CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 12:00 PM ET )
What this means for you
This week: 4,675 CVEs published, 348 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,675 Show in the list Critical, last 7 days 348 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74308 Not yet scored ext4: fix kernel BUG in ext4_write_inline_data_end Assigned by Linux
Aug 15, 2026 CVE-2026-74309 Critical 10.0 vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Assigned by Linux
Aug 15, 2026 CVE-2026-74310 Critical 9.3 vhost/net: complete zerocopy ubufs only once Assigned by Linux
Aug 15, 2026 CVE-2026-74311 High 7.8 virtio: rtc: tear down old virtqueues before restore Assigned by Linux
Aug 15, 2026 CVE-2026-74312 High 7.8 vhost/vdpa: validate virtqueue index in mmap and fault paths Assigned by Linux
Aug 15, 2026 CVE-2026-74313 High 8.8 vduse: hold vduse_lock across IDR lookup in open path Assigned by Linux
Aug 15, 2026 CVE-2026-74314 High 7.8 bpf: Cancel special fields on map value recycle Assigned by Linux
Aug 15, 2026 CVE-2026-74315 Critical 9.8 lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() Assigned by Linux
Aug 15, 2026 CVE-2026-74316 High 7.5 NFSD: Handle layout stid in nfsd4_drop_revoked_stid() Assigned by Linux
Aug 15, 2026 CVE-2026-74317 High 7.8 ixgbe: do not configure xps for XDP queues Assigned by Linux
Aug 15, 2026 CVE-2026-74318 Not yet scored btrfs: fix deadlock cloning inline extent when using flushoncommit Assigned by Linux
Aug 15, 2026 CVE-2026-74319 Not yet scored btrfs: zoned: fix deadlock waiting for ticket during data relocation Assigned by Linux
Aug 15, 2026 CVE-2026-74320 Not yet scored fbdev: sm501fb: Fix buffer errors in OF binding code Assigned by Linux
Aug 15, 2026 CVE-2026-74321 High 7.5 btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Assigned by Linux
Aug 15, 2026 CVE-2026-74322 Not yet scored wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211() Assigned by Linux
Aug 15, 2026 CVE-2026-74323 High 8.8 wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() Assigned by Linux
Aug 15, 2026 CVE-2026-74324 Not yet scored wifi: mt76: mt7925: validate skb length in testmode query Assigned by Linux
Aug 15, 2026 CVE-2026-74325 High 7.8 wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link Assigned by Linux
Aug 15, 2026 CVE-2026-74326 Not yet scored wifi: mt76: mt7921: fix resource leak in probe error path Assigned by Linux
Aug 15, 2026 CVE-2026-74327 Not yet scored vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Assigned by Linux
Aug 15, 2026 CVE-2026-74328 High 8.8 iommufd: Destroy the pages content after detaching from dmabuf Assigned by Linux
Aug 15, 2026 CVE-2026-74329 Not yet scored watchdog: unregister PM notifier on watchdog unregister Assigned by Linux
Aug 15, 2026 CVE-2026-74330 High 7.8 configfs: fix lockless traversals of ->s_children Assigned by Linux
Aug 15, 2026 CVE-2026-74331 Not yet scored firmware_loader: Fix recursive lock in device_cache_fw_images() Assigned by Linux
Aug 15, 2026 CVE-2026-74332 High 8.4 ASoC: amd: acp-sdw-sof: Bound DAI link iteration Assigned by Linux
Aug 15, 2026 CVE-2026-74333 High 8.4 ASoC: amd: acp-sdw-legacy: Bound DAI link iteration Assigned by Linux
Aug 15, 2026 CVE-2026-74334 High 7.8 RDMA/nldev: Fix locking when accessing mr->pd Assigned by Linux
Aug 15, 2026 CVE-2026-74335 Not yet scored bpf: Fix NULL pointer dereference in bpf_task_from_vpid() Assigned by Linux
Aug 15, 2026 CVE-2026-74336 Not yet scored wifi: mac80211: bound S1G TIM PVB walk to the TIM element Assigned by Linux
Aug 15, 2026 CVE-2026-74337 Not yet scored bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Assigned by Linux
Aug 15, 2026 CVE-2026-74338 High 7.8 bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Assigned by Linux
Aug 15, 2026 CVE-2026-74339 Not yet scored ALSA: seq: Clear variable event pointer on read Assigned by Linux
Aug 15, 2026 CVE-2026-74340 High 8.1 wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Assigned by Linux
Aug 15, 2026 CVE-2026-74341 High 8.8 wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Assigned by Linux
Aug 15, 2026 CVE-2026-74342 Not yet scored kernfs: link kn to its parent before the LSM init hook Assigned by Linux
Aug 15, 2026 CVE-2026-74343 High 7.8 kernfs: fix xattr race condition with multiple superblocks Assigned by Linux
Aug 15, 2026 CVE-2026-74344 High 7.8 bpf: Clear rb node linkage when freeing bpf_rb_root Assigned by Linux
Aug 15, 2026 CVE-2026-74345 Critical 9.8 RDMA/siw: Fix endpoint/socket association handling Assigned by Linux
Aug 15, 2026 CVE-2026-74346 Not yet scored RDMA/irdma: Fix OOB read during CQ MR registration Assigned by Linux
Aug 15, 2026 CVE-2026-74347 High 7.8 netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Assigned by Linux
Aug 15, 2026 CVE-2026-74348 Not yet scored ocfs2/dlm: require a ref for locking_state debugfs open Assigned by Linux
Aug 15, 2026 CVE-2026-74349 High 7.1 ocfs2: reject FITRIM ranges shorter than a cluster Assigned by Linux
Aug 15, 2026 CVE-2026-74350 Critical 9.8 ocfs2: validate fast symlink target during inode read Assigned by Linux
Aug 15, 2026 CVE-2026-74351 Not yet scored ocfs2: rebase copied fsdlm LVB pointers in locking_state Assigned by Linux
Aug 15, 2026 CVE-2026-74352 Not yet scored of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Assigned by Linux
Aug 15, 2026 CVE-2026-74353 Not yet scored drm/amdkfd: always resume_all after suspend_all Assigned by Linux
Aug 15, 2026 CVE-2026-74354 High 7.8 bpf: Take mmap_lock in zap_pages() Assigned by Linux
Aug 15, 2026 CVE-2026-74355 High 8.2 iommu/vt-d: Fix RB-tree corruption in probe error path Assigned by Linux
Aug 15, 2026 CVE-2026-74356 High 7.4 vhost: fix vhost_get_avail_idx for a non empty ring Assigned by Linux
Aug 15, 2026 CVE-2026-74357 High 7.8 drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump Assigned by Linux
Aug 15, 2026
Previous Page 115 of 188 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.