CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 10:50 AM ET )
This week: 4,691 CVEs published, 349 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,691 Show in the list Critical, last 7 days 349 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74264 High 7.8 net: watchdog: fix refcount tracking races Assigned by Linux
Aug 15, 2026 CVE-2026-74265 Not yet scored net: mana: initialize gdma queue id to INVALID_QUEUE_ID Assigned by Linux
Aug 15, 2026 CVE-2026-74266 Not yet scored net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Assigned by Linux
Aug 15, 2026 CVE-2026-74267 Critical 9.8 net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Assigned by Linux
Aug 15, 2026 CVE-2026-74268 Critical 9.8 tcp: clear sock_ops cb flags before force-closing a child socket Assigned by Linux
Aug 15, 2026 CVE-2026-74269 Critical 9.8 bnxt: fix head underflow on XDP head-grow Assigned by Linux
Aug 15, 2026 CVE-2026-74270 High 7.8 handshake: Require admin permission for DONE command Assigned by Linux
Aug 15, 2026 CVE-2026-74271 Not yet scored power: supply: core: fix supplied_from allocations Assigned by Linux
Aug 15, 2026 CVE-2026-74272 Not yet scored cxl/region: Resolve region deletion races Assigned by Linux
Aug 15, 2026 CVE-2026-74273 Not yet scored cxl/region: Block region delete during region creation Assigned by Linux
Aug 15, 2026 CVE-2026-74274 Not yet scored cxl/region: Fill first free targets[] slot during auto-discovery Assigned by Linux
Aug 15, 2026 CVE-2026-74275 High 8.4 cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() Assigned by Linux
Aug 15, 2026 CVE-2026-74276 Not yet scored spi: xilinx: use FIFO occupancy register to determine buffer size Assigned by Linux
Aug 15, 2026 CVE-2026-74277 High 8.8 iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path Assigned by Linux
Aug 15, 2026 CVE-2026-74278 Not yet scored ALSA: seq: Fix kernel heap address leak in bounce_error_event() Assigned by Linux
Aug 15, 2026 CVE-2026-74279 Critical 10.0 crypto: cavium/cpt - fix DMA cleanup using wrong loop index Assigned by Linux
Aug 15, 2026 CVE-2026-74280 Critical 10.0 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Assigned by Linux
Aug 15, 2026 CVE-2026-74281 High 7.5 tipc: reject inverted service ranges from peer bindings Assigned by Linux
Aug 15, 2026 CVE-2026-74282 High 7.5 tipc: prevent snt_unacked underflow on CONN_ACK Assigned by Linux
Aug 15, 2026 CVE-2026-74283 High 7.8 tipc: require net admin for TIPCv2 netlink mutators Assigned by Linux
Aug 15, 2026 CVE-2026-74284 Not yet scored net/sched: sch_hfsc: Don't make class passive twice Assigned by Linux
Aug 15, 2026 CVE-2026-74285 High 8.8 net: Stop leased rxq before uninstalling its memory provider Assigned by Linux
Aug 15, 2026 CVE-2026-74286 Not yet scored net: pfcp: allocate per-cpu tstats for PFCP netdevs Assigned by Linux
Aug 15, 2026 CVE-2026-74287 Critical 9.1 sctp: validate embedded address parameter length Assigned by Linux
Aug 15, 2026 CVE-2026-74288 High 7.8 net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Assigned by Linux
Aug 15, 2026 CVE-2026-74289 High 7.8 ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Assigned by Linux
Aug 15, 2026 CVE-2026-74290 Not yet scored net/sched: cls_flow: Dont expose folded kernel pointers Assigned by Linux
Aug 15, 2026 CVE-2026-74291 Not yet scored ASoC: topology: Check PCM and DAI name strings before use Assigned by Linux
Aug 15, 2026 CVE-2026-74292 High 7.1 ASoC: tegra: tegra210_ahub: Validate written enum value Assigned by Linux
Aug 15, 2026 CVE-2026-74293 High 7.8 ASoC: fsl: fsl_audmix: Validate written enum values Assigned by Linux
Aug 15, 2026 CVE-2026-74294 High 7.3 ASoC: meson: aiu: Validate written enum values Assigned by Linux
Aug 15, 2026 CVE-2026-74295 High 7.1 ASoC: codecs: hdac_hdmi: Validate written enum value Assigned by Linux
Aug 15, 2026 CVE-2026-74296 High 7.8 RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Assigned by Linux
Aug 15, 2026 CVE-2026-74297 High 7.8 RDMA/mlx5: Fix undefined shift of user RQ WQE size Assigned by Linux
Aug 15, 2026 CVE-2026-74298 Not yet scored RDMA/core: Fix FRMR set pinned push error path Assigned by Linux
Aug 15, 2026 CVE-2026-74299 Not yet scored RDMA/core: Fix FRMR aging push to queue error flow Assigned by Linux
Aug 15, 2026 CVE-2026-74300 High 8.8 Bluetooth: hci: validate codec capability element length Assigned by Linux
Aug 15, 2026 CVE-2026-74301 Not yet scored Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path Assigned by Linux
Aug 15, 2026 CVE-2026-74302 High 7.8 Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Assigned by Linux
Aug 15, 2026 CVE-2026-74303 Not yet scored Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Assigned by Linux
Aug 15, 2026 CVE-2026-74304 Not yet scored Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device Assigned by Linux
Aug 15, 2026 CVE-2026-74305 High 7.8 bpf: Tighten cgroup storage cookie checks for prog arrays Assigned by Linux
Aug 15, 2026 CVE-2026-74306 High 7.8 vfio/qat: fix f_pos race in qat_vf_resume_write() Assigned by Linux
Aug 15, 2026 CVE-2026-74307 Not yet scored ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Assigned by Linux
Aug 15, 2026 CVE-2026-74308 Not yet scored ext4: fix kernel BUG in ext4_write_inline_data_end Assigned by Linux
Aug 15, 2026 CVE-2026-74309 Critical 10.0 vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Assigned by Linux
Aug 15, 2026 CVE-2026-74310 Critical 9.3 vhost/net: complete zerocopy ubufs only once Assigned by Linux
Aug 15, 2026 CVE-2026-74311 High 7.8 virtio: rtc: tear down old virtqueues before restore Assigned by Linux
Aug 15, 2026 CVE-2026-74312 High 7.8 vhost/vdpa: validate virtqueue index in mmap and fault paths Assigned by Linux
Aug 15, 2026 CVE-2026-74313 High 8.8 vduse: hold vduse_lock across IDR lookup in open path Assigned by Linux
Aug 15, 2026
Previous Page 114 of 188 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
