CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 17:23 UTC )
This week: 5,369 CVEs published, 350 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,369 Show in the list Critical, last 7 days 350 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2024-36971 Known exploited
High 7.8 net: fix __dst_negative_advice() race Assigned by Linux
Jun 10, 2024 CVE-2024-36974 High 7.8 net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP Assigned by Linux
Jun 18, 2024 CVE-2024-36978 High 7.8 net: sched: sch_multiq: fix possible OOB write in multiq_tune() Assigned by Linux
Jun 19, 2024 CVE-2024-38547 Medium 5.5 media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries Assigned by Linux
Jun 19, 2024 CVE-2024-38552 High 7.3 drm/amd/display: Fix potential index out of bounds in color transformation function Assigned by Linux
Jun 19, 2024 CVE-2024-38558 Critical 10.0 net: openvswitch: fix overwriting ct original tuple for ICMPv6 Assigned by Linux
Jun 19, 2024 CVE-2024-38559 Medium 4.4 scsi: qedf: Ensure the copied buf is NUL terminated Assigned by Linux
Jun 19, 2024 CVE-2024-38560 High 7.1 scsi: bfa: Ensure the copied buf is NUL terminated Assigned by Linux
Jun 19, 2024 CVE-2024-38565 Medium 6.5 wifi: ar5523: enable proper endpoint verification Assigned by Linux
Jun 19, 2024 CVE-2024-38567 Medium 5.5 wifi: carl9170: add a proper sanity check for endpoints Assigned by Linux
Jun 19, 2024 CVE-2024-38578 High 7.8 ecryptfs: Fix buffer size for tag 66 packet Assigned by Linux
Jun 19, 2024 CVE-2024-38579 Medium 5.5 crypto: bcm - Fix pointer arithmetic Assigned by Linux
Jun 19, 2024 CVE-2024-38587 High 7.8 speakup: Fix sizeof() vs ARRAY_SIZE() bug Assigned by Linux
Jun 19, 2024 CVE-2024-38589 Medium 5.5 netrom: fix possible dead-lock in nr_rt_ioctl() Assigned by Linux
Jun 19, 2024 CVE-2024-38596 Medium 4.7 af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg Assigned by Linux
Jun 19, 2024 CVE-2024-38598 Medium 5.5 md: fix resync softlockup when bitmap size is less than array size Assigned by Linux
Jun 19, 2024 CVE-2024-38599 High 7.8 jffs2: prevent xattr node from overflowing the eraseblock Assigned by Linux
Jun 19, 2024 CVE-2024-38612 High 7.0 ipv6: sr: fix invalid unregister error path Assigned by Linux
Jun 19, 2024 CVE-2024-38615 Medium 5.5 cpufreq: exit() callback is optional Assigned by Linux
Jun 19, 2024 CVE-2024-38619 Medium 5.5 usb-storage: alauda: Check whether the media is initialized Assigned by Linux
Jun 20, 2024 CVE-2024-33621 Medium 5.5 ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Assigned by Linux
Jun 21, 2024 CVE-2024-36270 Medium 5.5 netfilter: tproxy: bail out if IP has been disabled on the device Assigned by Linux
Jun 21, 2024 CVE-2024-36286 High 7.8 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() Assigned by Linux
Jun 21, 2024 CVE-2024-36484 Medium 5.5 net: relax socket state check at accept time. Assigned by Linux
Jun 21, 2024 CVE-2024-36489 Medium 5.5 tls: fix missing memory barrier in tls_init Assigned by Linux
Jun 21, 2024 CVE-2024-37356 Medium 5.5 tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). Assigned by Linux
Jun 21, 2024 CVE-2024-38381 High 8.8 nfc: nci: Fix uninit-value in nci_rx_work Assigned by Linux
Jun 21, 2024 CVE-2024-38621 High 7.1 media: stk1160: fix bounds checking in stk1160_copy_video() Assigned by Linux
Jun 21, 2024 CVE-2024-38635 High 7.8 soundwire: cadence: fix invalid PDI offset Assigned by Linux
Jun 21, 2024 CVE-2024-38659 High 7.3 enic: Validate length of nl attributes in enic_set_vf_port Assigned by Linux
Jun 21, 2024 CVE-2024-38662 Medium 4.7 bpf: Allow delete from sockmap/sockhash only if update is allowed Assigned by Linux
Jun 21, 2024 CVE-2024-38780 Medium 5.5 dma-buf/sw-sync: don't enable IRQ from sync_print_obj() Assigned by Linux
Jun 21, 2024 CVE-2024-36288 Critical 9.8 SUNRPC: Fix loop termination condition in gss_free_in_token_pages() Assigned by Linux
Jun 21, 2024 CVE-2024-39292 High 7.8 um: Add winch to winch_handlers before registering winch IRQ Assigned by Linux
Jun 24, 2024 CVE-2024-33847 High 7.1 f2fs: compress: don't allow unaligned truncation on released compress inode Assigned by Linux
Jun 24, 2024 CVE-2024-34027 High 7.8 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock Assigned by Linux
Jun 24, 2024 CVE-2024-39468 High 7.5 smb: client: fix deadlock in smb2_find_smb_tcon() Assigned by Linux
Jun 25, 2024 CVE-2024-39469 High 7.1 nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors Assigned by Linux
Jun 25, 2024 CVE-2024-39482 High 7.8 bcache: fix variable length array abuse in btree_iter Assigned by Linux
Jul 5, 2024 CVE-2024-39487 High 7.1 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() Assigned by Linux
Jul 9, 2024 CVE-2024-39489 Medium 5.5 ipv6: sr: fix memleak in seg6_hmac_init_algo Assigned by Linux
Jul 10, 2024 CVE-2024-39493 Medium 5.5 crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Assigned by Linux
Jul 10, 2024 CVE-2024-39502 High 7.8 ionic: fix use after netif_napi_del() Assigned by Linux
Jul 12, 2024 CVE-2024-39503 High 7.8 netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Assigned by Linux
Jul 12, 2024 CVE-2024-39509 Medium 5.5 HID: core: remove unnecessary WARN_ON() in implement() Assigned by Linux
Jul 12, 2024 CVE-2024-40901 High 7.3 scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory Assigned by Linux
Jul 12, 2024 CVE-2024-40905 Medium 4.7 ipv6: fix possible race in __fib6_drop_pcpu_from() Assigned by Linux
Jul 12, 2024 CVE-2024-40912 Medium 5.5 wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() Assigned by Linux
Jul 12, 2024 CVE-2024-40916 Medium 5.5 drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found Assigned by Linux
Jul 12, 2024 CVE-2024-40934 Medium 5.5 HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Assigned by Linux
Jul 12, 2024
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
