CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 8:00 PM ET )
This week: 4,535 CVEs published, 325 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,535 Show in the list Critical, last 7 days 325 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74557 High 7.5 scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer Assigned by Linux
Aug 15, 2026 CVE-2026-74558 Not yet scored xsk: reclaim invalid Tx descriptors in ZC batch path Assigned by Linux
Aug 15, 2026 CVE-2026-74559 Not yet scored xsk: drain continuation descs after overflow in xsk_build_skb() Assigned by Linux
Aug 15, 2026 CVE-2026-74560 Not yet scored xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx Assigned by Linux
Aug 15, 2026 CVE-2026-74561 High 8.8 nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush Assigned by Linux
Aug 15, 2026 CVE-2026-74562 High 8.8 nexthop: take nh->lock for f6i_list walks in replace check and notify Assigned by Linux
Aug 15, 2026 CVE-2026-74563 High 7.8 rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() Assigned by Linux
Aug 15, 2026 CVE-2026-74564 High 7.1 netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH Assigned by Linux
Aug 15, 2026 CVE-2026-74565 High 7.8 netfilter: nf_tables: make nft_object rhltable per table Assigned by Linux
Aug 15, 2026 CVE-2026-74566 Not yet scored keys: make keyring key-chunk byte order agree with keyring_diff_objects() Assigned by Linux
Aug 15, 2026 CVE-2026-74567 High 7.1 keys: fix out-of-bounds read in keyring_get_key_chunk() Assigned by Linux
Aug 15, 2026 CVE-2026-74568 Critical 9.3 KVM: arm64: vgic: Fix race between LPI release and re-registration Assigned by Linux
Aug 15, 2026 CVE-2026-74569 Critical 9.8 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Assigned by Linux
Aug 15, 2026 CVE-2026-74570 Critical 9.8 ntfs: harden runlist realloc size calculations Assigned by Linux
Aug 15, 2026 CVE-2026-74571 Not yet scored btrfs: skip global block reserve accounting for rescue mounts Assigned by Linux
Aug 15, 2026 CVE-2026-74572 High 7.5 btrfs: zoned: fix deadlock between metadata writeback and transaction commit Assigned by Linux
Aug 15, 2026 CVE-2026-74573 Critical 9.3 iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE Assigned by Linux
Aug 15, 2026 CVE-2026-74574 High 7.8 dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() Assigned by Linux
Aug 15, 2026 CVE-2026-74575 High 8.8 thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Assigned by Linux
Aug 15, 2026 CVE-2026-74576 High 7.5 mm/slab: prevent unbounded recursion in free path with new kmalloc type Assigned by Linux
Aug 15, 2026 CVE-2026-74577 Not yet scored net: mpls: initialize rtm_tos in mpls_getroute() Assigned by Linux
Aug 15, 2026 CVE-2026-74578 High 7.1 crypto: algif_skcipher - force synchronous processing on trees without ctx->state Assigned by Linux
Aug 16, 2026 CVE-2026-74579 High 7.1 netfilter: nft_payload: fix mask build for partial field offload Assigned by Linux
Aug 17, 2026 CVE-2026-74580 High 8.8 vhost: reset the vring metadata cache on vring reconfiguration Assigned by Linux
Aug 21, 2026 CVE-2026-74581 Critical 9.8 net: ipv6: clear suppressed fib6 rule result Assigned by Linux
Aug 21, 2026 CVE-2026-74582 High 7.8 packet: use consistent hard_header_len in non-ring send paths Assigned by Linux
Aug 21, 2026 CVE-2026-74583 High 7.8 net/sched: cls_route: fix fastmap use-after-free on filter Assigned by Linux
Aug 21, 2026 CVE-2026-74584 High 7.1 RDMA/bnxt_re: zero shared page before exposing to userspace Assigned by Linux
Aug 22, 2026 CVE-2026-74585 Not yet scored thunderbolt: Bound the DROM dual link port number before indexing sw->ports Assigned by Linux
Aug 22, 2026 CVE-2026-74586 Critical 9.8 sctp: clear new_transport when removing a peer Assigned by Linux
Aug 22, 2026 CVE-2026-74587 Critical 9.8 sctp: fix use-after-free of cached ASCONF chunk Assigned by Linux
Aug 22, 2026 CVE-2026-74588 Critical 9.8 sctp: keep chunk->transport in step with the list it is queued on Assigned by Linux
Aug 22, 2026 CVE-2026-74589 High 8.4 bpf, sockmap: Fix sk_redir use-after-free in send verdict Assigned by Linux
Aug 22, 2026 CVE-2026-74590 High 7.8 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions Assigned by Linux
Aug 22, 2026 CVE-2026-74591 Critical 9.8 mm/filemap: __filemap_add_folio() restore index before retrying Assigned by Linux
Aug 22, 2026 CVE-2026-74592 High 8.1 ima: Instantiate file_truncate and path_truncate hooks Assigned by Linux
Aug 22, 2026 CVE-2026-74593 Not yet scored sched_ext: Take cgroup_lock() first in scx_cgroup_lock() Assigned by Linux
Aug 22, 2026 CVE-2026-74594 High 7.8 sched/psi: Shut down rtpoll_timer in psi_cgroup_free() Assigned by Linux
Aug 22, 2026 CVE-2026-74595 High 7.8 fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() Assigned by Linux
Aug 22, 2026 CVE-2026-74596 Not yet scored fs,fsverity: remove check for fsverity being enabled in setattr_prepare() Assigned by Linux
Aug 22, 2026 CVE-2026-74597 Critical 9.8 ip6_tunnel: clear skb2->cb[] in ip6ip6_err() Assigned by Linux
Aug 22, 2026 CVE-2026-74598 High 7.5 ipv6: fix Route Information option length validation Assigned by Linux
Aug 22, 2026 CVE-2026-74599 Not yet scored mm/ptdump: always stabilise against page table freeing using init_mm Assigned by Linux
Aug 22, 2026 CVE-2026-74600 Not yet scored mm/page_table_check: skip special zero mappings Assigned by Linux
Aug 22, 2026 CVE-2026-74601 High 7.8 ring-buffer: Use current_context for safe per-CPU buffer swap Assigned by Linux
Aug 22, 2026 CVE-2026-74602 Not yet scored ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() Assigned by Linux
Aug 22, 2026 CVE-2026-74603 High 7.1 ptp: ocp: Fix board ID over-read Assigned by Linux
Aug 22, 2026 CVE-2026-74604 High 8.4 Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Assigned by Linux
Aug 22, 2026 CVE-2026-74605 High 7.8 eventfs: Use children field for rcu head and add memory barriers Assigned by Linux
Aug 22, 2026 CVE-2026-74606 High 7.8 eventfs: Fix use-after-free in eventfs_remove_rec() Assigned by Linux
Aug 22, 2026
Previous Page 122 of 190 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
