CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 9:00 PM ET )
This week: 4,535 CVEs published, 325 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,535 Show in the list Critical, last 7 days 325 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74607 High 8.8 KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Assigned by Linux
Aug 22, 2026 CVE-2026-74608 Critical 9.8 smb: client: Fix use-after-free in cifs_try_adding_channels() Assigned by Linux
Aug 22, 2026 CVE-2026-74609 High 7.8 tipc: read le->link under the node lock in tipc_node_link_down() Assigned by Linux
Aug 22, 2026 CVE-2026-74610 High 7.8 tls: don't leave a full plaintext sk_msg ring unpushed Assigned by Linux
Aug 22, 2026 CVE-2026-74611 Critical 9.8 tls: rx: restore msg_iter before TLS 1.3 optimistic retry Assigned by Linux
Aug 22, 2026 CVE-2026-74612 Critical 10.0 veth: fix skb length accounting after XDP frag adjustment Assigned by Linux
Aug 22, 2026 CVE-2026-74613 High 7.8 vsock/virtio: avoid refilling the RX queue after teardown Assigned by Linux
Aug 22, 2026 CVE-2026-74614 High 8.4 vsock/virtio: read virtqueues under worker locks Assigned by Linux
Aug 22, 2026 CVE-2026-74615 High 8.8 vxlan: do not arm the ageing timer on a device that is down Assigned by Linux
Aug 22, 2026 CVE-2026-74616 Critical 9.8 xdp: reject clones that overrun skb_shared_info tailroom Assigned by Linux
Aug 22, 2026 CVE-2026-74617 Critical 9.8 dibs: initialise dibs->lock in dibs_dev_alloc() Assigned by Linux
Aug 22, 2026 CVE-2026-74618 Not yet scored binfmt_misc: don't warn when the mount is completed from another user namespace Assigned by Linux
Aug 22, 2026 CVE-2026-74619 Not yet scored ovl: don't warn when the mount is completed from another user namespace Assigned by Linux
Aug 22, 2026 CVE-2026-74620 Not yet scored net/sched: act_gact, act_police: range check the fallback control action Assigned by Linux
Aug 22, 2026 CVE-2026-74621 High 7.5 net/sched: act_ct: fix sk_buff leak when the header checks reject a packet Assigned by Linux
Aug 22, 2026 CVE-2026-74622 Not yet scored net: atlantic: free RX pages of consumed but not refilled buffers Assigned by Linux
Aug 22, 2026 CVE-2026-74623 Not yet scored net: atlantic: free stranded TX buffers on ring deinit Assigned by Linux
Aug 22, 2026 CVE-2026-74624 High 7.5 netfilter: nf_conntrack: defer invalid log until after unlock Assigned by Linux
Aug 22, 2026 CVE-2026-74625 High 7.5 netfilter: bridge: release template ct on non-IP path Assigned by Linux
Aug 22, 2026 CVE-2026-74626 High 7.5 NTB: ntb_netdev: Preserve RX queue depth on allocation failure Assigned by Linux
Aug 22, 2026 CVE-2026-74627 High 7.8 net: devmem: prevent net-iov / page mixing Assigned by Linux
Aug 22, 2026 CVE-2026-74628 Critical 9.8 net/x25: fix use-after-free of the socket by its timers Assigned by Linux
Aug 22, 2026 CVE-2026-74629 High 8.8 net/dibs: Correct freeing of dmb_clientid_arr Assigned by Linux
Aug 22, 2026 CVE-2026-74630 High 7.8 ipv6: prevent in6_dev_get() from resurrecting inet6_dev Assigned by Linux
Aug 22, 2026 CVE-2026-74631 High 8.4 net: smc: fix splice entry lifetime imbalance in smc_rx_splice Assigned by Linux
Aug 22, 2026 CVE-2026-74632 High 7.8 mm/huge_memory: fix huge_zero_pfn race Assigned by Linux
Aug 22, 2026 CVE-2026-74633 Not yet scored tracing: Fix NULL pointer dereference in module event cache removal Assigned by Linux
Aug 22, 2026 CVE-2026-74634 High 7.8 ring-buffer: Prevent subbuf order change when resizing is disabled Assigned by Linux
Aug 22, 2026 CVE-2026-74635 High 7.8 fbdev: bitblit: bound-check glyph index in bit_cursor() Assigned by Linux
Aug 22, 2026 CVE-2026-74636 Not yet scored tracing: Fix race between update_event_fields and, event_define_fields Assigned by Linux
Aug 22, 2026 CVE-2026-74637 High 7.8 perf/core: Fix group leader use-after-free after sibling detach Assigned by Linux
Aug 22, 2026 CVE-2026-74638 Not yet scored drm/v3d: Serialize the scheduler timeout handlers Assigned by Linux
Aug 22, 2026 CVE-2026-74639 Not yet scored ALSA: us144mkii: re-anchor capture URBs on resubmission Assigned by Linux
Aug 22, 2026 CVE-2026-74640 High 7.8 ALSA: FCP: fix OOB write in fcp_meter_ctl_get() Assigned by Linux
Aug 22, 2026 CVE-2026-74641 High 7.8 ALSA: usx2y: bound the hwdep mmap fault offset Assigned by Linux
Aug 22, 2026 CVE-2026-74642 Not yet scored ALSA: usb: Fix UAF at delayed release of MIDI2 EPs Assigned by Linux
Aug 22, 2026 CVE-2026-74643 Not yet scored samples/damon/mtier: error out for zero quota goal target values Assigned by Linux
Aug 22, 2026 CVE-2026-74644 Not yet scored mm/damon/ops-common: putback folios on invalid migrate nid Assigned by Linux
Aug 22, 2026 CVE-2026-74645 Not yet scored mm/damon/lru_sort: error out for >10000 active_mem_bp Assigned by Linux
Aug 22, 2026 CVE-2026-74646 High 7.8 misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke Assigned by Linux
Aug 22, 2026 CVE-2026-74647 High 7.8 misc: fastrpc: Remove buffer from list prior to unmap operation Assigned by Linux
Aug 22, 2026 CVE-2026-74648 High 7.8 staging: rtl8723bs: validate monitor transmit frame lengths Assigned by Linux
Aug 22, 2026 CVE-2026-74649 High 8.8 staging: rtl8723bs: fix missing shared-key auth challenge length check Assigned by Linux
Aug 22, 2026 CVE-2026-74650 Not yet scored staging: rtl8723bs: fix OOB read in WMM_param_handler() Assigned by Linux
Aug 22, 2026 CVE-2026-74651 High 8.1 staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() Assigned by Linux
Aug 22, 2026 CVE-2026-74652 High 7.8 serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ Assigned by Linux
Aug 22, 2026 CVE-2026-74653 Not yet scored serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx Assigned by Linux
Aug 22, 2026 CVE-2026-74654 Not yet scored serial: 8250_dma: Clear stale RX state on shutdown Assigned by Linux
Aug 22, 2026 CVE-2026-74655 High 8.8 serial: qcom-geni: fix TX DMA buffer flush Assigned by Linux
Aug 22, 2026 CVE-2026-74656 High 7.8 ipv4: fix use-after-free in fib_nhc_update_mtu() Assigned by Linux
Aug 22, 2026
Previous Page 123 of 190 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
