CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 22:10 UTC )
What this means for you
This week: 5,330 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,330 Show in the list Critical, last 7 days 344 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2025-21765 High 8.1 ipv6: use RCU protection in ip6_default_advmss() Assigned by Linux
Feb 27, 2025 CVE-2025-21766 High 8.1 ipv4: use RCU protection in __ip_rt_update_pmtu() Assigned by Linux
Feb 27, 2025 CVE-2025-21767 Medium 5.5 clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context Assigned by Linux
Feb 27, 2025 CVE-2025-21772 High 7.8 partitions: mac: fix handling of bogus partition table Assigned by Linux
Feb 27, 2025 CVE-2025-21776 Medium 5.5 USB: hub: Ignore non-compliant devices with too many configs or interfaces Assigned by Linux
Feb 27, 2025 CVE-2025-21779 Medium 5.5 KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel Assigned by Linux
Feb 27, 2025 CVE-2025-21780 High 7.8 drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() Assigned by Linux
Feb 27, 2025 CVE-2025-21785 High 7.8 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array Assigned by Linux
Feb 27, 2025 CVE-2025-21787 Medium 5.5 team: better TEAM_OPTION_TYPE_STRING validation Assigned by Linux
Feb 27, 2025 CVE-2025-21790 Medium 5.5 vxlan: check vxlan_vnigroup_init() return value Assigned by Linux
Feb 27, 2025 CVE-2025-21791 High 7.8 vrf: use RCU protection in l3mdev_l3_out() Assigned by Linux
Feb 27, 2025 CVE-2025-21795 High 7.5 NFSD: fix hang in nfsd4_shutdown_callback Assigned by Linux
Feb 27, 2025 CVE-2025-21796 Critical 9.8 nfsd: clear acl_access/acl_default after releasing them Assigned by Linux
Feb 27, 2025 CVE-2025-21802 Medium 5.5 net: hns3: fix oops when unload drivers paralleling Assigned by Linux
Feb 27, 2025 CVE-2025-21806 Medium 5.5 net: let net.core.dev_weight always be non-zero Assigned by Linux
Feb 27, 2025 CVE-2025-21808 High 7.8 net: xdp: Disallow attaching device-bound programs in generic mode Assigned by Linux
Feb 27, 2025 CVE-2025-21810 High 7.8 driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() Assigned by Linux
Feb 27, 2025 CVE-2025-21814 Medium 5.5 ptp: Ensure info->enable callback is always set Assigned by Linux
Feb 27, 2025 CVE-2024-58051 Medium 5.5 ipmi: ipmb: Add check devm_kasprintf() returned value Assigned by Linux
Mar 6, 2025 CVE-2024-58053 High 7.5 rxrpc: Fix handling of received connection abort Assigned by Linux
Mar 6, 2025 CVE-2024-58056 Medium 5.5 remoteproc: core: Fix ida_free call while not allocated Assigned by Linux
Mar 6, 2025 CVE-2024-58058 Medium 5.5 ubifs: skip dumping tnc tree when zroot is null Assigned by Linux
Mar 6, 2025 CVE-2024-58061 Medium 5.5 wifi: mac80211: prohibit deactivating all links Assigned by Linux
Mar 6, 2025 CVE-2024-58063 Medium 5.5 wifi: rtlwifi: fix memory leaks and invalid access at probe error path Assigned by Linux
Mar 6, 2025 CVE-2024-58068 Medium 5.5 OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized Assigned by Linux
Mar 6, 2025 CVE-2024-58071 Medium 5.5 team: prevent adding a device which is already a team device lower Assigned by Linux
Mar 6, 2025 CVE-2024-58072 High 7.8 wifi: rtlwifi: remove unused check_buddy_priv Assigned by Linux
Mar 6, 2025 CVE-2025-21825 High 7.8 bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT Assigned by Linux
Mar 6, 2025 CVE-2025-21827 High 7.8 Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface() Assigned by Linux
Mar 6, 2025 CVE-2025-21830 High 7.3 landlock: Handle weird files Assigned by Linux
Mar 6, 2025 CVE-2024-58077 Medium 5.5 ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback Assigned by Linux
Mar 6, 2025 CVE-2024-58079 High 7.8 media: uvcvideo: Fix crash during unbind if gpio unit is in use Assigned by Linux
Mar 6, 2025 CVE-2024-58083 High 7.8 KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Assigned by Linux
Mar 6, 2025 CVE-2024-58085 Medium 5.5 tomoyo: don't emit warning in tomoyo_write_control() Assigned by Linux
Mar 6, 2025 CVE-2025-21832 High 7.8 block: don't revert iter for -EIOCBQUEUED Assigned by Linux
Mar 6, 2025 CVE-2024-58086 High 7.8 drm/v3d: Stop active perfmon if it is being destroyed Assigned by Linux
Mar 6, 2025 CVE-2025-21835 Medium 5.5 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths Assigned by Linux
Mar 7, 2025 CVE-2025-21836 High 7.8 io_uring/kbuf: reallocate buf lists on upgrade Assigned by Linux
Mar 7, 2025 CVE-2025-21838 Medium 5.5 usb: gadget: core: flush gadget workqueue after device removal Assigned by Linux
Mar 7, 2025 CVE-2025-21839 High 7.3 KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop Assigned by Linux
Mar 7, 2025 CVE-2025-21844 High 7.5 smb: client: Add check for next_buffer in receive_encrypted_standard() Assigned by Linux
Mar 12, 2025 CVE-2025-21846 Medium 5.5 acct: perform last write from workqueue Assigned by Linux
Mar 12, 2025 CVE-2025-21853 Medium 5.5 bpf: avoid holding freeze_mutex during mmap operation Assigned by Linux
Mar 12, 2025 CVE-2025-21858 High 7.8 geneve: Fix use-after-free in geneve_find_dev(). Assigned by Linux
Mar 12, 2025 CVE-2025-21859 Medium 5.5 USB: gadget: f_midi: f_midi_complete to call queue_work Assigned by Linux
Mar 12, 2025 CVE-2025-21861 Medium 5.5 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() Assigned by Linux
Mar 12, 2025 CVE-2025-21862 Medium 5.5 drop_monitor: fix incorrect initialization order Assigned by Linux
Mar 12, 2025 CVE-2025-21863 High 7.8 io_uring: prevent opcode speculation Assigned by Linux
Mar 12, 2025 CVE-2025-21864 High 7.8 tcp: drop secpath at the same time as we currently drop dst Assigned by Linux
Mar 12, 2025 CVE-2025-21865 Medium 5.5 gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). Assigned by Linux
Mar 12, 2025
Previous Page 16 of 91 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.