CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 10:00 UTC )
This week: 4,590 CVEs published, 307 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,590 Show in the list Critical, last 7 days 307 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2026-63998 Medium 5.5 ethtool: module: call ethnl_ops_complete() on module flash errors Assigned by Linux
Jul 19, 2026 CVE-2026-63999 Medium 5.5 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure Assigned by Linux
Jul 19, 2026 CVE-2026-64000 Critical 9.8 net: hsr: fix potential OOB access in supervision frame handling Assigned by Linux
Jul 19, 2026 CVE-2026-64001 High 7.8 ALSA: pcm: oss: Fix setup list UAF on proc write error Assigned by Linux
Jul 19, 2026 CVE-2026-64002 High 7.8 ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() Assigned by Linux
Jul 19, 2026 CVE-2026-64003 High 7.5 scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues Assigned by Linux
Jul 19, 2026 CVE-2026-64004 High 7.8 net/iucv: fix locking in .getsockopt Assigned by Linux
Jul 19, 2026 CVE-2026-64005 High 7.8 net/smc: Do not re-initialize smc hashtables Assigned by Linux
Jul 19, 2026 CVE-2026-64006 Medium 5.5 netfilter: nf_tables: fix dst corruption in same register operation Assigned by Linux
Jul 19, 2026 CVE-2026-64007 Critical 9.8 netfilter: synproxy: refresh tcphdr after skb_ensure_writable Assigned by Linux
Jul 19, 2026 CVE-2026-64008 High 7.8 accel/rocket: fix UAF via dangling GEM handle in create_bo Assigned by Linux
Jul 19, 2026 CVE-2026-64009 High 7.8 xfrm: Check for underflow in xfrm_state_mtu Assigned by Linux
Jul 19, 2026 CVE-2026-64010 High 8.8 nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() Assigned by Linux
Jul 19, 2026 CVE-2026-64011 High 7.8 nfc: llcp: Fix use-after-free in llcp_sock_release() Assigned by Linux
Jul 19, 2026 CVE-2026-64012 Medium 5.5 net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked Assigned by Linux
Jul 19, 2026 CVE-2026-64013 Medium 5.5 ACPI: button: Fix ACPI GPE handler leak during removal Assigned by Linux
Jul 19, 2026 CVE-2026-64014 High 7.1 Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size Assigned by Linux
Jul 19, 2026 CVE-2026-64015 High 7.8 security/keys: fix missed RCU read section on lookup Assigned by Linux
Jul 19, 2026 CVE-2026-64016 Critical 9.8 ksmbd: fix durable reconnect error path file lifetime Assigned by Linux
Jul 19, 2026 CVE-2026-64017 High 7.8 blk-mq: pop cached request if it is usable Assigned by Linux
Jul 19, 2026 CVE-2026-64018 Critical 9.3 net: mana: validate rx_req_idx to prevent out-of-bounds array access Assigned by Linux
Jul 19, 2026 CVE-2026-64019 Medium 5.5 nvme-pci: fix dma mapping leak on data setup error Assigned by Linux
Jul 19, 2026 CVE-2026-64020 High 7.5 nvme-pci: fix dma_vecs leak on p2p memory Assigned by Linux
Jul 19, 2026 CVE-2026-64021 Medium 5.5 drm/xe/oa: Fix exec_queue leak on width check in stream open Assigned by Linux
Jul 19, 2026 CVE-2026-64022 Medium 5.5 gpio: aggregator: remove the software node when deactivating the aggregator Assigned by Linux
Jul 19, 2026 CVE-2026-64023 High 7.8 gpio: aggregator: fix a potential use-after-free Assigned by Linux
Jul 19, 2026 CVE-2026-64024 Critical 9.4 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Assigned by Linux
Jul 19, 2026 CVE-2026-64025 Critical 9.8 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Assigned by Linux
Jul 19, 2026 CVE-2026-64026 High 7.8 rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg Assigned by Linux
Jul 19, 2026 CVE-2026-64027 High 7.8 net: shaper: rework the VALID marking (again) Assigned by Linux
Jul 19, 2026 CVE-2026-64028 Medium 5.5 tracing: Avoid NULL return from hist_field_name() on truncation Assigned by Linux
Jul 19, 2026 CVE-2026-64029 High 7.8 ALSA: seq: Serialize UMP output teardown with event_input Assigned by Linux
Jul 19, 2026 CVE-2026-64030 High 8.8 wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs Assigned by Linux
Jul 19, 2026 CVE-2026-64031 High 7.8 erofs: fix managed cache race for unaligned extents Assigned by Linux
Jul 19, 2026 CVE-2026-64032 High 7.8 bridge: mcast: Fix a possible use-after-free when removing a bridge port Assigned by Linux
Jul 19, 2026 CVE-2026-64033 Critical 9.8 RDMA/rtrs: Fix use-after-free in path file creation cleanup Assigned by Linux
Jul 19, 2026 CVE-2026-64034 Critical 9.3 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Assigned by Linux
Jul 19, 2026 CVE-2026-64035 Critical 9.8 igc: set tx buffer type for SMD frames Assigned by Linux
Jul 19, 2026 CVE-2026-64036 High 7.8 cgroup/rstat: validate cpu before css_rstat_cpu() access Assigned by Linux
Jul 19, 2026 CVE-2026-64037 Critical 9.8 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Assigned by Linux
Jul 19, 2026 CVE-2026-64038 Medium 4.7 hwmon: (lm90) Stop work before releasing hwmon device Assigned by Linux
Jul 19, 2026 CVE-2026-64039 High 7.7 drm/msm/snapshot: fix dumping of the unaligned regions Assigned by Linux
Jul 19, 2026 CVE-2026-64040 Medium 5.5 cachefiles: Fix error return when vfs_mkdir() fails Assigned by Linux
Jul 19, 2026 CVE-2026-64041 High 7.8 ASoC: codecs: fs210x: fix possible buffer overflow Assigned by Linux
Jul 19, 2026 CVE-2026-64042 High 8.8 vfio/pci: Check BAR resources before exporting a DMABUF Assigned by Linux
Jul 19, 2026 CVE-2026-64043 Medium 4.7 ovpn: fix race between deleting interface and adding new peer Assigned by Linux
Jul 19, 2026 CVE-2026-64044 High 7.8 ovpn: respect peer refcount in CMD_NEW_PEER error path Assigned by Linux
Jul 19, 2026 CVE-2026-64045 High 8.4 ovpn: tcp - use cached peer pointer in ovpn_tcp_close() Assigned by Linux
Jul 19, 2026 CVE-2026-64046 Critical 9.8 net: tls: prevent chain-after-chain in plain text SG Assigned by Linux
Jul 19, 2026 CVE-2026-64047 Critical 9.8 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Assigned by Linux
Jul 19, 2026
Previous Page 84 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
