CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 22:10 UTC )
This week: 5,330 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,330 Show in the list Critical, last 7 days 344 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2025-38505 High 7.1 wifi: mwifiex: discard erroneous disassoc frames on STA interface Assigned by Linux
Aug 16, 2025 CVE-2025-38511 High 8.8 drm/xe/pf: Clear all LMTT pages on alloc Assigned by Linux
Aug 16, 2025 CVE-2025-38512 High 8.8 wifi: prevent A-MSDU attacks in mesh networks Assigned by Linux
Aug 16, 2025 CVE-2025-38514 High 7.5 rxrpc: Fix oops due to non-existence of prealloc backlog struct Assigned by Linux
Aug 16, 2025 CVE-2025-38524 High 7.5 rxrpc: Fix recv-recv race of completed call Assigned by Linux
Aug 16, 2025 CVE-2025-38526 High 7.5 ice: add NULL check in eswitch lag check Assigned by Linux
Aug 16, 2025 CVE-2025-38527 Critical 9.8 smb: client: fix use-after-free in cifs_oplock_break Assigned by Linux
Aug 16, 2025 CVE-2025-38528 High 7.1 bpf: Reject %p% format string in bprintf-like helpers Assigned by Linux
Aug 16, 2025 CVE-2025-38539 High 7.8 tracing: Add down_write(trace_event_sem) when adding trace event Assigned by Linux
Aug 16, 2025 CVE-2025-38552 Critical 9.4 mptcp: plug races between subflow fail and subflow creation Assigned by Linux
Aug 16, 2025 CVE-2025-38560 Critical 9.3 x86/sev: Evict cache lines during SNP memory validation Assigned by Linux
Aug 19, 2025 CVE-2025-38566 Critical 9.8 sunrpc: fix handling of server side tls alerts Assigned by Linux
Aug 19, 2025 CVE-2025-38571 High 8.2 sunrpc: fix client side handling of tls alerts Assigned by Linux
Aug 19, 2025 CVE-2025-38574 High 8.6 pptp: ensure minimal skb length in pptp_xmit() Assigned by Linux
Aug 19, 2025 CVE-2025-38584 High 7.0 padata: Fix pd UAF once and for all Assigned by Linux
Aug 19, 2025 CVE-2025-38586 High 7.8 bpf, arm64: Fix fp initialization for exception boundary Assigned by Linux
Aug 19, 2025 CVE-2025-38591 Medium 5.5 bpf: Reject narrower access to pointer ctx fields Assigned by Linux
Aug 19, 2025 CVE-2025-38593 High 7.8 Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' Assigned by Linux
Aug 19, 2025 CVE-2025-38601 High 8.8 wifi: ath11k: clear initialized flag for deinit-ed srng lists Assigned by Linux
Aug 19, 2025 CVE-2025-38608 High 8.6 bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls Assigned by Linux
Aug 19, 2025 CVE-2025-38614 High 7.8 eventpoll: Fix semi-unbounded recursion Assigned by Linux
Aug 19, 2025 CVE-2024-58239 High 8.2 tls: stop recv() if initial process_rx_list gave us non-DATA Assigned by Linux
Aug 22, 2025 CVE-2025-38617 High 7.8 net/packet: fix a race in packet_set_ring() and packet_notifier() Assigned by Linux
Aug 22, 2025 CVE-2025-38639 High 7.1 netfilter: xt_nfacct: don't assume acct name is null-terminated Assigned by Linux
Aug 22, 2025 CVE-2025-38640 High 7.8 bpf: Disable migration in nf_hook_run_bpf(). Assigned by Linux
Aug 22, 2025 CVE-2025-38643 High 8.8 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() Assigned by Linux
Aug 22, 2025 CVE-2025-38653 High 7.8 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Assigned by Linux
Aug 22, 2025 CVE-2025-38659 High 7.8 gfs2: No more self recovery Assigned by Linux
Aug 22, 2025 CVE-2025-38660 Critical 9.8 [ceph] parse_longname(): strrchr() expects NUL-terminated string Assigned by Linux
Aug 22, 2025 CVE-2024-58240 Critical 9.8 tls: separate no-async decryption request handling from async Assigned by Linux
Aug 28, 2025 CVE-2025-38678 High 7.8 netfilter: nf_tables: reject duplicate device on updates Assigned by Linux
Sep 3, 2025 CVE-2025-38681 Medium 4.7 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Assigned by Linux
Sep 4, 2025 CVE-2025-38685 High 7.8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit Assigned by Linux
Sep 4, 2025 CVE-2025-38688 High 8.8 iommufd: Prevent ALIGN() overflow Assigned by Linux
Sep 4, 2025 CVE-2025-38691 Medium 5.5 pNFS: Fix uninited ptr deref in block/scsi layout Assigned by Linux
Sep 4, 2025 CVE-2025-38701 Medium 5.5 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr Assigned by Linux
Sep 4, 2025 CVE-2025-38702 High 7.8 fbdev: fix potential buffer overflow in do_register_framebuffer() Assigned by Linux
Sep 4, 2025 CVE-2025-38704 High 7.8 rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Assigned by Linux
Sep 4, 2025 CVE-2025-38708 Critical 9.8 drbd: add missing kref_get in handle_write_conflicts Assigned by Linux
Sep 4, 2025 CVE-2025-38710 High 7.8 gfs2: Validate i_depth for exhash directories Assigned by Linux
Sep 4, 2025 CVE-2025-38721 Medium 5.5 netfilter: ctnetlink: fix refcount leak on table dump Assigned by Linux
Sep 4, 2025 CVE-2025-38724 Critical 9.8 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Assigned by Linux
Sep 4, 2025 CVE-2025-38725 Medium 5.5 net: usb: asix_devices: add phy_mask for ax88772 mdio bus Assigned by Linux
Sep 4, 2025 CVE-2025-38727 Medium 5.5 netlink: avoid infinite retry looping in netlink_unicast() Assigned by Linux
Sep 4, 2025 CVE-2025-38728 Critical 9.1 smb3: fix for slab out of bounds on mount to ksmbd Assigned by Linux
Sep 4, 2025 CVE-2025-38730 High 7.8 io_uring/net: commit partial buffers on retry Assigned by Linux
Sep 4, 2025 CVE-2025-38732 Medium 5.5 netfilter: nf_reject: don't leak dst refcount for loopback packets Assigned by Linux
Sep 5, 2025 CVE-2025-38733 High 7.8 s390/mm: Do not map lowcore with identity mapping Assigned by Linux
Sep 5, 2025 CVE-2025-38735 High 7.8 gve: prevent ethtool ops after shutdown Assigned by Linux
Sep 5, 2025 CVE-2025-38736 High 7.1 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Assigned by Linux
Sep 5, 2025
Previous Page 18 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
