CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 10:50 UTC )
This week: 4,407 CVEs published, 338 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,407 Show in the list Critical, last 7 days 338 Show in the list Healthcare-tagged, last 7 days 12 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72388 Not yet scored drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Assigned by Linux
Aug 15, 2026 CVE-2026-72389 High 7.8 bridge: stp: Fix a potential use-after-free when deleting a bridge Assigned by Linux
Aug 15, 2026 CVE-2026-72390 High 7.8 net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Assigned by Linux
Aug 15, 2026 CVE-2026-72391 Not yet scored net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Assigned by Linux
Aug 15, 2026 CVE-2026-72392 Not yet scored ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Assigned by Linux
Aug 15, 2026 CVE-2026-72393 Critical 9.8 eth: fbnic: don't cache shinfo across skb realloc Assigned by Linux
Aug 15, 2026 CVE-2026-72394 Not yet scored hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Assigned by Linux
Aug 15, 2026 CVE-2026-72395 High 7.1 hwmon: (pmbus) Fix passing events to regulator core Assigned by Linux
Aug 15, 2026 CVE-2026-72396 Not yet scored hwmon: adm1275: Prevent reading uninitialized stack Assigned by Linux
Aug 15, 2026 CVE-2026-72397 High 7.1 hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() Assigned by Linux
Aug 15, 2026 CVE-2026-72398 Critical 9.8 sctp: add INIT verification after cookie unpacking Assigned by Linux
Aug 15, 2026 CVE-2026-72399 Critical 9.8 net: enetc: check the number of BDs needed for xdp_frame Assigned by Linux
Aug 15, 2026 CVE-2026-72400 High 7.8 seg6: validate SRH length before reading fixed fields Assigned by Linux
Aug 15, 2026 CVE-2026-72401 Not yet scored bpf: Fix insn_aux_data leak on verifier err_free_env path Assigned by Linux
Aug 15, 2026 CVE-2026-72402 Not yet scored bpf: Mask pseudo pointer values in verifier logs Assigned by Linux
Aug 15, 2026 CVE-2026-72403 Not yet scored ALSA: FCP: Fix NULL pointer dereference in interface lookup Assigned by Linux
Aug 15, 2026 CVE-2026-72404 High 7.8 tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() Assigned by Linux
Aug 15, 2026 CVE-2026-72405 High 7.8 net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Assigned by Linux
Aug 15, 2026 CVE-2026-72406 High 7.8 net: sungem: fix probe error cleanup Assigned by Linux
Aug 15, 2026 CVE-2026-72407 Critical 10.0 geneve: validate inner network offset in geneve_gro_complete() Assigned by Linux
Aug 15, 2026 CVE-2026-72408 Critical 10.0 geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint Assigned by Linux
Aug 15, 2026 CVE-2026-72409 High 7.5 net: mvneta: re-enable percpu interrupt on resume Assigned by Linux
Aug 15, 2026 CVE-2026-72410 High 7.8 octeontx2-af: Validate NIX maximum LFs correctly Assigned by Linux
Aug 15, 2026 CVE-2026-72411 High 7.8 net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Assigned by Linux
Aug 15, 2026 CVE-2026-72412 Critical 9.3 s390/mm: Fix handling of _PAGE_UNUSED pte bit Assigned by Linux
Aug 15, 2026 CVE-2026-72413 Not yet scored sctp: fix err_chunk memory leaks in INIT handling Assigned by Linux
Aug 15, 2026 CVE-2026-72414 Not yet scored net: dsa: sja1105: round up PTP perout pin duration Assigned by Linux
Aug 15, 2026 CVE-2026-72415 High 7.1 ASoC: SDCA: Validate written enum value in ge_put_enum_double() Assigned by Linux
Aug 15, 2026 CVE-2026-72416 High 7.3 netfilter: nft_compat: ebtables emulation must reject non-bridge targets Assigned by Linux
Aug 15, 2026 CVE-2026-72417 Critical 9.8 netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Assigned by Linux
Aug 15, 2026 CVE-2026-72418 High 7.5 netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Assigned by Linux
Aug 15, 2026 CVE-2026-72419 High 7.8 netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Assigned by Linux
Aug 15, 2026 CVE-2026-72420 High 8.8 md/raid5: avoid R5_Overlap races while breaking stripe batches Assigned by Linux
Aug 15, 2026 CVE-2026-72421 Critical 10.0 ipv4: fib: Don't ignore error route in local/main tables. Assigned by Linux
Aug 15, 2026 CVE-2026-72422 Critical 9.8 ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Assigned by Linux
Aug 15, 2026 CVE-2026-72423 High 8.8 bpf: Guard conntrack opts error writes Assigned by Linux
Aug 15, 2026 CVE-2026-72424 Not yet scored rtc: msc313: fix NULL deref in shared IRQ handler at probe Assigned by Linux
Aug 15, 2026 CVE-2026-72425 High 7.1 ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Assigned by Linux
Aug 15, 2026 CVE-2026-72426 High 8.4 bpf: Preserve pointer spill metadata during half-slot cleanup Assigned by Linux
Aug 15, 2026 CVE-2026-72427 High 7.8 bpf: Fix effective prog array index with BPF_F_PREORDER Assigned by Linux
Aug 15, 2026 CVE-2026-72428 Not yet scored bpf: Fix stack slot index in nospec checks Assigned by Linux
Aug 15, 2026 CVE-2026-72429 Critical 9.8 ipv6: ioam: fix type confusion of dst_entry Assigned by Linux
Aug 15, 2026 CVE-2026-72430 Not yet scored net/sched: act_ct: fix nf_connlabels leak on two error paths Assigned by Linux
Aug 15, 2026 CVE-2026-72431 Not yet scored alloc_tag: fix use-after-free in /proc/allocinfo after module unload Assigned by Linux
Aug 15, 2026 CVE-2026-72432 Not yet scored tpm_crb: Check ACPI_COMPANION() against NULL during probe Assigned by Linux
Aug 15, 2026 CVE-2026-72433 Not yet scored netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Assigned by Linux
Aug 15, 2026 CVE-2026-72434 High 7.8 netfilter: ipset: make sure gc is properly stopped Assigned by Linux
Aug 15, 2026 CVE-2026-72435 High 7.8 netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Assigned by Linux
Aug 15, 2026 CVE-2026-72436 Critical 9.8 netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Assigned by Linux
Aug 15, 2026 CVE-2026-72437 Not yet scored md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Assigned by Linux
Aug 15, 2026
Previous Page 110 of 182 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
