CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 00:00 UTC )
This week: 4,558 CVEs published, 315 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,558 Show in the list Critical, last 7 days 315 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2026-46315 Medium 5.5 io_uring/waitid: clear waitid info before copying it to userspace Assigned by Linux
Jun 9, 2026 CVE-2026-46316 Critical 9.3 KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry Assigned by Linux
Jun 9, 2026 CVE-2026-46317 High 8.8 KVM: arm64: Reassign nested_mmus array behind mmu_lock Assigned by Linux
Jun 9, 2026 CVE-2026-46318 Medium 5.5 Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" Assigned by Linux
Jun 9, 2026 CVE-2026-46319 High 7.8 net/sched: act_ct: Only release RCU read lock after ct_ft Assigned by Linux
Jun 9, 2026 CVE-2026-46320 High 7.4 tap: free page on error paths in tap_get_user_xdp() Assigned by Linux
Jun 9, 2026 CVE-2026-46321 High 7.1 tun: free page on short-frame rejection in tun_xdp_one() Assigned by Linux
Jun 9, 2026 CVE-2026-46322 High 7.1 tun: free page on build_skb failure in tun_xdp_one() Assigned by Linux
Jun 9, 2026 CVE-2026-46323 High 7.8 net: gro: don't merge zcopy skbs Assigned by Linux
Jun 9, 2026 CVE-2026-46324 High 7.8 netfilter: nf_tables: use list_del_rcu for netlink hooks Assigned by Linux
Jun 9, 2026 CVE-2026-46325 Critical 9.8 RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE Assigned by Linux
Jun 9, 2026 CVE-2026-46326 High 8.4 iio: pressure: mprls0025pa: fix spi_transfer struct initialisation Assigned by Linux
Jun 9, 2026 CVE-2026-46327 High 7.8 dm: fix unlocked test for dm_suspended_md Assigned by Linux
Jun 9, 2026 CVE-2026-46328 High 7.3 apparmor: fix rlimit for posix cpu timers Assigned by Linux
Jun 9, 2026 CVE-2026-46329 Medium 5.5 erofs: handle end of filesystem properly for file-backed mounts Assigned by Linux
Jun 9, 2026 CVE-2026-46330 High 7.8 Revert "net/smc: Introduce TCP ULP support" Assigned by Linux
Jun 9, 2026 CVE-2026-46332 High 8.0 greybus: gb-beagleplay: bound bootloader receive buffering Assigned by Linux
Jun 9, 2026 CVE-2026-52904 Medium 5.5 drm/nouveau: fix nvkm_device leak on aperture removal failure Assigned by Linux
Jun 9, 2026 CVE-2026-52905 Medium 5.5 mm/damon/core: disallow non-power of two min_region_sz on damon_start() Assigned by Linux
Jun 9, 2026 CVE-2026-52906 High 7.7 9p: fix access mode flags being ORed instead of replaced Assigned by Linux
Jun 9, 2026 CVE-2026-52907 High 7.8 media: rockchip: rkcif: fix off by one bugs Assigned by Linux
Jun 9, 2026 CVE-2026-46331 High 7.8 net/sched: fix pedit partial COW leading to page cache corruption Assigned by Linux
Jun 16, 2026 CVE-2026-52908 High 7.8 RDMA: During rereg_mr ensure that REREG_ACCESS is compatible Assigned by Linux
Jun 19, 2026 CVE-2026-52909 High 7.8 ip6_vti: set netns_immutable on the fallback device. Assigned by Linux
Jun 19, 2026 CVE-2026-52910 High 7.8 bpf: Free reuseport cBPF prog after RCU grace period. Assigned by Linux
Jun 19, 2026 CVE-2026-52911 High 8.8 ksmbd: scope conn->binding slowpath to bound sessions only Assigned by Linux
Jun 21, 2026 CVE-2026-52912 High 7.8 netfilter: nf_queue: hold bridge skb->dev while queued Assigned by Linux
Jun 24, 2026 CVE-2026-52913 Medium 5.5 batman-adv: v: stop OGMv2 on disabled interface Assigned by Linux
Jun 24, 2026 CVE-2026-52914 Critical 9.8 batman-adv: fix fragment reassembly length accounting Assigned by Linux
Jun 24, 2026 CVE-2026-52915 High 7.1 netfilter: ip6t_hbh: reject oversized option lists Assigned by Linux
Jun 24, 2026 CVE-2026-52916 Medium 5.5 batman-adv: frag: disallow unicast fragment in fragment Assigned by Linux
Jun 24, 2026 CVE-2026-52917 High 7.1 sctp: diag: reject stale associations in dump_one path Assigned by Linux
Jun 24, 2026 CVE-2026-52918 High 8.8 Bluetooth: serialize accept_q access Assigned by Linux
Jun 24, 2026 CVE-2026-52919 High 7.8 batman-adv: fix tp_meter counter underflow during shutdown Assigned by Linux
Jun 24, 2026 CVE-2026-52920 High 8.3 netfilter: xt_policy: fix strict mode inbound policy matching Assigned by Linux
Jun 24, 2026 CVE-2026-52921 Medium 5.5 netfilter: ipset: stop hash:* range iteration at end Assigned by Linux
Jun 24, 2026 CVE-2026-52922 High 7.5 batman-adv: dat: handle forward allocation error Assigned by Linux
Jun 24, 2026 CVE-2026-52923 High 7.8 ipc: limit next_id allocation to the valid ID range Assigned by Linux
Jun 24, 2026 CVE-2026-52924 Critical 9.8 sctp: purge outqueue on stale COOKIE-ECHO handling Assigned by Linux
Jun 24, 2026 CVE-2026-52925 Medium 5.5 vrf: Fix a potential NPD when removing a port from a VRF Assigned by Linux
Jun 24, 2026 CVE-2026-52926 Medium 5.5 batman-adv: clear current gateway during teardown Assigned by Linux
Jun 24, 2026 CVE-2026-52927 High 7.8 netfilter: ebtables: fix OOB read in compat_mtw_from_user Assigned by Linux
Jun 24, 2026 CVE-2026-52928 Medium 5.5 af_unix: Reject SIOCATMARK on non-stream sockets Assigned by Linux
Jun 24, 2026 CVE-2026-52929 High 7.5 sctp: stream: fully roll back denied add-stream state Assigned by Linux
Jun 24, 2026 CVE-2026-52930 Medium 5.5 ipc/shm: serialize orphan cleanup with shm_nattch updates Assigned by Linux
Jun 24, 2026 CVE-2026-52931 Critical 9.8 batman-adv: tp_meter: avoid use of uninit sender vars Assigned by Linux
Jun 24, 2026 CVE-2026-52932 High 7.5 xfrm: ipcomp: Free destination pages on acomp errors Assigned by Linux
Jun 24, 2026 CVE-2026-52933 High 7.8 io_uring/poll: fix signed comparison in io_poll_get_ownership() Assigned by Linux
Jun 24, 2026 CVE-2026-52934 High 8.8 batman-adv: tvlv: reject oversized TVLV packets Assigned by Linux
Jun 24, 2026 CVE-2026-52935 High 7.8 xfrm: espintcp: do not reuse an in-progress partial send Assigned by Linux
Jun 24, 2026
Previous Page 73 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
