CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 1:00 PM ET )
What this means for you
This week: 4,668 CVEs published, 341 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,668 Show in the list Critical, last 7 days 341 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74335 Not yet scored bpf: Fix NULL pointer dereference in bpf_task_from_vpid() Assigned by Linux
Aug 15, 2026 CVE-2026-74336 Not yet scored wifi: mac80211: bound S1G TIM PVB walk to the TIM element Assigned by Linux
Aug 15, 2026 CVE-2026-74337 Not yet scored bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Assigned by Linux
Aug 15, 2026 CVE-2026-74338 High 7.8 bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Assigned by Linux
Aug 15, 2026 CVE-2026-74339 Not yet scored ALSA: seq: Clear variable event pointer on read Assigned by Linux
Aug 15, 2026 CVE-2026-74340 High 8.1 wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Assigned by Linux
Aug 15, 2026 CVE-2026-74341 High 8.8 wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Assigned by Linux
Aug 15, 2026 CVE-2026-74342 Not yet scored kernfs: link kn to its parent before the LSM init hook Assigned by Linux
Aug 15, 2026 CVE-2026-74343 High 7.8 kernfs: fix xattr race condition with multiple superblocks Assigned by Linux
Aug 15, 2026 CVE-2026-74344 High 7.8 bpf: Clear rb node linkage when freeing bpf_rb_root Assigned by Linux
Aug 15, 2026 CVE-2026-74345 Critical 9.8 RDMA/siw: Fix endpoint/socket association handling Assigned by Linux
Aug 15, 2026 CVE-2026-74346 Not yet scored RDMA/irdma: Fix OOB read during CQ MR registration Assigned by Linux
Aug 15, 2026 CVE-2026-74347 High 7.8 netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Assigned by Linux
Aug 15, 2026 CVE-2026-74348 Not yet scored ocfs2/dlm: require a ref for locking_state debugfs open Assigned by Linux
Aug 15, 2026 CVE-2026-74349 High 7.1 ocfs2: reject FITRIM ranges shorter than a cluster Assigned by Linux
Aug 15, 2026 CVE-2026-74350 Critical 9.8 ocfs2: validate fast symlink target during inode read Assigned by Linux
Aug 15, 2026 CVE-2026-74351 Not yet scored ocfs2: rebase copied fsdlm LVB pointers in locking_state Assigned by Linux
Aug 15, 2026 CVE-2026-74352 Not yet scored of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Assigned by Linux
Aug 15, 2026 CVE-2026-74353 Not yet scored drm/amdkfd: always resume_all after suspend_all Assigned by Linux
Aug 15, 2026 CVE-2026-74354 High 7.8 bpf: Take mmap_lock in zap_pages() Assigned by Linux
Aug 15, 2026 CVE-2026-74355 High 8.2 iommu/vt-d: Fix RB-tree corruption in probe error path Assigned by Linux
Aug 15, 2026 CVE-2026-74356 High 7.4 vhost: fix vhost_get_avail_idx for a non empty ring Assigned by Linux
Aug 15, 2026 CVE-2026-74357 High 7.8 drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump Assigned by Linux
Aug 15, 2026 CVE-2026-74358 Not yet scored ext4: fix fast commit wait/wake bit mapping on 64-bit Assigned by Linux
Aug 15, 2026 CVE-2026-74359 High 7.8 configfs_lookup(): don't leave ->s_dentry dangling on failure Assigned by Linux
Aug 15, 2026 CVE-2026-74360 Not yet scored bpf: Reject exclusive maps for bpf_map_elem iterators Assigned by Linux
Aug 15, 2026 CVE-2026-74361 Critical 9.8 nvme: fix FDP fdpcidx bounds check Assigned by Linux
Aug 15, 2026 CVE-2026-74362 Not yet scored ext2: fix ignored return value of generic_write_sync() Assigned by Linux
Aug 15, 2026 CVE-2026-74363 High 7.8 bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Assigned by Linux
Aug 15, 2026 CVE-2026-74364 High 7.1 bpf: Reject exclusive maps as inner maps in map-in-map Assigned by Linux
Aug 15, 2026 CVE-2026-74365 High 7.3 nvdimm/btt: Handle preemption in BTT lane acquisition Assigned by Linux
Aug 15, 2026 CVE-2026-74366 Not yet scored wifi: ath12k: fix NULL deref in change_sta_links for unready link Assigned by Linux
Aug 15, 2026 CVE-2026-74367 High 7.8 wifi: ath12k: fix inconsistent arvif state in vdev_create error paths Assigned by Linux
Aug 15, 2026 CVE-2026-74368 Not yet scored wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() Assigned by Linux
Aug 15, 2026 CVE-2026-74369 Not yet scored liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish() Assigned by Linux
Aug 15, 2026 CVE-2026-74370 Not yet scored liveupdate: fix TOCTOU race in luo_session_retrieve() Assigned by Linux
Aug 15, 2026 CVE-2026-74371 High 7.8 bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat Assigned by Linux
Aug 15, 2026 CVE-2026-74372 Not yet scored raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path Assigned by Linux
Aug 15, 2026 CVE-2026-74373 Not yet scored md/raid1,raid10: fix bio accounting for split md cloned bios Assigned by Linux
Aug 15, 2026 CVE-2026-74374 High 7.5 md/raid1,raid10: fix error-path detection with md_cloned_bio() Assigned by Linux
Aug 15, 2026 CVE-2026-74375 Not yet scored md/raid1,raid10: fix deadlock in read error recovery path Assigned by Linux
Aug 15, 2026 CVE-2026-74376 Critical 9.8 md/raid10: reset read_slot when reusing r10bio for discard Assigned by Linux
Aug 15, 2026 CVE-2026-74377 High 7.8 RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Assigned by Linux
Aug 15, 2026 CVE-2026-74378 High 7.8 RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe Assigned by Linux
Aug 15, 2026 CVE-2026-74379 Not yet scored dax/kmem: account for partial discontiguous resource upon removal Assigned by Linux
Aug 15, 2026 CVE-2026-74380 High 8.8 gpu: host1x: Fix iommu_map_sgtable() return value check Assigned by Linux
Aug 15, 2026 CVE-2026-74381 Not yet scored gpu: host1x: Allow entries in BO caches to be freed Assigned by Linux
Aug 15, 2026 CVE-2026-74382 Not yet scored net/sched: cls_bpf: prevent unbounded recursion in offload rollback Assigned by Linux
Aug 15, 2026 CVE-2026-74383 High 8.4 nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools Assigned by Linux
Aug 15, 2026 CVE-2026-74384 Critical 9.8 nvme-multipath: fix flex array size in struct nvme_ns_head Assigned by Linux
Aug 15, 2026
Previous Page 116 of 189 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.