CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 05:40 UTC )
This week: 4,643 CVEs published, 316 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,643 Show in the list Critical, last 7 days 316 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2026-53187 High 7.1 RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc Assigned by Linux
Jun 25, 2026 CVE-2026-53188 High 8.8 RDMA/core: Validate the passed in fops for ib_get_ucaps() Assigned by Linux
Jun 25, 2026 CVE-2026-53189 High 7.8 mm/huge_memory: update file PMD counter before folio_put() Assigned by Linux
Jun 25, 2026 CVE-2026-53190 Medium 5.5 drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() Assigned by Linux
Jun 25, 2026 CVE-2026-53191 High 7.8 io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries Assigned by Linux
Jun 25, 2026 CVE-2026-53192 High 7.8 ALSA: timer: Fix UAF at snd_timer_user_params() Assigned by Linux
Jun 25, 2026 CVE-2026-53193 High 7.8 ALSA: timer: Forcibly close timer instances at closing Assigned by Linux
Jun 25, 2026 CVE-2026-53194 High 7.8 USB: serial: kl5kusb105: fix bulk-out buffer overflow Assigned by Linux
Jun 25, 2026 CVE-2026-53195 High 7.8 USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() Assigned by Linux
Jun 25, 2026 CVE-2026-53196 Medium 6.8 USB: serial: io_ti: fix heap overflow in get_manuf_info() Assigned by Linux
Jun 25, 2026 CVE-2026-53197 Medium 5.5 xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() Assigned by Linux
Jun 25, 2026 CVE-2026-53198 High 8.8 ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL Assigned by Linux
Jun 25, 2026 CVE-2026-53199 High 7.5 hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf Assigned by Linux
Jun 25, 2026 CVE-2026-53200 High 8.8 KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX Assigned by Linux
Jun 25, 2026 CVE-2026-53201 High 7.8 Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" Assigned by Linux
Jun 25, 2026 CVE-2026-53202 High 7.8 accel/ivpu: Fix signed integer truncation in IPC receive Assigned by Linux
Jun 25, 2026 CVE-2026-53203 High 7.1 accel/ivpu: Add buffer overflow check in MS get_info_ioctl Assigned by Linux
Jun 25, 2026 CVE-2026-53204 Medium 5.5 firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe Assigned by Linux
Jun 25, 2026 CVE-2026-53205 High 7.1 accel/ivpu: Add bounds checks for firmware log indices Assigned by Linux
Jun 25, 2026 CVE-2026-53206 Medium 5.5 accel/ivpu: Add bounds check for firmware runtime memory Assigned by Linux
Jun 25, 2026 CVE-2026-53207 Medium 5.5 mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison Assigned by Linux
Jun 25, 2026 CVE-2026-53208 Medium 5.5 Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig Assigned by Linux
Jun 25, 2026 CVE-2026-53209 High 7.8 Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend Assigned by Linux
Jun 25, 2026 CVE-2026-53210 Medium 5.5 tee: shm: fix shm leak in register_shm_helper() Assigned by Linux
Jun 25, 2026 CVE-2026-53211 Medium 5.5 netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register Assigned by Linux
Jun 25, 2026 CVE-2026-53212 High 7.8 netfilter: nft_tunnel: fix use-after-free on object destroy Assigned by Linux
Jun 25, 2026 CVE-2026-53213 Medium 5.5 drm/vc4: fix krealloc() memory leak Assigned by Linux
Jun 25, 2026 CVE-2026-53214 Medium 5.5 ipv6: Fix a potential NPD in cleanup_prefix_route() Assigned by Linux
Jun 25, 2026 CVE-2026-53215 Critical 9.8 net: mvpp2: refill RX buffers before XDP or skb use Assigned by Linux
Jun 25, 2026 CVE-2026-53216 Critical 9.8 net: mvpp2: limit XDP frame size to the RX buffer Assigned by Linux
Jun 25, 2026 CVE-2026-53217 High 8.6 net: mvpp2: sync RX data at the hardware packet offset Assigned by Linux
Jun 25, 2026 CVE-2026-53218 Medium 5.5 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag Assigned by Linux
Jun 25, 2026 CVE-2026-53219 Medium 5.5 netfilter: x_tables: avoid leaking percpu counter pointers Assigned by Linux
Jun 25, 2026 CVE-2026-53220 Medium 5.5 netfilter: revalidate bridge ports Assigned by Linux
Jun 25, 2026 CVE-2026-53221 Critical 9.8 ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Assigned by Linux
Jun 25, 2026 CVE-2026-53222 Medium 5.5 ptp: ocp: fix resource freeing order Assigned by Linux
Jun 25, 2026 CVE-2026-53223 High 7.1 net: guard timestamp cmsgs to real error queue skbs Assigned by Linux
Jun 25, 2026 CVE-2026-53224 Critical 9.1 sctp: validate embedded INIT chunk and address list lengths in cookie Assigned by Linux
Jun 25, 2026 CVE-2026-53225 Critical 9.1 sctp: fix uninit-value in __sctp_rcv_asconf_lookup() Assigned by Linux
Jun 25, 2026 CVE-2026-53226 Medium 5.5 gpio: rockchip: fix generic IRQ chip leak on remove Assigned by Linux
Jun 25, 2026 CVE-2026-53227 Medium 5.5 net: openvswitch: fix possible kfree_skb of ERR_PTR Assigned by Linux
Jun 25, 2026 CVE-2026-53228 Critical 9.8 ipv6: sit: reload inner IPv6 header after GSO offloads Assigned by Linux
Jun 25, 2026 CVE-2026-53229 High 7.5 net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure Assigned by Linux
Jun 25, 2026 CVE-2026-53230 High 8.7 net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list Assigned by Linux
Jun 25, 2026 CVE-2026-53231 Medium 5.5 net: phy: don't try to setup PHY-driven SFP cages when using genphy Assigned by Linux
Jun 25, 2026 CVE-2026-53232 High 8.8 net: phy: clean the sfp upstream if phy probing fails Assigned by Linux
Jun 25, 2026 CVE-2026-53233 High 7.8 netdev: fix double-free in netdev_nl_bind_rx_doit() Assigned by Linux
Jun 25, 2026 CVE-2026-53234 High 7.8 net: ibm: emac: Fix use-after-free during device removal Assigned by Linux
Jun 25, 2026 CVE-2026-53235 High 7.5 net: add pskb_may_pull() to skb_gro_receive_list() Assigned by Linux
Jun 25, 2026 CVE-2026-53236 Medium 5.5 tcp: restrict SO_ATTACH_FILTER to priv users Assigned by Linux
Jun 25, 2026
Previous Page 79 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
