CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 00:10 UTC )
This week: 4,848 CVEs published, 323 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,848 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-53371 Medium 5.5 RDMA/ionic: bound node_desc sysfs read with %.64s Assigned by Linux
Jul 19, 2026 CVE-2026-53372 Medium 5.5 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Assigned by Linux
Jul 19, 2026 CVE-2026-53373 High 7.8 mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap() Assigned by Linux
Jul 19, 2026 CVE-2026-53374 High 8.8 drm/amdgpu: zero-initialize GART table on allocation Assigned by Linux
Jul 19, 2026 CVE-2026-53375 High 8.8 drm/amdgpu/vce: Prevent partial address patches Assigned by Linux
Jul 19, 2026 CVE-2026-53376 Medium 5.5 drm/amdkfd: Add upper bound check for num_of_nodes Assigned by Linux
Jul 19, 2026 CVE-2026-53377 Medium 5.5 drm/msm: always recover the gpu Assigned by Linux
Jul 19, 2026 CVE-2026-53378 Medium 5.5 drm/colorop: Fix blob property reference tracking in state lifecycle Assigned by Linux
Jul 19, 2026 CVE-2026-53379 Medium 5.5 media: i2c: ov8856: free control handler on error in ov8856_init_controls() Assigned by Linux
Jul 19, 2026 CVE-2026-53380 High 7.8 media: rzv2h-ivc: Fix concurrent buffer list access Assigned by Linux
Jul 19, 2026 CVE-2026-53381 High 7.8 virtiofs: fix UAF on submount umount Assigned by Linux
Jul 19, 2026 CVE-2026-53382 Medium 5.5 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si Assigned by Linux
Jul 19, 2026 CVE-2026-53383 High 7.5 ksmbd: reject non-VALID session in compound request branch Assigned by Linux
Jul 19, 2026 CVE-2026-53384 Critical 9.8 serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails Assigned by Linux
Jul 19, 2026 CVE-2026-53385 Medium 5.5 vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write Assigned by Linux
Jul 19, 2026 CVE-2026-53386 High 7.8 iio: adc: ti-ads1298: add bounds check to pga_settings index Assigned by Linux
Jul 19, 2026 CVE-2026-53387 High 7.1 iio: light: veml6075: add bounds check to veml6075_it_ms index Assigned by Linux
Jul 19, 2026 CVE-2026-53388 High 7.8 fuse: re-lock request before replacing page cache folio Assigned by Linux
Jul 19, 2026 CVE-2026-53389 High 7.8 net/tcp-ao: fix use-after-free of key in del_async path Assigned by Linux
Jul 19, 2026 CVE-2026-53390 High 8.1 ksmbd: fix out-of-bounds read in smb_check_perm_dacl() Assigned by Linux
Jul 19, 2026 CVE-2026-53391 High 7.5 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr Assigned by Linux
Jul 19, 2026 CVE-2026-53392 High 7.5 NFSv4/flexfiles: reject zero filehandle version count Assigned by Linux
Jul 19, 2026 CVE-2026-53393 Medium 5.5 nfsd: reset write verifier on deferred writeback errors Assigned by Linux
Jul 19, 2026 CVE-2026-53394 High 7.5 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race Assigned by Linux
Jul 19, 2026 CVE-2026-53395 High 7.5 nfsd: fix dead ACL conflict guard in nfsd4_create Assigned by Linux
Jul 19, 2026 CVE-2026-53396 High 7.1 nfsd: fix posix_acl leak and ignored error in nfsd4_create_file Assigned by Linux
Jul 19, 2026 CVE-2026-53397 High 7.5 nfsd: fix posix_acl leak on SETACL decode failure Assigned by Linux
Jul 19, 2026 CVE-2026-53398 Critical 9.8 NFSD: Fix SECINFO_NO_NAME decode error cleanup Assigned by Linux
Jul 19, 2026 CVE-2026-53399 Critical 9.8 nfsd: release layout stid on setlease failure Assigned by Linux
Jul 19, 2026 CVE-2026-53400 High 7.8 i2c: core: fix adapter registration race Assigned by Linux
Jul 19, 2026 CVE-2026-53401 High 7.8 fbdev: omap2: fix use-after-free in omapfb_mmap Assigned by Linux
Jul 19, 2026 CVE-2026-53402 High 7.1 fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Assigned by Linux
Jul 19, 2026 CVE-2026-53403 Medium 5.5 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var Assigned by Linux
Jul 19, 2026 CVE-2026-63793 High 7.8 ntfs: serialize volume label accesses Assigned by Linux
Jul 19, 2026 CVE-2026-63794 High 7.8 KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path Assigned by Linux
Jul 19, 2026 CVE-2026-63795 Critical 10.0 9p: avoid putting oldfid in p9_client_walk() error path Assigned by Linux
Jul 19, 2026 CVE-2026-63796 High 8.8 ocfs2: reject oversized group bitmap descriptors Assigned by Linux
Jul 19, 2026 CVE-2026-63797 High 8.4 rpmsg: char: Fix use-after-free on probe error path Assigned by Linux
Jul 19, 2026 CVE-2026-63798 Medium 5.5 irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove Assigned by Linux
Jul 19, 2026 CVE-2026-63799 High 7.8 sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path Assigned by Linux
Jul 19, 2026 CVE-2026-63800 Critical 9.8 pNFS: Fix use-after-free in pnfs_update_layout() Assigned by Linux
Jul 19, 2026 CVE-2026-63801 High 8.8 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done Assigned by Linux
Jul 19, 2026 CVE-2026-63802 High 7.8 blk-cgroup: fix UAF in __blkcg_rstat_flush() Assigned by Linux
Jul 19, 2026 CVE-2026-63803 High 7.8 hdlc_ppp: sync per-proto timers before freeing hdlc state Assigned by Linux
Jul 19, 2026 CVE-2026-63804 High 7.8 gfs2: fix use-after-free in gfs2_qd_dealloc Assigned by Linux
Jul 19, 2026 CVE-2026-63805 High 7.8 crypto: nx - fix nx_crypto_ctx_exit argument Assigned by Linux
Jul 19, 2026 CVE-2026-63806 High 7.1 KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Assigned by Linux
Jul 19, 2026 CVE-2026-63807 High 8.8 KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Assigned by Linux
Jul 19, 2026 CVE-2026-63808 Critical 9.8 exfat: fix potential use-after-free in exfat_find_dir_entry() Assigned by Linux
Jul 19, 2026 CVE-2026-63809 High 7.8 bpf: use kvfree() for replaced sysctl write buffer Assigned by Linux
Jul 19, 2026
Previous Page 50 of 154 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
