CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 13:00 UTC )
This week: 4,634 CVEs published, 337 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,634 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 12 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72436 Critical 9.8 netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Assigned by Linux
Aug 15, 2026 CVE-2026-72437 Not yet scored md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Assigned by Linux
Aug 15, 2026 CVE-2026-72438 High 7.5 md/raid10: fix writes_pending and barrier reference leaks on discard failures Assigned by Linux
Aug 15, 2026 CVE-2026-72439 Not yet scored md/raid10: fix writes_pending leak on write request failures Assigned by Linux
Aug 15, 2026 CVE-2026-72440 High 7.1 md/raid1: fix writes_pending and barrier reference leaks on write failures Assigned by Linux
Aug 15, 2026 CVE-2026-72441 Not yet scored ieee802154: fix kernel-infoleak in dgram_recvmsg() Assigned by Linux
Aug 15, 2026 CVE-2026-72442 Critical 9.8 netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Assigned by Linux
Aug 15, 2026 CVE-2026-72443 Not yet scored ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Assigned by Linux
Aug 15, 2026 CVE-2026-72444 High 7.8 flow_dissector: check device type before reading ETH_ADDRS Assigned by Linux
Aug 15, 2026 CVE-2026-72445 Not yet scored ALSA: usb-audio: qcom: clear opened when stream enable fails Assigned by Linux
Aug 15, 2026 CVE-2026-72446 High 7.8 ALSA: usb-audio: qcom: reject stream disable with no active interface Assigned by Linux
Aug 15, 2026 CVE-2026-72447 Not yet scored sctp: hold socket lock when dumping endpoints in sctp_diag Assigned by Linux
Aug 15, 2026 CVE-2026-72448 Not yet scored octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Assigned by Linux
Aug 15, 2026 CVE-2026-72449 High 7.8 drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Assigned by Linux
Aug 15, 2026 CVE-2026-72450 High 7.8 xfrm: validate selector family and prefixlen during match Assigned by Linux
Aug 15, 2026 CVE-2026-72451 Critical 9.8 xfrm: Fix xfrm state cache insertion race Assigned by Linux
Aug 15, 2026 CVE-2026-72452 High 7.8 drm/i915: clear CRTC color blob pointers after dropping refs Assigned by Linux
Aug 15, 2026 CVE-2026-72453 Not yet scored regcache: Do not overwrite error code when finalizing cache after error Assigned by Linux
Aug 15, 2026 CVE-2026-72454 High 7.8 i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Assigned by Linux
Aug 15, 2026 CVE-2026-72455 High 7.1 apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Assigned by Linux
Aug 15, 2026 CVE-2026-72456 Not yet scored apparmor: release exe file resources on path failure Assigned by Linux
Aug 15, 2026 CVE-2026-72457 Not yet scored apparmor: fail policy unpack on accept2 allocation failure Assigned by Linux
Aug 15, 2026 CVE-2026-72458 Not yet scored apparmor: fix NULL pointer dereference in unpack_pdb Assigned by Linux
Aug 15, 2026 CVE-2026-72459 High 7.8 apparmor: aa_label_alloc use aa_label_free on alloc failure Assigned by Linux
Aug 15, 2026 CVE-2026-72460 High 7.1 apparmor: check label build before no_new_privs test Assigned by Linux
Aug 15, 2026 CVE-2026-72461 High 7.8 apparmor: fix refcount leak when updating the sk_ctx Assigned by Linux
Aug 15, 2026 CVE-2026-72462 High 8.8 apparmor: fix race in unix socket mediation when peer_path is used Assigned by Linux
Aug 15, 2026 CVE-2026-72463 Critical 9.8 xfrm: Fix dev use-after-free in xfrm async resumption Assigned by Linux
Aug 15, 2026 CVE-2026-72464 High 7.5 xprtrdma: Repost Receive buffers for malformed replies Assigned by Linux
Aug 15, 2026 CVE-2026-72465 High 7.5 xprtrdma: Sanitize the reply credit grant after parsing Assigned by Linux
Aug 15, 2026 CVE-2026-72466 Critical 9.8 xprtrdma: Fix bcall rep leak and unbounded peek Assigned by Linux
Aug 15, 2026 CVE-2026-72467 Not yet scored xprtrdma: Check frwr_wp_create() during connect Assigned by Linux
Aug 15, 2026 CVE-2026-72468 Not yet scored xprtrdma: Initialize re_id before removal registration Assigned by Linux
Aug 15, 2026 CVE-2026-72469 High 8.8 xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Assigned by Linux
Aug 15, 2026 CVE-2026-72470 High 7.8 fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Assigned by Linux
Aug 15, 2026 CVE-2026-72471 High 7.1 fs/ntfs3: prevent potential lcn remains uninitialized Assigned by Linux
Aug 15, 2026 CVE-2026-72472 Critical 9.8 nfs: use nfsi->rwsem to protect traversal of the file lock list Assigned by Linux
Aug 15, 2026 CVE-2026-72473 Critical 9.8 xprtrdma: Decouple req recycling from RPC completion Assigned by Linux
Aug 15, 2026 CVE-2026-72474 Not yet scored dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Assigned by Linux
Aug 15, 2026 CVE-2026-72475 Not yet scored dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Assigned by Linux
Aug 15, 2026 CVE-2026-72476 High 7.8 dmaengine: Fix possible use after free Assigned by Linux
Aug 15, 2026 CVE-2026-72477 Critical 9.8 fs/ntfs3: call _ntfs_bad_inode() when failing to rename Assigned by Linux
Aug 15, 2026 CVE-2026-72478 High 8.4 fs/ntfs3: add bounds check to run_get_highest_vcn() Assigned by Linux
Aug 15, 2026 CVE-2026-72479 Not yet scored iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Assigned by Linux
Aug 15, 2026 CVE-2026-72480 High 7.8 iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Assigned by Linux
Aug 15, 2026 CVE-2026-72481 Not yet scored iio: magnetometer: ak8975: fix potential kernel stack memory leak Assigned by Linux
Aug 15, 2026 CVE-2026-72482 High 7.8 gpib: fix double decrement of descriptor_busy in command_ioctl() Assigned by Linux
Aug 15, 2026 CVE-2026-72483 High 7.8 usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Assigned by Linux
Aug 15, 2026 CVE-2026-72484 Not yet scored staging: most: video: avoid double free on video register failure Assigned by Linux
Aug 15, 2026 CVE-2026-72485 High 7.8 coresight: platform: defer connection counter increment until alloc succeeds Assigned by Linux
Aug 15, 2026
Previous Page 112 of 188 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
