CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 01:00 UTC )
What this means for you
This week: 5,177 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,177 Show in the list Critical, last 7 days 329 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2022-50167 High 7.8 bpf: fix potential 32-bit overflow when accessing ARRAY map element Assigned by Linux
Jun 18, 2025 CVE-2022-50168 High 7.8 bpf, x86: fix freeing of not-finalized bpf_prog_pack Assigned by Linux
Jun 18, 2025 CVE-2022-50200 High 7.8 selinux: Add boundary check in put_entry() Assigned by Linux
Jun 18, 2025 CVE-2022-50215 High 7.8 scsi: sg: Allow waiting for commands to complete on removed device Assigned by Linux
Jun 18, 2025 CVE-2025-38083 High 7.8 net_sched: prio: fix a race in prio_tune() Assigned by Linux
Jun 20, 2025 CVE-2025-38084 High 7.8 mm/hugetlb: unshare page tables during VMA split, not before Assigned by Linux
Jun 28, 2025 CVE-2025-38089 Critical 9.8 sunrpc: handle SVC_GARBAGE during svc auth processing as auth error Assigned by Linux
Jun 30, 2025 CVE-2025-38095 High 7.8 dma-buf: insert memory barrier before updating num_fences Assigned by Linux
Jul 3, 2025 CVE-2025-38097 High 7.8 espintcp: remove encap socket caching to avoid reference leak Assigned by Linux
Jul 3, 2025 CVE-2025-38102 High 7.8 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify Assigned by Linux
Jul 3, 2025 CVE-2025-38105 Medium 5.5 ALSA: usb-audio: Kill timer properly at removal Assigned by Linux
Jul 3, 2025 CVE-2025-38107 High 7.8 net_sched: ets: fix a race in ets_qdisc_change() Assigned by Linux
Jul 3, 2025 CVE-2025-38108 High 7.8 net_sched: red: fix a race in __red_change() Assigned by Linux
Jul 3, 2025 CVE-2025-38110 High 7.8 net/mdiobus: Fix potential out-of-bounds clause 45 read/write access Assigned by Linux
Jul 3, 2025 CVE-2025-38111 High 7.8 net/mdiobus: Fix potential out-of-bounds read/write access Assigned by Linux
Jul 3, 2025 CVE-2025-38115 High 7.8 net_sched: sch_sfq: fix a potential crash on gso_skb handling Assigned by Linux
Jul 3, 2025 CVE-2025-38117 High 7.8 Bluetooth: MGMT: Protect mgmt_pending list with its own lock Assigned by Linux
Jul 3, 2025 CVE-2025-38118 High 7.8 Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete Assigned by Linux
Jul 3, 2025 CVE-2025-38120 Critical 9.4 netfilter: nf_set_pipapo_avx2: fix initial map fill Assigned by Linux
Jul 3, 2025 CVE-2025-38125 Medium 5.5 net: stmmac: make sure that ptp_rate is not 0 before configuring EST Assigned by Linux
Jul 3, 2025 CVE-2025-38127 High 7.8 ice: fix Tx scheduler error handling in XDP callback Assigned by Linux
Jul 3, 2025 CVE-2025-38146 Critical 9.4 net: openvswitch: Fix the dead loop of MPLS parse Assigned by Linux
Jul 3, 2025 CVE-2025-38154 High 7.8 bpf, sockmap: Avoid using sk_socket after free when sending Assigned by Linux
Jul 3, 2025 CVE-2025-38161 High 7.8 RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Assigned by Linux
Jul 3, 2025 CVE-2025-38162 High 7.8 netfilter: nft_set_pipapo: prevent overflow in lookup table allocation Assigned by Linux
Jul 3, 2025 CVE-2025-38166 High 7.8 bpf: fix ktls panic with sockmap Assigned by Linux
Jul 3, 2025 CVE-2025-38168 High 7.8 perf: arm-ni: Unregister PMUs on probe failure Assigned by Linux
Jul 3, 2025 CVE-2025-38169 High 7.8 arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP Assigned by Linux
Jul 3, 2025 CVE-2025-38181 High 7.5 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). Assigned by Linux
Jul 4, 2025 CVE-2025-38184 High 7.8 tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer Assigned by Linux
Jul 4, 2025 CVE-2025-38192 High 7.8 net: clear the dst when changing skb protocol Assigned by Linux
Jul 4, 2025 CVE-2025-38193 High 7.8 net_sched: sch_sfq: reject invalid perturb period Assigned by Linux
Jul 4, 2025 CVE-2025-38197 High 7.3 platform/x86: dell_rbu: Fix list usage Assigned by Linux
Jul 4, 2025 CVE-2025-38201 High 7.8 netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Assigned by Linux
Jul 4, 2025 CVE-2025-38204 High 7.8 jfs: fix array-index-out-of-bounds read in add_missing_indices Assigned by Linux
Jul 4, 2025 CVE-2025-38209 Critical 9.8 nvme-tcp: remove tag set when second admin queue config fails Assigned by Linux
Jul 4, 2025 CVE-2025-38212 High 7.8 ipc: fix to protect IPCS lookups using RCU Assigned by Linux
Jul 4, 2025 CVE-2025-38216 High 8.8 iommu/vt-d: Restore context entry setup order for aliased devices Assigned by Linux
Jul 4, 2025 CVE-2025-38232 High 7.8 NFSD: fix race between nfsd registration and exports_proc Assigned by Linux
Jul 4, 2025 CVE-2025-38234 High 7.8 sched/rt: Fix race in push_rt_task Assigned by Linux
Jul 4, 2025 CVE-2025-38238 High 8.8 scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out Assigned by Linux
Jul 9, 2025 CVE-2025-38239 High 7.3 scsi: megaraid_sas: Fix invalid node index Assigned by Linux
Jul 9, 2025 CVE-2025-38244 High 7.5 smb: client: fix potential deadlock when reconnecting channels Assigned by Linux
Jul 9, 2025 CVE-2025-38246 Critical 9.8 bnxt: properly flush XDP redirect lists Assigned by Linux
Jul 9, 2025 CVE-2025-38250 High 7.8 Bluetooth: hci_core: Fix use-after-free in vhci_flush() Assigned by Linux
Jul 9, 2025 CVE-2025-38253 High 8.8 HID: wacom: fix crash in wacom_aes_battery_handler() Assigned by Linux
Jul 9, 2025 CVE-2025-38257 High 7.3 s390/pkey: Prevent overflow in size calculation for memdup_user() Assigned by Linux
Jul 9, 2025 CVE-2025-38262 High 7.8 tty: serial: uartlite: register uart driver in init Assigned by Linux
Jul 9, 2025 CVE-2025-38270 High 7.8 net: drv: netdevsim: don't napi_complete() from netpoll Assigned by Linux
Jul 10, 2025 CVE-2025-38278 High 7.8 octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback Assigned by Linux
Jul 10, 2025
Previous Page 20 of 91 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.