CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 17:10 UTC )
What this means for you
This week: 5,365 CVEs published, 351 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,365 Show in the list Critical, last 7 days 351 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2024-57999 High 8.8 powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW Assigned by Linux
Feb 27, 2025 CVE-2025-21705 Medium 5.5 mptcp: handle fastopen disconnect correctly Assigned by Linux
Feb 27, 2025 CVE-2025-21706 Medium 5.5 mptcp: pm: only set fullmesh for subflow endp Assigned by Linux
Feb 27, 2025 CVE-2025-21707 Critical 9.8 mptcp: consolidate suboption status Assigned by Linux
Feb 27, 2025 CVE-2025-21708 Medium 5.5 net: usb: rtl8150: enable basic endpoint checking Assigned by Linux
Feb 27, 2025 CVE-2025-21709 High 7.8 kernel: be more careful about dup_mmap() failures and uprobe registering Assigned by Linux
Feb 27, 2025 CVE-2025-21711 Not yet scored net/rose: prevent integer overflows in rose_setsockopt() Assigned by Linux
Feb 27, 2025 CVE-2025-21712 High 7.8 md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime Assigned by Linux
Feb 27, 2025 CVE-2025-21716 Medium 5.5 vxlan: Fix uninit-value in vxlan_vnifilter_dump() Assigned by Linux
Feb 27, 2025 CVE-2025-21718 High 7.8 net: rose: fix timer races against user threads Assigned by Linux
Feb 27, 2025 CVE-2025-21719 High 7.1 ipmr: do not call mr_mfc_uses_dev() for unres entries Assigned by Linux
Feb 27, 2025 CVE-2025-21724 High 7.8 iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() Assigned by Linux
Feb 27, 2025 CVE-2025-21725 High 7.5 smb: client: fix oops due to unset link speed Assigned by Linux
Feb 27, 2025 CVE-2025-21726 High 7.8 padata: avoid UAF for reorder_work Assigned by Linux
Feb 27, 2025 CVE-2025-21727 High 7.8 padata: fix UAF in padata_reorder Assigned by Linux
Feb 27, 2025 CVE-2025-21728 Medium 5.5 bpf: Send signals asynchronously if !preemptible Assigned by Linux
Feb 27, 2025 CVE-2025-21731 High 7.8 nbd: don't allow reconnect after disconnect Assigned by Linux
Feb 27, 2025 CVE-2024-58002 High 7.8 media: uvcvideo: Remove dangling pointers Assigned by Linux
Feb 27, 2025 CVE-2024-58005 Medium 5.5 tpm: Change to kvalloc() in eventlog/acpi.c Assigned by Linux
Feb 27, 2025 CVE-2024-58009 Medium 5.5 Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc Assigned by Linux
Feb 27, 2025 CVE-2024-58011 Medium 5.5 platform/x86: int3472: Check for adev == NULL Assigned by Linux
Feb 27, 2025 CVE-2024-58013 High 7.8 Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync Assigned by Linux
Feb 27, 2025 CVE-2024-58014 High 7.1 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() Assigned by Linux
Feb 27, 2025 CVE-2024-58016 Medium 5.5 safesetid: check size of policy writes Assigned by Linux
Feb 27, 2025 CVE-2024-58017 Medium 5.5 printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Assigned by Linux
Feb 27, 2025 CVE-2025-21735 High 8.8 NFC: nci: Add bounds checking in nci_hci_create_pipe() Assigned by Linux
Feb 27, 2025 CVE-2025-21738 High 7.8 ata: libata-sff: Ensure that we cannot write outside the allocated buffer Assigned by Linux
Feb 27, 2025 CVE-2025-21744 Medium 5.5 wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() Assigned by Linux
Feb 27, 2025 CVE-2025-21745 Medium 5.5 blk-cgroup: Fix class @block_class's subsystem refcount leakage Assigned by Linux
Feb 27, 2025 CVE-2025-21753 High 7.8 btrfs: fix use-after-free when attempting to join an aborted transaction Assigned by Linux
Feb 27, 2025 CVE-2024-54458 High 7.8 scsi: ufs: bsg: Set bsg_queue to NULL after removal Assigned by Linux
Feb 27, 2025 CVE-2024-58020 Medium 5.5 HID: multitouch: Add NULL check in mt_input_configured Assigned by Linux
Feb 27, 2025 CVE-2025-21756 High 7.8 vsock: Keep the binding until socket destruction Assigned by Linux
Feb 27, 2025 CVE-2025-21758 High 7.8 ipv6: mcast: add RCU protection to mld_newpack() Assigned by Linux
Feb 27, 2025 CVE-2025-21760 High 8.1 ndisc: extend RCU protection in ndisc_send_skb() Assigned by Linux
Feb 27, 2025 CVE-2025-21761 High 7.8 openvswitch: use RCU protection in ovs_vport_cmd_fill_info() Assigned by Linux
Feb 27, 2025 CVE-2025-21762 High 8.1 arp: use RCU protection in arp_xmit() Assigned by Linux
Feb 27, 2025 CVE-2025-21763 High 7.8 neighbour: use RCU protection in __neigh_notify() Assigned by Linux
Feb 27, 2025 CVE-2025-21764 High 7.8 ndisc: use RCU protection in ndisc_alloc_skb() Assigned by Linux
Feb 27, 2025 CVE-2025-21765 High 8.1 ipv6: use RCU protection in ip6_default_advmss() Assigned by Linux
Feb 27, 2025 CVE-2025-21766 High 8.1 ipv4: use RCU protection in __ip_rt_update_pmtu() Assigned by Linux
Feb 27, 2025 CVE-2025-21767 Medium 5.5 clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context Assigned by Linux
Feb 27, 2025 CVE-2025-21772 High 7.8 partitions: mac: fix handling of bogus partition table Assigned by Linux
Feb 27, 2025 CVE-2025-21776 Medium 5.5 USB: hub: Ignore non-compliant devices with too many configs or interfaces Assigned by Linux
Feb 27, 2025 CVE-2025-21779 Medium 5.5 KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel Assigned by Linux
Feb 27, 2025 CVE-2025-21780 High 7.8 drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() Assigned by Linux
Feb 27, 2025 CVE-2025-21785 High 7.8 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array Assigned by Linux
Feb 27, 2025 CVE-2025-21787 Medium 5.5 team: better TEAM_OPTION_TYPE_STRING validation Assigned by Linux
Feb 27, 2025 CVE-2025-21790 Medium 5.5 vxlan: check vxlan_vnigroup_init() return value Assigned by Linux
Feb 27, 2025 CVE-2025-21791 High 7.8 vrf: use RCU protection in l3mdev_l3_out() Assigned by Linux
Feb 27, 2025
Previous Page 11 of 142 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.