CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 00:20 UTC )
This week: 5,198 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,198 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2023-53629 Critical 9.8 fs: dlm: fix use after free in midcomms commit Assigned by Linux
Oct 7, 2025 CVE-2023-53635 High 8.2 netfilter: conntrack: fix wrong ct->timeout value Assigned by Linux
Oct 7, 2025 CVE-2023-53638 High 7.0 octeon_ep: cancel queued works in probe error path Assigned by Linux
Oct 7, 2025 CVE-2023-53643 High 7.8 nvme-tcp: don't access released socket during error recovery Assigned by Linux
Oct 7, 2025 CVE-2023-53659 High 7.8 iavf: Fix out-of-bounds when setting channels on remove Assigned by Linux
Oct 7, 2025 CVE-2023-53669 High 7.8 tcp: fix skb_copy_ubufs() vs BIG TCP Assigned by Linux
Oct 7, 2025 CVE-2023-53675 High 8.8 scsi: ses: Fix possible desc_ptr out-of-bounds accesses Assigned by Linux
Oct 7, 2025 CVE-2023-53676 High 8.8 scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() Assigned by Linux
Oct 7, 2025 CVE-2023-53679 High 8.3 wifi: mt7601u: fix an integer underflow Assigned by Linux
Oct 7, 2025 CVE-2023-53680 High 7.5 NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL Assigned by Linux
Oct 7, 2025 CVE-2025-39955 High 7.8 tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). Assigned by Linux
Oct 9, 2025 CVE-2025-39956 High 7.8 igc: don't fail igc_probe() on LED setup error Assigned by Linux
Oct 9, 2025 CVE-2025-39957 High 7.1 wifi: mac80211: increase scan_ies_len for S1G Assigned by Linux
Oct 9, 2025 CVE-2025-39961 High 8.8 iommu/amd/pgtbl: Fix possible race while increase page table level Assigned by Linux
Oct 9, 2025 CVE-2025-39963 High 7.8 io_uring: fix incorrect io_kiocb reference in io_link_skb Assigned by Linux
Oct 9, 2025 CVE-2025-39964 Known exploited
High 7.8 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Assigned by Linux
Oct 13, 2025 CVE-2025-39965 High 7.8 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI Assigned by Linux
Oct 13, 2025 CVE-2025-39968 High 7.3 i40e: add max boundary check for VF filters Assigned by Linux
Oct 15, 2025 CVE-2025-39969 High 8.8 i40e: fix validation of VF state in get resources Assigned by Linux
Oct 15, 2025 CVE-2025-39970 High 8.8 i40e: fix input validation logic for action_meta Assigned by Linux
Oct 15, 2025 CVE-2025-39972 High 8.8 i40e: fix idx validation in i40e_validate_queue_map Assigned by Linux
Oct 15, 2025 CVE-2025-39973 High 8.8 i40e: add validation for ring_len param Assigned by Linux
Oct 15, 2025 CVE-2025-39977 High 7.8 futex: Prevent use-after-free during requeue-PI Assigned by Linux
Oct 15, 2025 CVE-2025-39978 High 7.8 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() Assigned by Linux
Oct 15, 2025 CVE-2025-39979 High 7.8 net/mlx5: fs, fix UAF in flow counter release Assigned by Linux
Oct 15, 2025 CVE-2025-39980 Not yet scored nexthop: Forbid FDB status change while nexthop is in a group Assigned by Linux
Oct 15, 2025 CVE-2025-39981 High 7.8 Bluetooth: MGMT: Fix possible UAFs Assigned by Linux
Oct 15, 2025 CVE-2025-39982 High 8.8 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync Assigned by Linux
Oct 15, 2025 CVE-2025-39990 High 7.8 bpf: Check the helper function is valid in get_helper_proto Assigned by Linux
Oct 15, 2025 CVE-2025-39994 High 7.3 media: tuner: xc5000: Fix use-after-free in xc5000_release Assigned by Linux
Oct 15, 2025 CVE-2025-39997 Not yet scored ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free Assigned by Linux
Oct 15, 2025 CVE-2025-39998 High 7.1 scsi: target: target_core_configfs: Add length check to avoid buffer overflow Assigned by Linux
Oct 15, 2025 CVE-2025-40000 High 8.8 wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() Assigned by Linux
Oct 15, 2025 CVE-2023-53695 High 7.8 udf: Detect system inodes linked into directory hierarchy Assigned by Linux
Oct 22, 2025 CVE-2023-53698 High 7.8 xsk: fix refcount underflow in error path Assigned by Linux
Oct 22, 2025 CVE-2023-53705 High 8.2 ipv6: Fix out-of-bounds access in ipv6_find_tlv() Assigned by Linux
Oct 22, 2025 CVE-2023-53711 High 8.2 NFS: Fix a potential data corruption Assigned by Linux
Oct 22, 2025 CVE-2023-53713 High 7.8 arm64: sme: Use STR P to clear FFR context field in streaming SVE mode Assigned by Linux
Oct 22, 2025 CVE-2023-53718 High 7.8 ring-buffer: Do not swap cpu_buffer during resize process Assigned by Linux
Oct 22, 2025 CVE-2023-53726 High 7.1 arm64: csum: Fix OoB access in IP checksum code for negative lengths Assigned by Linux
Oct 22, 2025 CVE-2023-53729 High 7.8 soc: qcom: qmi_encdec: Restrict string length in decode Assigned by Linux
Oct 22, 2025 CVE-2023-53733 High 7.8 net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode Assigned by Linux
Oct 24, 2025 CVE-2025-40018 High 7.8 ipvs: Defer ip_vs_ftp unregister during netns cleanup Assigned by Linux
Oct 24, 2025 CVE-2025-40022 Not yet scored crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Assigned by Linux
Oct 24, 2025 CVE-2025-40026 High 7.9 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O Assigned by Linux
Oct 28, 2025 CVE-2025-40038 High 7.1 KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Assigned by Linux
Oct 28, 2025 CVE-2025-40040 High 7.8 mm/ksm: fix flag-dropping behavior in ksm_madvise Assigned by Linux
Oct 28, 2025 CVE-2025-40044 High 7.8 fs: udf: fix OOB read in lengthAllocDescs handling Assigned by Linux
Oct 28, 2025 CVE-2025-40048 High 7.5 uio_hv_generic: Let userspace take care of interrupt mask Assigned by Linux
Oct 28, 2025 CVE-2025-40051 High 7.8 vhost: vringh: Modify the return value check Assigned by Linux
Oct 28, 2025
Previous Page 21 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
