CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 15:00 UTC )
This week: 5,055 CVEs published, 320 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,055 Show in the list Critical, last 7 days 320 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2025-71313 Medium 5.5 PCI: endpoint: Add missing NULL check for alloc_workqueue() Assigned by Linux
Jun 3, 2026 CVE-2026-46245 Medium 5.5 drm/amd/display: Fix dc_link NULL handling in HPD init Assigned by Linux
Jun 3, 2026 CVE-2026-46253 High 7.8 pstore/ram: fix buffer overflow in persistent_ram_save_old() Assigned by Linux
Jun 3, 2026 CVE-2026-46259 High 7.8 procfs: fix missing RCU protection when reading real_parent in do_task_stat() Assigned by Linux
Jun 3, 2026 CVE-2026-46263 High 7.8 drm/amd/display: Fix out-of-bounds stream encoder index v3 Assigned by Linux
Jun 3, 2026 CVE-2026-46266 Critical 9.1 inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Assigned by Linux
Jun 3, 2026 CVE-2026-46271 High 7.8 wifi: ath12k: do WoW offloads only on primary link Assigned by Linux
Jun 3, 2026 CVE-2026-46275 High 7.8 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Assigned by Linux
Jun 8, 2026 CVE-2026-46280 High 7.8 lib: test_hmm: evict device pages on file close to avoid use-after-free Assigned by Linux
Jun 8, 2026 CVE-2026-46294 High 7.8 dm: fix a buffer overflow in ioctl processing Assigned by Linux
Jun 8, 2026 CVE-2026-46298 Medium 4.7 pseries/papr-hvpipe: Fix race with interrupt handler Assigned by Linux
Jun 8, 2026 CVE-2026-46303 High 8.2 isofs: validate Rock Ridge CE continuation extent against volume size Assigned by Linux
Jun 8, 2026 CVE-2026-46304 High 7.5 nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free Assigned by Linux
Jun 8, 2026 CVE-2026-46306 High 7.5 flow_dissector: do not dissect PPPoE PFC frames Assigned by Linux
Jun 8, 2026 CVE-2026-46307 High 8.3 wifi: ath5k: do not access array OOB Assigned by Linux
Jun 8, 2026 CVE-2026-46311 High 7.8 drm/amdgpu/userq: fix access to stale wptr mapping Assigned by Linux
Jun 8, 2026 CVE-2026-46316 Critical 9.3 KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry Assigned by Linux
Jun 9, 2026 CVE-2026-46317 High 8.8 KVM: arm64: Reassign nested_mmus array behind mmu_lock Assigned by Linux
Jun 9, 2026 CVE-2026-46319 High 7.8 net/sched: act_ct: Only release RCU read lock after ct_ft Assigned by Linux
Jun 9, 2026 CVE-2026-46320 High 7.4 tap: free page on error paths in tap_get_user_xdp() Assigned by Linux
Jun 9, 2026 CVE-2026-46321 High 7.1 tun: free page on short-frame rejection in tun_xdp_one() Assigned by Linux
Jun 9, 2026 CVE-2026-46322 High 7.1 tun: free page on build_skb failure in tun_xdp_one() Assigned by Linux
Jun 9, 2026 CVE-2026-46323 High 7.8 net: gro: don't merge zcopy skbs Assigned by Linux
Jun 9, 2026 CVE-2026-46324 High 7.8 netfilter: nf_tables: use list_del_rcu for netlink hooks Assigned by Linux
Jun 9, 2026 CVE-2026-46325 Critical 9.8 RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE Assigned by Linux
Jun 9, 2026 CVE-2026-46327 High 7.8 dm: fix unlocked test for dm_suspended_md Assigned by Linux
Jun 9, 2026 CVE-2026-46330 High 7.8 Revert "net/smc: Introduce TCP ULP support" Assigned by Linux
Jun 9, 2026 CVE-2026-46331 High 7.8 net/sched: fix pedit partial COW leading to page cache corruption Assigned by Linux
Jun 16, 2026 CVE-2026-52908 High 7.8 RDMA: During rereg_mr ensure that REREG_ACCESS is compatible Assigned by Linux
Jun 19, 2026 CVE-2026-52909 High 7.8 ip6_vti: set netns_immutable on the fallback device. Assigned by Linux
Jun 19, 2026 CVE-2026-52910 High 7.8 bpf: Free reuseport cBPF prog after RCU grace period. Assigned by Linux
Jun 19, 2026 CVE-2026-52912 High 7.8 netfilter: nf_queue: hold bridge skb->dev while queued Assigned by Linux
Jun 24, 2026 CVE-2026-52913 Medium 5.5 batman-adv: v: stop OGMv2 on disabled interface Assigned by Linux
Jun 24, 2026 CVE-2026-52914 Critical 9.8 batman-adv: fix fragment reassembly length accounting Assigned by Linux
Jun 24, 2026 CVE-2026-52915 High 7.1 netfilter: ip6t_hbh: reject oversized option lists Assigned by Linux
Jun 24, 2026 CVE-2026-52916 Medium 5.5 batman-adv: frag: disallow unicast fragment in fragment Assigned by Linux
Jun 24, 2026 CVE-2026-52917 High 7.1 sctp: diag: reject stale associations in dump_one path Assigned by Linux
Jun 24, 2026 CVE-2026-52918 High 8.8 Bluetooth: serialize accept_q access Assigned by Linux
Jun 24, 2026 CVE-2026-52919 High 7.8 batman-adv: fix tp_meter counter underflow during shutdown Assigned by Linux
Jun 24, 2026 CVE-2026-52920 High 8.3 netfilter: xt_policy: fix strict mode inbound policy matching Assigned by Linux
Jun 24, 2026 CVE-2026-52921 Medium 5.5 netfilter: ipset: stop hash:* range iteration at end Assigned by Linux
Jun 24, 2026 CVE-2026-52922 High 7.5 batman-adv: dat: handle forward allocation error Assigned by Linux
Jun 24, 2026 CVE-2026-52923 High 7.8 ipc: limit next_id allocation to the valid ID range Assigned by Linux
Jun 24, 2026 CVE-2026-52924 Critical 9.8 sctp: purge outqueue on stale COOKIE-ECHO handling Assigned by Linux
Jun 24, 2026 CVE-2026-52925 Medium 5.5 vrf: Fix a potential NPD when removing a port from a VRF Assigned by Linux
Jun 24, 2026 CVE-2026-52926 Medium 5.5 batman-adv: clear current gateway during teardown Assigned by Linux
Jun 24, 2026 CVE-2026-52927 High 7.8 netfilter: ebtables: fix OOB read in compat_mtw_from_user Assigned by Linux
Jun 24, 2026 CVE-2026-52928 Medium 5.5 af_unix: Reject SIOCATMARK on non-stream sockets Assigned by Linux
Jun 24, 2026 CVE-2026-52929 High 7.5 sctp: stream: fully roll back denied add-stream state Assigned by Linux
Jun 24, 2026 CVE-2026-52930 Medium 5.5 ipc/shm: serialize orphan cleanup with shm_nattch updates Assigned by Linux
Jun 24, 2026
Previous Page 40 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
