CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 04:00 UTC )
This week: 5,208 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,208 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2025-68795 High 7.8 ethtool: Avoid overflowing userspace buffer on stats query Assigned by Linux
Jan 13, 2026 CVE-2025-68798 Not yet scored perf/x86/amd: Check event before enable to avoid GPF Assigned by Linux
Jan 13, 2026 CVE-2025-68800 High 7.8 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Assigned by Linux
Jan 13, 2026 CVE-2025-68801 High 7.8 mlxsw: spectrum_router: Fix neighbour use-after-free Assigned by Linux
Jan 13, 2026 CVE-2025-68803 High 8.0 NFSD: NFSv4 file creation neglects setting ACL Assigned by Linux
Jan 13, 2026 CVE-2025-68811 Critical 9.8 svcrdma: use rc_pageoff for memcpy byte offset Assigned by Linux
Jan 13, 2026 CVE-2025-68813 Not yet scored ipvs: fix ipv4 null-ptr-deref in route error path Assigned by Linux
Jan 13, 2026 CVE-2025-68814 Not yet scored io_uring: fix filename leak in __io_openat_prep() Assigned by Linux
Jan 13, 2026 CVE-2025-68815 High 7.8 net/sched: ets: Remove drr class from the active list if it changes to strict Assigned by Linux
Jan 13, 2026 CVE-2025-68816 Not yet scored net/mlx5: fw_tracer, Validate format string parameters Assigned by Linux
Jan 13, 2026 CVE-2025-68818 High 8.8 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" Assigned by Linux
Jan 13, 2026 CVE-2025-68819 High 7.8 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() Assigned by Linux
Jan 13, 2026 CVE-2025-68820 Not yet scored ext4: xattr: fix null pointer deref in ext4_raw_inode() Assigned by Linux
Jan 13, 2026 CVE-2025-68822 High 7.8 Input: alps - fix use-after-free bugs caused by dev3_register_work Assigned by Linux
Jan 13, 2026 CVE-2025-71064 Not yet scored net: hns3: using the num_tqps in the vf driver to apply for resources Assigned by Linux
Jan 13, 2026 CVE-2025-71068 Critical 9.8 svcrdma: bound check rq_pages index in inline path Assigned by Linux
Jan 13, 2026 CVE-2025-71075 High 7.8 scsi: aic94xx: fix use-after-free in device removal path Assigned by Linux
Jan 13, 2026 CVE-2025-71077 Medium 5.5 tpm: Cap the number of PCR banks Assigned by Linux
Jan 13, 2026 CVE-2025-71078 High 7.8 powerpc/64s/slb: Fix SLB multihit issue during SLB preload Assigned by Linux
Jan 13, 2026 CVE-2025-71079 Medium 5.5 net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write Assigned by Linux
Jan 13, 2026 CVE-2025-71082 High 7.8 Bluetooth: btusb: revert use of devm_kzalloc in btusb Assigned by Linux
Jan 13, 2026 CVE-2025-71083 Medium 5.5 drm/ttm: Avoid NULL pointer deref for evicted BOs Assigned by Linux
Jan 13, 2026 CVE-2025-71084 Medium 5.5 RDMA/cm: Fix leaking the multicast GID table reference Assigned by Linux
Jan 13, 2026 CVE-2025-71085 High 7.5 ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() Assigned by Linux
Jan 13, 2026 CVE-2025-71086 High 7.8 net: rose: fix invalid array index in rose_kill_by_device() Assigned by Linux
Jan 13, 2026 CVE-2025-71087 Medium 5.5 iavf: fix off-by-one issues in iavf_config_rss_reg() Assigned by Linux
Jan 13, 2026 CVE-2025-71088 Medium 5.5 mptcp: fallback earlier on simult connection Assigned by Linux
Jan 13, 2026 CVE-2025-71089 High 7.8 iommu: disable SVA when CONFIG_X86 is set Assigned by Linux
Jan 13, 2026 CVE-2025-71091 High 7.8 team: fix check for port enabled in team_queue_override_port_prio_changed() Assigned by Linux
Jan 13, 2026 CVE-2025-71093 Critical 9.1 e1000: fix OOB in e1000_tbi_should_accept() Assigned by Linux
Jan 13, 2026 CVE-2025-71094 Medium 5.5 net: usb: asix: validate PHY address before use Assigned by Linux
Jan 13, 2026 CVE-2025-71095 Critical 9.1 net: stmmac: fix the crash issue for zero copy XDP_TX action Assigned by Linux
Jan 13, 2026 CVE-2025-71096 Medium 5.5 RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly Assigned by Linux
Jan 13, 2026 CVE-2025-71097 Medium 5.5 ipv4: Fix reference count leak when using error routes with nexthop objects Assigned by Linux
Jan 13, 2026 CVE-2025-71098 Medium 5.5 ip6_gre: make ip6gre_header() robust Assigned by Linux
Jan 13, 2026 CVE-2025-71099 High 7.8 drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() Assigned by Linux
Jan 13, 2026 CVE-2025-71100 High 7.6 wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() Assigned by Linux
Jan 13, 2026 CVE-2025-71104 Medium 5.5 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer Assigned by Linux
Jan 14, 2026 CVE-2025-71108 Medium 5.5 usb: typec: ucsi: Handle incorrect num_connectors capability Assigned by Linux
Jan 14, 2026 CVE-2025-71111 Medium 4.7 hwmon: (w83791d) Convert macros to functions to avoid TOCTOU Assigned by Linux
Jan 14, 2026 CVE-2025-71112 High 8.8 net: hns3: add VLAN id validation before using Assigned by Linux
Jan 14, 2026 CVE-2025-71113 Medium 5.5 crypto: af_alg - zero initialize memory allocated via sock_kmalloc Assigned by Linux
Jan 14, 2026 CVE-2025-71114 Medium 5.5 via_wdt: fix critical boot hang due to unnamed resource allocation Assigned by Linux
Jan 14, 2026 CVE-2025-71116 Critical 9.1 libceph: make decode_pool() more resilient against corrupted osdmaps Assigned by Linux
Jan 14, 2026 CVE-2025-71118 Medium 5.5 ACPICA: Avoid walking the Namespace if start_node is NULL Assigned by Linux
Jan 14, 2026 CVE-2025-71120 High 7.5 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf Assigned by Linux
Jan 14, 2026 CVE-2025-71123 High 7.8 ext4: fix string copying in parse_apply_sb_mount_options() Assigned by Linux
Jan 14, 2026 CVE-2025-71125 Medium 5.5 tracing: Do not register unsupported perf events Assigned by Linux
Jan 14, 2026 CVE-2025-71126 High 7.5 mptcp: avoid deadlock on fallback while reinjecting Assigned by Linux
Jan 14, 2026 CVE-2025-71127 High 7.1 wifi: mac80211: Discard Beacon frames to non-broadcast address Assigned by Linux
Jan 14, 2026
Previous Page 26 of 149 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
