CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 16:40 UTC )
What this means for you
This week: 4,684 CVEs published, 325 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,684 Show in the list Critical, last 7 days 325 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2026-45965 Medium 5.5 apparmor: fix invalid deref of rawdata when export_binary is unset Assigned by Linux
May 27, 2026 CVE-2026-45966 Medium 5.5 apparmor: fix NULL pointer dereference in __unix_needs_revalidation Assigned by Linux
May 27, 2026 CVE-2026-45967 Medium 5.5 bpf: Return proper address for non-zero offsets in insn array Assigned by Linux
May 27, 2026 CVE-2026-45968 Medium 5.5 cpuidle: Skip governor when only one idle state is available Assigned by Linux
May 27, 2026 CVE-2026-45969 Medium 5.5 HID: playstation: Add missing check for input_ff_create_memless Assigned by Linux
May 27, 2026 CVE-2026-45970 High 7.8 bonding: alb: fix UAF in rlb_arp_recv during bond up/down Assigned by Linux
May 27, 2026 CVE-2026-45971 Medium 5.5 bpf: Limit bpf program signature size Assigned by Linux
May 27, 2026 CVE-2026-45972 Critical 9.8 smb: client: fix potential UAF and double free in smb2_open_file() Assigned by Linux
May 27, 2026 CVE-2026-45973 Medium 5.5 RDMA/mlx5: Fix UMR hang in LAG error state unload Assigned by Linux
May 27, 2026 CVE-2026-45974 Medium 5.5 btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found Assigned by Linux
May 27, 2026 CVE-2026-45975 Medium 5.5 ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd Assigned by Linux
May 27, 2026 CVE-2026-45976 Medium 5.5 drm/amdgpu: Fix memory leak in amdgpu_ras_init() Assigned by Linux
May 27, 2026 CVE-2026-45977 Medium 5.5 fbnic: close fw_log race between users and teardown Assigned by Linux
May 27, 2026 CVE-2026-45978 Medium 5.5 staging: greybus: lights: avoid NULL deref Assigned by Linux
May 27, 2026 CVE-2026-45979 Medium 5.5 drm/amdgpu: clean up the amdgpu_cs_parser_bos Assigned by Linux
May 27, 2026 CVE-2026-45980 High 7.8 accel/amdxdna: Stop job scheduling across aie2_release_resource() Assigned by Linux
May 27, 2026 CVE-2026-45981 Medium 5.5 s390/cio: Fix device lifecycle handling in css_alloc_subchannel() Assigned by Linux
May 27, 2026 CVE-2026-45982 Medium 5.5 ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() Assigned by Linux
May 27, 2026 CVE-2026-45983 Medium 5.5 nfsd: never defer requests during idmap lookup Assigned by Linux
May 27, 2026 CVE-2026-45984 High 7.8 gfs2: Fix use-after-free in iomap inline data write path Assigned by Linux
May 27, 2026 CVE-2026-45985 Medium 5.5 ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O Assigned by Linux
May 27, 2026 CVE-2025-71311 High 8.2 fs/ntfs3: Initialize new folios before use Assigned by Linux
May 27, 2026 CVE-2025-71312 Medium 5.5 fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super() Assigned by Linux
May 27, 2026 CVE-2026-45986 Medium 5.5 crypto: ccree - fix a memory leak in cc_mac_digest() Assigned by Linux
May 27, 2026 CVE-2026-45987 Medium 5.5 KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 Assigned by Linux
May 27, 2026 CVE-2026-45988 Critical 9.8 rxrpc: Fix re-decryption of RESPONSE packets Assigned by Linux
May 27, 2026 CVE-2026-45989 High 7.8 of: unittest: fix use-after-free in testdrv_probe() Assigned by Linux
May 27, 2026 CVE-2026-45990 Medium 5.5 slub: fix data loss and overflow in krealloc() Assigned by Linux
May 27, 2026 CVE-2026-45991 High 7.8 udf: fix partition descriptor append bookkeeping Assigned by Linux
May 27, 2026 CVE-2026-45993 Medium 5.5 LoongArch: Add spectre boundry for syscall dispatch table Assigned by Linux
May 27, 2026 CVE-2026-45994 High 7.1 ibmasm: fix OOB reads in command_file_write due to missing size checks Assigned by Linux
May 27, 2026 CVE-2026-45995 High 7.8 io_uring/zcrx: fix user_struct uaf Assigned by Linux
May 27, 2026 CVE-2026-45996 High 7.8 spi: imx: fix use-after-free on unbind Assigned by Linux
May 27, 2026 CVE-2026-45997 Medium 5.5 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails Assigned by Linux
May 27, 2026 CVE-2026-45998 High 7.0 rxrpc: Fix potential UAF after skb_unshare() failure Assigned by Linux
May 27, 2026 CVE-2026-45999 High 7.1 erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() Assigned by Linux
May 27, 2026 CVE-2026-46000 Medium 5.5 rxrpc: Fix conn-level packet handling to unshare RESPONSE packets Assigned by Linux
May 27, 2026 CVE-2026-46001 High 7.8 hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data() Assigned by Linux
May 27, 2026 CVE-2026-46002 Medium 5.5 ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() Assigned by Linux
May 27, 2026 CVE-2026-46003 Medium 5.5 net: qrtr: ns: Limit the total number of nodes Assigned by Linux
May 27, 2026 CVE-2026-46004 High 7.8 ALSA: caiaq: Handle probe errors properly Assigned by Linux
May 27, 2026 CVE-2026-46005 Medium 5.5 xfs: fix a resource leak in xfs_alloc_buftarg() Assigned by Linux
May 27, 2026 CVE-2026-46006 High 7.8 drm/nouveau: fix u32 overflow in pushbuf reloc bounds check Assigned by Linux
May 27, 2026 CVE-2026-46007 Medium 5.5 hwmon: (powerz) Avoid cacheline sharing for DMA buffer Assigned by Linux
May 27, 2026 CVE-2026-46008 Medium 4.7 mm/damon/core: fix damos_walk() vs kdamond_fn() exit race Assigned by Linux
May 27, 2026 CVE-2026-46009 Medium 5.5 PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown Assigned by Linux
May 27, 2026 CVE-2026-46010 High 8.1 rxrpc: Fix error handling in rxgk_extract_token() Assigned by Linux
May 27, 2026 CVE-2026-46011 High 7.8 media: mtk-jpeg: fix use-after-free in release path due to uncancelled work Assigned by Linux
May 27, 2026 CVE-2026-46012 Medium 5.5 rxrpc: Fix memory leaks in rxkad_verify_response() Assigned by Linux
May 27, 2026 CVE-2026-46013 Medium 5.5 mm/memfd_luo: fix physical address conversion in put_folios cleanup Assigned by Linux
May 27, 2026
Previous Page 66 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.