shift parameters Assigned by Linux
Aug 15, 2026 CVE-2026-72348 Critical 9.1 netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Assigned by Linux
Aug 15, 2026 CVE-2026-72349 Not yet scored netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Assigned by Linux
Aug 15, 2026 CVE-2026-72350 High 7.8 netfilter: xt_u32: reject invalid shift counts Assigned by Linux
Aug 15, 2026 CVE-2026-72351 Critical 9.8 gue: validate REMCSUM private option length Assigned by Linux
Aug 15, 2026 CVE-2026-72352 High 7.8 HID: bpf: Fix hid_bpf_get_data() range check Assigned by Linux
Aug 15, 2026 CVE-2026-72353 High 8.8 ntfs: avoid stale runlist element dereference in fallocate Assigned by Linux
Aug 15, 2026 CVE-2026-72354 High 8.8 ntfs: avoid stale runlist element dereference in MFT writeback Assigned by Linux
Aug 15, 2026 CVE-2026-72355 Critical 9.8 netfs: Fix barriering when walking subrequest list Assigned by Linux
Aug 15, 2026 CVE-2026-72356 High 7.5 cifs: Fix missing credit release on failure in cifs_issue_read() Assigned by Linux
Aug 15, 2026 CVE-2026-72357 High 7.8 uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline Assigned by Linux
Aug 15, 2026 CVE-2026-72358 High 7.8 drm/xe/pt: prevent invalid cursor access for purged BOs Assigned by Linux
Aug 15, 2026 CVE-2026-72359 Not yet scored drm/xe: fix NPD in bo_meminfo() Assigned by Linux
Aug 15, 2026
Previous Page 107 of 181 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
