CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 03:40 UTC )
This week: 4,911 CVEs published, 348 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,911 Show in the list Critical, last 7 days 348 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-63905 Not yet scored usbip: vudc: Fix use after free bug in vudc_remove due to race condition Assigned by Linux
Jul 19, 2026 CVE-2026-63906 High 8.4 usb: musb: omap2430: Fix use-after-free in omap2430_probe() Assigned by Linux
Jul 19, 2026 CVE-2026-63907 Not yet scored uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory Assigned by Linux
Jul 19, 2026 CVE-2026-63908 Not yet scored Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem Assigned by Linux
Jul 19, 2026 CVE-2026-63909 High 8.1 ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops Assigned by Linux
Jul 19, 2026 CVE-2026-63910 High 7.8 dma-buf: fix UAF in dma_buf_fd() tracepoint Assigned by Linux
Jul 19, 2026 CVE-2026-63911 High 7.8 xfrm: iptfs: reset runtime state when cloning SAs Assigned by Linux
Jul 19, 2026 CVE-2026-63912 Critical 9.8 xfrm: esp: restore combined single-frag length gate Assigned by Linux
Jul 19, 2026 CVE-2026-63913 High 8.2 netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check Assigned by Linux
Jul 19, 2026 CVE-2026-63914 High 7.3 xfrm: route MIGRATE notifications to caller's netns Assigned by Linux
Jul 19, 2026 CVE-2026-63915 High 8.8 nfc: hci: fix out-of-bounds read in HCP header parsing Assigned by Linux
Jul 19, 2026 CVE-2026-63916 High 8.8 HID: wacom: Fix OOB write in wacom_hid_set_device_mode() Assigned by Linux
Jul 19, 2026 CVE-2026-63917 High 8.8 ip6: vti: Use ip6_tnl.net in vti6_changelink(). Assigned by Linux
Jul 19, 2026 CVE-2026-63918 High 7.8 l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname Assigned by Linux
Jul 19, 2026 CVE-2026-63919 High 8.8 xfrm: input: hold netns during deferred transport reinjection Assigned by Linux
Jul 19, 2026 CVE-2026-63920 High 7.1 ipv6: validate extension header length before copying to cmsg Assigned by Linux
Jul 19, 2026 CVE-2026-63921 High 8.8 ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). Assigned by Linux
Jul 19, 2026 CVE-2026-63922 Critical 9.8 ipv6: exthdrs: refresh nh after handling HAO option Assigned by Linux
Jul 19, 2026 CVE-2026-63923 High 8.8 octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify Assigned by Linux
Jul 19, 2026 CVE-2026-63924 Critical 9.8 ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() Assigned by Linux
Jul 19, 2026 CVE-2026-63925 High 8.1 macsec: fix replay protection at XPN lower-PN wrap Assigned by Linux
Jul 19, 2026 CVE-2026-63926 High 8.4 bpf: sockmap: fix tail fragment offset in bpf_msg_push_data Assigned by Linux
Jul 19, 2026 CVE-2026-63927 High 7.8 usb: dwc2: Fix use after free in debug code Assigned by Linux
Jul 19, 2026 CVE-2026-63928 Not yet scored USB: serial: omninet: fix memory corruption with small endpoint Assigned by Linux
Jul 19, 2026 CVE-2026-63929 Not yet scored iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() Assigned by Linux
Jul 19, 2026 CVE-2026-63930 High 7.8 iio: buffer: hw-consumer: fix use-after-free in error path Assigned by Linux
Jul 19, 2026 CVE-2026-63931 Not yet scored iio: chemical: scd30: fix division by zero in write_raw Assigned by Linux
Jul 19, 2026 CVE-2026-63932 Not yet scored iio: chemical: mhz19b: reject oversized serial replies Assigned by Linux
Jul 19, 2026 CVE-2026-63933 Not yet scored iio: gyro: adis16260: fix division by zero in write_raw Assigned by Linux
Jul 19, 2026 CVE-2026-63934 Not yet scored iio: gyro: itg3200: fix i2c read into the wrong stack location Assigned by Linux
Jul 19, 2026 CVE-2026-63935 Not yet scored iio: adc: nxp-sar-adc: fix division by zero in write_raw Assigned by Linux
Jul 19, 2026 CVE-2026-63936 Not yet scored iio: adc: mt6359: fix unchecked return value in mt6358_read_imp Assigned by Linux
Jul 19, 2026 CVE-2026-63937 High 8.8 KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer Assigned by Linux
Jul 19, 2026 CVE-2026-63938 Critical 9.3 KVM: SEV: Check PSC request indices against the actual size of the buffer Assigned by Linux
Jul 19, 2026 CVE-2026-63939 Critical 9.3 KVM: SEV: Compute the correct max length of the in-GHCB scratch area Assigned by Linux
Jul 19, 2026 CVE-2026-63940 Critical 9.3 KVM: SEV: Ignore Port I/O requests of length '0' Assigned by Linux
Jul 19, 2026 CVE-2026-63941 High 8.8 KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor Assigned by Linux
Jul 19, 2026 CVE-2026-63942 High 7.8 parport: Fix race between port and client registration Assigned by Linux
Jul 19, 2026 CVE-2026-63943 Not yet scored Input: xpad - fix out-of-bounds access for Share button Assigned by Linux
Jul 19, 2026 CVE-2026-63944 High 8.8 Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync Assigned by Linux
Jul 19, 2026 CVE-2026-63945 High 7.8 Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock Assigned by Linux
Jul 19, 2026 CVE-2026-63946 High 8.8 Bluetooth: ISO: fix UAF in iso_recv_frame Assigned by Linux
Jul 19, 2026 CVE-2026-63947 High 8.8 Bluetooth: HIDP: fix missing length checks in hidp_input_report() Assigned by Linux
Jul 19, 2026 CVE-2026-63948 Not yet scored Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn Assigned by Linux
Jul 19, 2026 CVE-2026-63949 Not yet scored auxdisplay: line-display: fix OOB read on zero-length message_store() Assigned by Linux
Jul 19, 2026 CVE-2026-63950 High 7.8 mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one Assigned by Linux
Jul 19, 2026 CVE-2026-63951 High 7.8 zram: fix use-after-free in zram_writeback_endio Assigned by Linux
Jul 19, 2026 CVE-2026-63952 High 8.4 memfd: deny writeable mappings when implying SEAL_WRITE Assigned by Linux
Jul 19, 2026 CVE-2026-63953 Not yet scored mm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page Assigned by Linux
Jul 19, 2026 CVE-2026-63954 High 7.8 hpfs: fix a crash if hpfs_map_dnode_bitmap fails Assigned by Linux
Jul 19, 2026
Previous Page 54 of 156 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
