CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 10:00 UTC )
What this means for you
This week: 4,405 CVEs published, 337 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,405 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 12 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72338 High 7.8 net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Assigned by Linux
Aug 15, 2026 CVE-2026-72339 Critical 9.8 qede: fix off-by-one in BD ring consumption on build_skb failure Assigned by Linux
Aug 15, 2026 CVE-2026-72340 High 7.8 net: microchip: vcap: fix races on the shared Super VCAP block Assigned by Linux
Aug 15, 2026 CVE-2026-72341 Not yet scored net/mlx5e: Fix publication race for priv->channel_stats[] Assigned by Linux
Aug 15, 2026 CVE-2026-72342 High 8.4 net/mlx5e: Fix HV VHCA stats agent registration race Assigned by Linux
Aug 15, 2026 CVE-2026-72343 High 8.4 net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Assigned by Linux
Aug 15, 2026 CVE-2026-72344 High 7.8 net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable Assigned by Linux
Aug 15, 2026 CVE-2026-72345 High 7.8 net/mlx5: LAG, Fix off-by-one in single-FDB error rollback Assigned by Linux
Aug 15, 2026 CVE-2026-72346 Not yet scored platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume Assigned by Linux
Aug 15, 2026 CVE-2026-72347 High 7.3 netfilter: xt_connmark: reject invalid shift parameters Assigned by Linux
Aug 15, 2026 CVE-2026-72348 Critical 9.1 netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Assigned by Linux
Aug 15, 2026 CVE-2026-72349 Not yet scored netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Assigned by Linux
Aug 15, 2026 CVE-2026-72350 High 7.8 netfilter: xt_u32: reject invalid shift counts Assigned by Linux
Aug 15, 2026 CVE-2026-72351 Critical 9.8 gue: validate REMCSUM private option length Assigned by Linux
Aug 15, 2026 CVE-2026-72352 High 7.8 HID: bpf: Fix hid_bpf_get_data() range check Assigned by Linux
Aug 15, 2026 CVE-2026-72353 High 8.8 ntfs: avoid stale runlist element dereference in fallocate Assigned by Linux
Aug 15, 2026 CVE-2026-72354 High 8.8 ntfs: avoid stale runlist element dereference in MFT writeback Assigned by Linux
Aug 15, 2026 CVE-2026-72355 Critical 9.8 netfs: Fix barriering when walking subrequest list Assigned by Linux
Aug 15, 2026 CVE-2026-72356 High 7.5 cifs: Fix missing credit release on failure in cifs_issue_read() Assigned by Linux
Aug 15, 2026 CVE-2026-72357 High 7.8 uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline Assigned by Linux
Aug 15, 2026 CVE-2026-72358 High 7.8 drm/xe/pt: prevent invalid cursor access for purged BOs Assigned by Linux
Aug 15, 2026 CVE-2026-72359 Not yet scored drm/xe: fix NPD in bo_meminfo() Assigned by Linux
Aug 15, 2026 CVE-2026-72360 High 8.4 drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Assigned by Linux
Aug 15, 2026 CVE-2026-72361 Not yet scored drm/xe/hw_engine: Fix double-free of managed BO in error path Assigned by Linux
Aug 15, 2026 CVE-2026-72362 Not yet scored drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() Assigned by Linux
Aug 15, 2026 CVE-2026-72363 Not yet scored netfs: Fix folio state after ENOMEM whilst under writeback iteration Assigned by Linux
Aug 15, 2026 CVE-2026-72364 High 7.1 netfs: Fix writeback error handling Assigned by Linux
Aug 15, 2026 CVE-2026-72365 Not yet scored netfs: Fix writethrough to use collection offload Assigned by Linux
Aug 15, 2026 CVE-2026-72366 Critical 9.8 netfs: Fix netfs_create_write_req() to handle async cache object creation Assigned by Linux
Aug 15, 2026 CVE-2026-72367 High 8.8 iomap: guard io_size EOF trim against concurrent truncate underflow Assigned by Linux
Aug 15, 2026 CVE-2026-72368 High 7.8 cachefiles: Fix double unlock in nomem_d_alloc error path Assigned by Linux
Aug 15, 2026 CVE-2026-72369 High 7.8 minix: avoid overflow in bitmap block count calculation Assigned by Linux
Aug 15, 2026 CVE-2026-72370 Not yet scored iomap: release pages on atomic dio size mismatch Assigned by Linux
Aug 15, 2026 CVE-2026-72371 High 7.8 afs: Fix the volume AFS_VOLUME_RM_TREE is set on Assigned by Linux
Aug 15, 2026 CVE-2026-72372 High 7.8 afs: Fix lack of locking around modifications of net->cells_dyn_ino Assigned by Linux
Aug 15, 2026 CVE-2026-72373 High 7.5 afs: Fix missing NULL pointer check in afs_break_some_callbacks() Assigned by Linux
Aug 15, 2026 CVE-2026-72374 High 7.5 afs: Fix callback service message parsers to pass through -EAGAIN Assigned by Linux
Aug 15, 2026 CVE-2026-72375 High 7.8 afs: Fix reinitialisation of the inode, in particular ->lock_work Assigned by Linux
Aug 15, 2026 CVE-2026-72376 Not yet scored afs: Fix misplaced inc of net->cells_outstanding Assigned by Linux
Aug 15, 2026 CVE-2026-72377 Not yet scored afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints Assigned by Linux
Aug 15, 2026 CVE-2026-72378 High 7.5 afs: Fix error code in afs_extract_vl_addrs() Assigned by Linux
Aug 15, 2026 CVE-2026-72379 Not yet scored fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Assigned by Linux
Aug 15, 2026 CVE-2026-72380 High 8.8 xen/pvcalls: bound backend response req_id before indexing rsp[] Assigned by Linux
Aug 15, 2026 CVE-2026-72381 Critical 9.8 ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Assigned by Linux
Aug 15, 2026 CVE-2026-72382 High 8.8 ksmbd: reject undersized DACLs before parsing ACEs Assigned by Linux
Aug 15, 2026 CVE-2026-72383 High 7.8 sctp: fix addr_wq_timer race in sctp_free_addr_wq() Assigned by Linux
Aug 15, 2026 CVE-2026-72384 Not yet scored irqchip/ts4800: Fix missing chained handler cleanup on remove Assigned by Linux
Aug 15, 2026 CVE-2026-72385 Not yet scored tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() Assigned by Linux
Aug 15, 2026 CVE-2026-72386 Not yet scored drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced Assigned by Linux
Aug 15, 2026 CVE-2026-72387 Not yet scored drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() Assigned by Linux
Aug 15, 2026
Previous Page 109 of 182 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.