CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:50 UTC )
This week: 5,380 CVEs published, 347 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,380 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2024-43858 High 7.8 jfs: Fix array-index-out-of-bounds in diFree Assigned by Linux
Aug 17, 2024 CVE-2024-43871 Medium 5.5 devres: Fix memory leakage caused by driver API devm_free_percpu() Assigned by Linux
Aug 21, 2024 CVE-2024-43879 Medium 5.5 wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() Assigned by Linux
Aug 21, 2024 CVE-2024-43882 High 7.8 exec: Fix ToCToU between perm check and set-uid/gid usage Assigned by Linux
Aug 21, 2024 CVE-2024-43889 Medium 5.5 padata: Fix possible divide-by-0 panic in padata_mt_helper() Assigned by Linux
Aug 26, 2024 CVE-2024-43890 Medium 5.5 tracing: Fix overflow in get_free_elt() Assigned by Linux
Aug 26, 2024 CVE-2024-43893 Medium 5.5 serial: core: check uartclk for zero to avoid divide by zero Assigned by Linux
Aug 26, 2024 CVE-2024-44935 Medium 5.5 sctp: Fix null-ptr-deref in reuseport_add_sock(). Assigned by Linux
Aug 26, 2024 CVE-2024-44944 Medium 5.5 netfilter: ctnetlink: use helper function to calculate expect ID Assigned by Linux
Aug 30, 2024 CVE-2024-44948 Medium 5.5 x86/mtrr: Check if fixed MTRRs exist before saving them Assigned by Linux
Sep 4, 2024 CVE-2024-44960 Medium 5.5 usb: gadget: core: Check for unset descriptor Assigned by Linux
Sep 4, 2024 CVE-2024-44965 Medium 5.5 x86/mm: Fix pti_clone_pgtable() alignment assumption Assigned by Linux
Sep 4, 2024 CVE-2024-44987 High 7.8 ipv6: prevent UAF in ip6_send_skb() Assigned by Linux
Sep 4, 2024 CVE-2024-44989 Medium 5.5 bonding: fix xfrm real_dev null pointer dereference Assigned by Linux
Sep 4, 2024 CVE-2024-44990 Medium 5.5 bonding: fix null pointer deref in bond_ipsec_offload_ok Assigned by Linux
Sep 4, 2024 CVE-2024-45016 High 7.8 netem: fix return value if duplicate enqueue fails Assigned by Linux
Sep 11, 2024 CVE-2024-45018 Medium 5.5 netfilter: flowtable: initialise extack before use Assigned by Linux
Sep 11, 2024 CVE-2024-46679 Medium 4.7 ethtool: check device is present when getting link settings Assigned by Linux
Sep 13, 2024 CVE-2024-46743 High 7.3 of/irq: Prevent device address out-of-bounds read in interrupt map walk Assigned by Linux
Sep 18, 2024 CVE-2024-46744 High 7.8 Squashfs: sanity check symbolic link size Assigned by Linux
Sep 18, 2024 CVE-2024-46745 Medium 5.5 Input: uinput - reject requests with unreasonable number of slots Assigned by Linux
Sep 18, 2024 CVE-2024-46750 High 7.8 PCI: Add missing bridge lock to pci_bus_lock() Assigned by Linux
Sep 18, 2024 CVE-2024-46759 High 7.8 hwmon: (adc128d818) Fix underflows seen when writing limit attributes Assigned by Linux
Sep 18, 2024 CVE-2024-46783 Medium 5.5 tcp_bpf: fix return value of tcp_bpf_sendmsg() Assigned by Linux
Sep 18, 2024 CVE-2024-46786 High 7.8 fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF Assigned by Linux
Sep 18, 2024 CVE-2024-46854 High 7.1 net: dpaa: Pad packets to ETH_ZLEN Assigned by Linux
Sep 27, 2024 CVE-2024-46865 Critical 9.8 fou: fix initialization of grc Assigned by Linux
Sep 27, 2024 CVE-2024-47660 Medium 4.7 fsnotify: clear PARENT_WATCHED flags lazily Assigned by Linux
Oct 9, 2024 CVE-2024-47684 Medium 5.5 tcp: check skb is non-NULL in tcp_rto_delta_us() Assigned by Linux
Oct 21, 2024 CVE-2024-47685 Critical 9.1 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() Assigned by Linux
Oct 21, 2024 CVE-2024-47692 Medium 6.5 nfsd: return -EINVAL when namelen is 0 Assigned by Linux
Oct 21, 2024 CVE-2024-47696 High 7.5 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency Assigned by Linux
Oct 21, 2024 CVE-2024-47697 High 7.8 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Assigned by Linux
Oct 21, 2024 CVE-2024-47699 Medium 5.5 nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() Assigned by Linux
Oct 21, 2024 CVE-2024-47701 High 7.8 ext4: avoid OOB when system.data xattr changes underneath the filesystem Assigned by Linux
Oct 21, 2024 CVE-2024-47705 Medium 5.5 block: fix potential invalid pointer dereference in blk_add_partition Assigned by Linux
Oct 21, 2024 CVE-2024-47706 High 7.8 block, bfq: fix possible UAF for bfqq->bic with merge chain Assigned by Linux
Oct 21, 2024 CVE-2024-47707 Medium 5.5 ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() Assigned by Linux
Oct 21, 2024 CVE-2024-47709 Medium 5.5 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). Assigned by Linux
Oct 21, 2024 CVE-2024-47710 Medium 5.5 sock_map: Add a cond_resched() in sock_hash_free() Assigned by Linux
Oct 21, 2024 CVE-2024-47713 Medium 5.5 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() Assigned by Linux
Oct 21, 2024 CVE-2024-47718 High 7.8 wifi: rtw88: always wait for both firmware loading attempts Assigned by Linux
Oct 21, 2024 CVE-2024-47723 High 7.8 jfs: fix out-of-bounds in dbNextAG() and diAlloc() Assigned by Linux
Oct 21, 2024 CVE-2024-47735 Medium 5.5 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Assigned by Linux
Oct 21, 2024 CVE-2024-47736 Medium 5.5 erofs: handle overlapped pclusters out of crafted images properly Assigned by Linux
Oct 21, 2024 CVE-2024-47737 Medium 5.5 nfsd: call cache_put if xdr_reserve_space returns NULL Assigned by Linux
Oct 21, 2024 CVE-2024-47747 High 7.8 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition Assigned by Linux
Oct 21, 2024 CVE-2024-49851 Medium 5.5 tpm: Clean up TPM space after command failure Assigned by Linux
Oct 21, 2024 CVE-2024-49881 Medium 5.5 ext4: update orig_path in ext4_find_extent() Assigned by Linux
Oct 21, 2024 CVE-2024-49884 High 7.8 ext4: fix slab-use-after-free in ext4_split_extent_at() Assigned by Linux
Oct 21, 2024
Previous Page 11 of 85 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
