CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 10:10 UTC )
This week: 4,876 CVEs published, 345 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,876 Show in the list Critical, last 7 days 345 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64025 Critical 9.8 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Assigned by Linux
Jul 19, 2026 CVE-2026-64026 High 7.8 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg Assigned by Linux
Jul 19, 2026 CVE-2026-64027 High 7.8 net: shaper: rework the VALID marking (again) Assigned by Linux
Jul 19, 2026 CVE-2026-64028 Medium 5.5 tracing: Avoid NULL return from hist_field_name() on truncation Assigned by Linux
Jul 19, 2026 CVE-2026-64029 High 7.8 ALSA: seq: Serialize UMP output teardown with event_input Assigned by Linux
Jul 19, 2026 CVE-2026-64030 High 8.8 wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs Assigned by Linux
Jul 19, 2026 CVE-2026-64031 High 7.8 erofs: fix managed cache race for unaligned extents Assigned by Linux
Jul 19, 2026 CVE-2026-64032 High 7.8 bridge: mcast: Fix a possible use-after-free when removing a bridge port Assigned by Linux
Jul 19, 2026 CVE-2026-64033 Critical 9.8 RDMA/rtrs: Fix use-after-free in path file creation cleanup Assigned by Linux
Jul 19, 2026 CVE-2026-64034 Critical 9.3 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Assigned by Linux
Jul 19, 2026 CVE-2026-64035 Critical 9.8 igc: set tx buffer type for SMD frames Assigned by Linux
Jul 19, 2026 CVE-2026-64036 High 7.8 cgroup/rstat: validate cpu before css_rstat_cpu() access Assigned by Linux
Jul 19, 2026 CVE-2026-64037 Critical 9.8 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Assigned by Linux
Jul 19, 2026 CVE-2026-64038 Medium 4.7 hwmon: (lm90) Stop work before releasing hwmon device Assigned by Linux
Jul 19, 2026 CVE-2026-64039 High 7.7 drm/msm/snapshot: fix dumping of the unaligned regions Assigned by Linux
Jul 19, 2026 CVE-2026-64040 Medium 5.5 cachefiles: Fix error return when vfs_mkdir() fails Assigned by Linux
Jul 19, 2026 CVE-2026-64041 High 7.8 ASoC: codecs: fs210x: fix possible buffer overflow Assigned by Linux
Jul 19, 2026 CVE-2026-64042 High 8.8 vfio/pci: Check BAR resources before exporting a DMABUF Assigned by Linux
Jul 19, 2026 CVE-2026-64043 Medium 4.7 ovpn: fix race between deleting interface and adding new peer Assigned by Linux
Jul 19, 2026 CVE-2026-64044 High 7.8 ovpn: respect peer refcount in CMD_NEW_PEER error path Assigned by Linux
Jul 19, 2026 CVE-2026-64045 High 8.4 ovpn: tcp - use cached peer pointer in ovpn_tcp_close() Assigned by Linux
Jul 19, 2026 CVE-2026-64046 Critical 9.8 net: tls: prevent chain-after-chain in plain text SG Assigned by Linux
Jul 19, 2026 CVE-2026-64047 Critical 9.8 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Assigned by Linux
Jul 19, 2026 CVE-2026-64048 High 7.5 net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot Assigned by Linux
Jul 19, 2026 CVE-2026-64049 Medium 5.5 drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Assigned by Linux
Jul 19, 2026 CVE-2026-64050 High 7.8 drm/msm/dpu: don't mix devm and drmm functions Assigned by Linux
Jul 19, 2026 CVE-2026-64051 High 7.8 accel/qaic: Add overflow check to remap_pfn_range during mmap Assigned by Linux
Jul 19, 2026 CVE-2026-64052 Medium 5.5 block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() Assigned by Linux
Jul 19, 2026 CVE-2026-64053 High 7.8 block: don't overwrite bip_vcnt in bio_integrity_copy_user() Assigned by Linux
Jul 19, 2026 CVE-2026-64054 High 7.8 net: shaper: reject duplicate leaves in GROUP request Assigned by Linux
Jul 19, 2026 CVE-2026-64055 Critical 9.8 net: ethernet: cortina: Carry over frag counter Assigned by Linux
Jul 19, 2026 CVE-2026-64056 Critical 9.8 net: ethernet: cortina: Make RX SKB per-port Assigned by Linux
Jul 19, 2026 CVE-2026-64057 High 7.8 afs: Fix the locking used by afs_get_link() Assigned by Linux
Jul 19, 2026 CVE-2026-64058 High 7.8 netfs: Fix netfs_read_folio() to wait on writeback Assigned by Linux
Jul 19, 2026 CVE-2026-64059 Medium 5.5 netfs: Fix folio->private handling in netfs_perform_write() Assigned by Linux
Jul 19, 2026 CVE-2026-64060 Medium 5.5 netfs: Fix leak of request in netfs_write_begin() error handling Assigned by Linux
Jul 19, 2026 CVE-2026-64061 Critical 9.8 netfs: Fix early put of sink folio in netfs_read_gaps() Assigned by Linux
Jul 19, 2026 CVE-2026-64062 Medium 5.5 netfs: Fix potential deadlock in write-through mode Assigned by Linux
Jul 19, 2026 CVE-2026-64063 High 7.8 netfs: Fix streaming write being overwritten Assigned by Linux
Jul 19, 2026 CVE-2026-64064 Medium 5.5 netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone Assigned by Linux
Jul 19, 2026 CVE-2026-64065 Medium 5.5 netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call Assigned by Linux
Jul 19, 2026 CVE-2026-64066 Critical 9.8 netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Assigned by Linux
Jul 19, 2026 CVE-2026-64067 Critical 9.8 netfs: Fix missing barriers when accessing stream->subrequests locklessly Assigned by Linux
Jul 19, 2026 CVE-2026-64068 Critical 9.8 netfs: Fix missing locking around retry adding new subreqs Assigned by Linux
Jul 19, 2026 CVE-2026-64069 Critical 9.8 netfs: Fix cancellation of a DIO and single read subrequests Assigned by Linux
Jul 19, 2026 CVE-2026-64070 Medium 5.5 powerpc/hv-gpci: fix preempt count leak in sysfs show paths Assigned by Linux
Jul 19, 2026 CVE-2026-64071 High 7.8 nvme-pci: fix use-after-free in nvme_free_host_mem() Assigned by Linux
Jul 19, 2026 CVE-2026-64072 Medium 5.5 nvme: fix bio leak on mapping failure Assigned by Linux
Jul 19, 2026 CVE-2026-64073 High 7.8 irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT Assigned by Linux
Jul 19, 2026 CVE-2026-64074 High 7.8 fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap Assigned by Linux
Jul 19, 2026
Previous Page 62 of 161 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
