CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 09:10 UTC )
This week: 4,410 CVEs published, 337 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,410 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 12 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72288 Critical 9.3 KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Assigned by Linux
Aug 15, 2026 CVE-2026-72289 Critical 9.3 KVM: arm64: vgic: Check the interrupt is still ours before migrating it Assigned by Linux
Aug 15, 2026 CVE-2026-72290 Not yet scored KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Assigned by Linux
Aug 15, 2026 CVE-2026-72291 Critical 9.3 KVM: s390: Fix unlikely race in try_get_locked_pte() Assigned by Linux
Aug 15, 2026 CVE-2026-72292 Not yet scored KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory Assigned by Linux
Aug 15, 2026 CVE-2026-72293 Not yet scored KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault() Assigned by Linux
Aug 15, 2026 CVE-2026-72294 High 8.8 LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Assigned by Linux
Aug 15, 2026 CVE-2026-72295 High 8.8 LoongArch: KVM: Validate irqchip index in irqfd routing Assigned by Linux
Aug 15, 2026 CVE-2026-72296 Critical 9.1 net: ife: require ETH_HLEN to be pullable in ife_decode() Assigned by Linux
Aug 15, 2026 CVE-2026-72297 High 7.1 net: atm: reject out-of-range traffic classes in QoS validation Assigned by Linux
Aug 15, 2026 CVE-2026-72298 High 8.4 net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Assigned by Linux
Aug 15, 2026 CVE-2026-72299 Critical 9.8 tipc: restrict socket queue dumps in enqueue tracepoints Assigned by Linux
Aug 15, 2026 CVE-2026-72300 Not yet scored ASoC: SOF: topology: validate vendor array size before parsing Assigned by Linux
Aug 15, 2026 CVE-2026-72301 High 7.8 ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Assigned by Linux
Aug 15, 2026 CVE-2026-72302 High 7.8 ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Assigned by Linux
Aug 15, 2026 CVE-2026-72303 High 7.8 ASoC: SOF: ipc4-control: Validate notification payload size Assigned by Linux
Aug 15, 2026 CVE-2026-72304 High 7.8 ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Assigned by Linux
Aug 15, 2026 CVE-2026-72305 Not yet scored VDUSE: avoid leaking information to userspace Assigned by Linux
Aug 15, 2026 CVE-2026-72306 Not yet scored vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Assigned by Linux
Aug 15, 2026 CVE-2026-72307 Not yet scored mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Assigned by Linux
Aug 15, 2026 CVE-2026-72308 Not yet scored mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Assigned by Linux
Aug 15, 2026 CVE-2026-72309 Not yet scored tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path Assigned by Linux
Aug 15, 2026 CVE-2026-72310 High 8.1 smb: client: fix overflow in passthrough ioctl bounds check Assigned by Linux
Aug 15, 2026 CVE-2026-72311 Not yet scored drm/xe: free madvise VMA array on L2 flush failure Assigned by Linux
Aug 15, 2026 CVE-2026-72312 High 7.9 octeontx2-af: fix VF bringup affecting PF promiscuous state Assigned by Linux
Aug 15, 2026 CVE-2026-72313 Not yet scored drm/fb-helper: Only consider active CRTCs for vblank sync Assigned by Linux
Aug 15, 2026 CVE-2026-72314 High 7.8 regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Assigned by Linux
Aug 15, 2026 CVE-2026-72315 High 7.8 smb: client: fix busy dentry warning on unmount after DIO Assigned by Linux
Aug 15, 2026 CVE-2026-72316 Not yet scored dm era: fix NULL pointer dereference in metadata_open() Assigned by Linux
Aug 15, 2026 CVE-2026-72317 Critical 9.8 SUNRPC: pin upper rpc_clnt across the TLS connect_worker Assigned by Linux
Aug 15, 2026 CVE-2026-72318 Critical 9.4 cifs: validate DFS referral string offsets Assigned by Linux
Aug 15, 2026 CVE-2026-72319 Critical 9.8 ipvs: ensure inner headers in ICMP errors are in headroom Assigned by Linux
Aug 15, 2026 CVE-2026-72320 Critical 9.1 netfilter: nft_lookup: fix catchall element handling with inverted lookups Assigned by Linux
Aug 15, 2026 CVE-2026-72321 Not yet scored ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Assigned by Linux
Aug 15, 2026 CVE-2026-72322 Critical 9.8 ipv6: mcast: Fix potential UAF in MLD delayed work Assigned by Linux
Aug 15, 2026 CVE-2026-72323 Critical 9.8 ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Assigned by Linux
Aug 15, 2026 CVE-2026-72324 Not yet scored gpio: mvebu: free generic chips on unbind Assigned by Linux
Aug 15, 2026 CVE-2026-72325 Not yet scored perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Assigned by Linux
Aug 15, 2026 CVE-2026-72326 Not yet scored net/sched: cake: reject overhead values that underflow length Assigned by Linux
Aug 15, 2026 CVE-2026-72327 Not yet scored drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Assigned by Linux
Aug 15, 2026 CVE-2026-72328 High 7.8 accel/amdxdna: Fix potential amdxdna_umap lifetime race Assigned by Linux
Aug 15, 2026 CVE-2026-72329 Critical 9.3 net/liquidio: drop cached VF pci_dev LUT Assigned by Linux
Aug 15, 2026 CVE-2026-72330 High 7.5 net/tls: Consume empty data records in tls_sw_read_sock() Assigned by Linux
Aug 15, 2026 CVE-2026-72331 High 7.8 accel/amdxdna: Fix VMA access race Assigned by Linux
Aug 15, 2026 CVE-2026-72332 Not yet scored accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() Assigned by Linux
Aug 15, 2026 CVE-2026-72333 Not yet scored Bluetooth: L2CAP: fix tx ident leak for commands without a response Assigned by Linux
Aug 15, 2026 CVE-2026-72334 High 8.8 Bluetooth: ISO: fix malformed ISO_END/CONT handling Assigned by Linux
Aug 15, 2026 CVE-2026-72335 High 7.8 Bluetooth: MGMT: Fix adv monitor add failure cleanup Assigned by Linux
Aug 15, 2026 CVE-2026-72336 Not yet scored Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Assigned by Linux
Aug 15, 2026 CVE-2026-72337 Not yet scored Bluetooth: 6lowpan: avoid untracked enable work Assigned by Linux
Aug 15, 2026
Previous Page 108 of 182 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
