CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-20 20:30 UTC )
What this means for you
This week: 3,435 CVEs published, 235 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 3,435 Show in the list Critical, last 7 days 235 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-53181 Medium 5.5 vsock/vmci: fix sk_ack_backlog leak on failed handshake Assigned by Linux
Jun 25, 2026 CVE-2026-53182 High 7.8 wifi: nl80211: reject oversized EMA RNR lists Assigned by Linux
Jun 25, 2026 CVE-2026-53183 High 7.5 mptcp: allow subflow rcv wnd to shrink Assigned by Linux
Jun 25, 2026 CVE-2026-53184 High 7.5 udp: clear skb->dev before running a sockmap verdict Assigned by Linux
Jun 25, 2026 CVE-2026-53185 High 7.8 zram: fix use-after-free in zram_bvec_write_partial() Assigned by Linux
Jun 25, 2026 CVE-2026-53186 Critical 9.1 RDMA/srp: bound SRP_RSP sense copy by the received length Assigned by Linux
Jun 25, 2026 CVE-2026-53187 High 7.1 RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc Assigned by Linux
Jun 25, 2026 CVE-2026-53188 High 8.8 RDMA/core: Validate the passed in fops for ib_get_ucaps() Assigned by Linux
Jun 25, 2026 CVE-2026-53189 High 7.8 mm/huge_memory: update file PMD counter before folio_put() Assigned by Linux
Jun 25, 2026 CVE-2026-53190 Medium 5.5 drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() Assigned by Linux
Jun 25, 2026 CVE-2026-53191 High 7.8 io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries Assigned by Linux
Jun 25, 2026 CVE-2026-53192 High 7.8 ALSA: timer: Fix UAF at snd_timer_user_params() Assigned by Linux
Jun 25, 2026 CVE-2026-53193 High 7.8 ALSA: timer: Forcibly close timer instances at closing Assigned by Linux
Jun 25, 2026 CVE-2026-53194 High 7.8 USB: serial: kl5kusb105: fix bulk-out buffer overflow Assigned by Linux
Jun 25, 2026 CVE-2026-53195 High 7.8 USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() Assigned by Linux
Jun 25, 2026 CVE-2026-53196 Medium 6.8 USB: serial: io_ti: fix heap overflow in get_manuf_info() Assigned by Linux
Jun 25, 2026 CVE-2026-53197 Medium 5.5 xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() Assigned by Linux
Jun 25, 2026 CVE-2026-53198 High 8.8 ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL Assigned by Linux
Jun 25, 2026 CVE-2026-53199 High 7.5 hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf Assigned by Linux
Jun 25, 2026 CVE-2026-53200 High 8.8 KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX Assigned by Linux
Jun 25, 2026 CVE-2026-53201 High 7.8 Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" Assigned by Linux
Jun 25, 2026 CVE-2026-53202 High 7.8 accel/ivpu: Fix signed integer truncation in IPC receive Assigned by Linux
Jun 25, 2026 CVE-2026-53203 High 7.1 accel/ivpu: Add buffer overflow check in MS get_info_ioctl Assigned by Linux
Jun 25, 2026 CVE-2026-53204 Medium 5.5 firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe Assigned by Linux
Jun 25, 2026 CVE-2026-53205 High 7.1 accel/ivpu: Add bounds checks for firmware log indices Assigned by Linux
Jun 25, 2026 CVE-2026-53206 Medium 5.5 accel/ivpu: Add bounds check for firmware runtime memory Assigned by Linux
Jun 25, 2026 CVE-2026-53207 Medium 5.5 mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison Assigned by Linux
Jun 25, 2026 CVE-2026-53208 Medium 5.5 Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig Assigned by Linux
Jun 25, 2026 CVE-2026-53209 High 7.8 Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend Assigned by Linux
Jun 25, 2026 CVE-2026-53210 Medium 5.5 tee: shm: fix shm leak in register_shm_helper() Assigned by Linux
Jun 25, 2026 CVE-2026-53211 Medium 5.5 netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register Assigned by Linux
Jun 25, 2026 CVE-2026-53212 High 7.8 netfilter: nft_tunnel: fix use-after-free on object destroy Assigned by Linux
Jun 25, 2026 CVE-2026-53213 Medium 5.5 drm/vc4: fix krealloc() memory leak Assigned by Linux
Jun 25, 2026 CVE-2026-53214 Medium 5.5 ipv6: Fix a potential NPD in cleanup_prefix_route() Assigned by Linux
Jun 25, 2026 CVE-2026-53215 Critical 9.8 net: mvpp2: refill RX buffers before XDP or skb use Assigned by Linux
Jun 25, 2026 CVE-2026-53216 Critical 9.8 net: mvpp2: limit XDP frame size to the RX buffer Assigned by Linux
Jun 25, 2026 CVE-2026-53217 High 8.6 net: mvpp2: sync RX data at the hardware packet offset Assigned by Linux
Jun 25, 2026 CVE-2026-53218 Medium 5.5 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag Assigned by Linux
Jun 25, 2026 CVE-2026-53219 Medium 5.5 netfilter: x_tables: avoid leaking percpu counter pointers Assigned by Linux
Jun 25, 2026 CVE-2026-53220 Medium 5.5 netfilter: revalidate bridge ports Assigned by Linux
Jun 25, 2026 CVE-2026-53221 Critical 9.8 ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Assigned by Linux
Jun 25, 2026 CVE-2026-53222 Medium 5.5 ptp: ocp: fix resource freeing order Assigned by Linux
Jun 25, 2026 CVE-2026-53223 High 7.1 net: guard timestamp cmsgs to real error queue skbs Assigned by Linux
Jun 25, 2026 CVE-2026-53224 Critical 9.1 sctp: validate embedded INIT chunk and address list lengths in cookie Assigned by Linux
Jun 25, 2026 CVE-2026-53225 Critical 9.1 sctp: fix uninit-value in __sctp_rcv_asconf_lookup() Assigned by Linux
Jun 25, 2026 CVE-2026-53226 Medium 5.5 gpio: rockchip: fix generic IRQ chip leak on remove Assigned by Linux
Jun 25, 2026 CVE-2026-53227 Medium 5.5 net: openvswitch: fix possible kfree_skb of ERR_PTR Assigned by Linux
Jun 25, 2026 CVE-2026-53228 Critical 9.8 ipv6: sit: reload inner IPv6 header after GSO offloads Assigned by Linux
Jun 25, 2026 CVE-2026-53229 High 7.5 net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure Assigned by Linux
Jun 25, 2026 CVE-2026-53230 High 8.7 net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list Assigned by Linux
Jun 25, 2026
Previous Page 46 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.