CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 05:10 UTC )
This week: 4,897 CVEs published, 348 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,897 Show in the list Critical, last 7 days 348 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64005 High 7.8 net/smc: Do not re-initialize smc hashtables Assigned by Linux
Jul 19, 2026 CVE-2026-64006 Medium 5.5 netfilter: nf_tables: fix dst corruption in same register operation Assigned by Linux
Jul 19, 2026 CVE-2026-64007 Critical 9.8 netfilter: synproxy: refresh tcphdr after skb_ensure_writable Assigned by Linux
Jul 19, 2026 CVE-2026-64008 High 7.8 accel/rocket: fix UAF via dangling GEM handle in create_bo Assigned by Linux
Jul 19, 2026 CVE-2026-64009 High 7.8 xfrm: Check for underflow in xfrm_state_mtu Assigned by Linux
Jul 19, 2026 CVE-2026-64010 High 8.8 nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() Assigned by Linux
Jul 19, 2026 CVE-2026-64011 High 7.8 nfc: llcp: Fix use-after-free in llcp_sock_release() Assigned by Linux
Jul 19, 2026 CVE-2026-64012 Medium 5.5 net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked Assigned by Linux
Jul 19, 2026 CVE-2026-64013 Medium 5.5 ACPI: button: Fix ACPI GPE handler leak during removal Assigned by Linux
Jul 19, 2026 CVE-2026-64014 High 7.1 Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size Assigned by Linux
Jul 19, 2026 CVE-2026-64015 High 7.8 security/keys: fix missed RCU read section on lookup Assigned by Linux
Jul 19, 2026 CVE-2026-64016 Critical 9.8 ksmbd: fix durable reconnect error path file lifetime Assigned by Linux
Jul 19, 2026 CVE-2026-64017 High 7.8 blk-mq: pop cached request if it is usable Assigned by Linux
Jul 19, 2026 CVE-2026-64018 Critical 9.3 net: mana: validate rx_req_idx to prevent out-of-bounds array access Assigned by Linux
Jul 19, 2026 CVE-2026-64019 Medium 5.5 nvme-pci: fix dma mapping leak on data setup error Assigned by Linux
Jul 19, 2026 CVE-2026-64020 High 7.5 nvme-pci: fix dma_vecs leak on p2p memory Assigned by Linux
Jul 19, 2026 CVE-2026-64021 Medium 5.5 drm/xe/oa: Fix exec_queue leak on width check in stream open Assigned by Linux
Jul 19, 2026 CVE-2026-64022 Medium 5.5 gpio: aggregator: remove the software node when deactivating the aggregator Assigned by Linux
Jul 19, 2026 CVE-2026-64023 High 7.8 gpio: aggregator: fix a potential use-after-free Assigned by Linux
Jul 19, 2026 CVE-2026-64024 Critical 9.4 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Assigned by Linux
Jul 19, 2026 CVE-2026-64025 Critical 9.8 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Assigned by Linux
Jul 19, 2026 CVE-2026-64026 High 7.8 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg Assigned by Linux
Jul 19, 2026 CVE-2026-64027 High 7.8 net: shaper: rework the VALID marking (again) Assigned by Linux
Jul 19, 2026 CVE-2026-64028 Medium 5.5 tracing: Avoid NULL return from hist_field_name() on truncation Assigned by Linux
Jul 19, 2026 CVE-2026-64029 High 7.8 ALSA: seq: Serialize UMP output teardown with event_input Assigned by Linux
Jul 19, 2026 CVE-2026-64030 High 8.8 wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs Assigned by Linux
Jul 19, 2026 CVE-2026-64031 High 7.8 erofs: fix managed cache race for unaligned extents Assigned by Linux
Jul 19, 2026 CVE-2026-64032 High 7.8 bridge: mcast: Fix a possible use-after-free when removing a bridge port Assigned by Linux
Jul 19, 2026 CVE-2026-64033 Critical 9.8 RDMA/rtrs: Fix use-after-free in path file creation cleanup Assigned by Linux
Jul 19, 2026 CVE-2026-64034 Critical 9.3 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Assigned by Linux
Jul 19, 2026 CVE-2026-64035 Critical 9.8 igc: set tx buffer type for SMD frames Assigned by Linux
Jul 19, 2026 CVE-2026-64036 High 7.8 cgroup/rstat: validate cpu before css_rstat_cpu() access Assigned by Linux
Jul 19, 2026 CVE-2026-64037 Critical 9.8 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Assigned by Linux
Jul 19, 2026 CVE-2026-64038 Medium 4.7 hwmon: (lm90) Stop work before releasing hwmon device Assigned by Linux
Jul 19, 2026 CVE-2026-64039 High 7.7 drm/msm/snapshot: fix dumping of the unaligned regions Assigned by Linux
Jul 19, 2026 CVE-2026-64040 Medium 5.5 cachefiles: Fix error return when vfs_mkdir() fails Assigned by Linux
Jul 19, 2026 CVE-2026-64041 High 7.8 ASoC: codecs: fs210x: fix possible buffer overflow Assigned by Linux
Jul 19, 2026 CVE-2026-64042 High 8.8 vfio/pci: Check BAR resources before exporting a DMABUF Assigned by Linux
Jul 19, 2026 CVE-2026-64043 Medium 4.7 ovpn: fix race between deleting interface and adding new peer Assigned by Linux
Jul 19, 2026 CVE-2026-64044 High 7.8 ovpn: respect peer refcount in CMD_NEW_PEER error path Assigned by Linux
Jul 19, 2026 CVE-2026-64045 High 8.4 ovpn: tcp - use cached peer pointer in ovpn_tcp_close() Assigned by Linux
Jul 19, 2026 CVE-2026-64046 Critical 9.8 net: tls: prevent chain-after-chain in plain text SG Assigned by Linux
Jul 19, 2026 CVE-2026-64047 Critical 9.8 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Assigned by Linux
Jul 19, 2026 CVE-2026-64048 High 7.5 net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot Assigned by Linux
Jul 19, 2026 CVE-2026-64049 Medium 5.5 drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Assigned by Linux
Jul 19, 2026 CVE-2026-64050 High 7.8 drm/msm/dpu: don't mix devm and drmm functions Assigned by Linux
Jul 19, 2026 CVE-2026-64051 High 7.8 accel/qaic: Add overflow check to remap_pfn_range during mmap Assigned by Linux
Jul 19, 2026 CVE-2026-64052 Medium 5.5 block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() Assigned by Linux
Jul 19, 2026 CVE-2026-64053 High 7.8 block: don't overwrite bip_vcnt in bio_integrity_copy_user() Assigned by Linux
Jul 19, 2026 CVE-2026-64054 High 7.8 net: shaper: reject duplicate leaves in GROUP request Assigned by Linux
Jul 19, 2026
Previous Page 56 of 156 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
