CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 17:40 UTC )
What this means for you
This week: 4,544 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,544 Show in the list Critical, last 7 days 305 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64509 Not yet scored rust: block: fix GenDisk cleanup paths Assigned by Linux
Jul 25, 2026 CVE-2026-64510 High 7.0 ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Assigned by Linux
Jul 25, 2026 CVE-2026-64511 Not yet scored ACPI: NFIT: core: Fix possible NULL pointer dereference Assigned by Linux
Jul 25, 2026 CVE-2026-64512 Not yet scored ACPI: CPPC: Suppress UBSAN warning caused by field misuse Assigned by Linux
Jul 25, 2026 CVE-2026-64513 Not yet scored KVM: x86: Unconditionally recompute CR8 intercept on PPR update Assigned by Linux
Jul 25, 2026 CVE-2026-64514 Not yet scored userfaultfd: gate must_wait writability check on pte_present() Assigned by Linux
Jul 25, 2026 CVE-2026-64515 High 8.3 wifi: mac80211: fix MLE defragmentation Assigned by Linux
Jul 25, 2026 CVE-2026-64516 High 8.8 drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets Assigned by Linux
Jul 25, 2026 CVE-2026-64517 Not yet scored drm/xe/gsc: Fix double-free of managed BO in error path Assigned by Linux
Jul 25, 2026 CVE-2026-64518 Not yet scored tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). Assigned by Linux
Jul 25, 2026 CVE-2026-64519 Not yet scored NFSD: Fix infinite loop in layout state revocation Assigned by Linux
Jul 25, 2026 CVE-2026-64520 High 8.4 firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies Assigned by Linux
Jul 25, 2026 CVE-2026-64521 Not yet scored pinctrl: meson: amlogic-a4: fix deadlock issue Assigned by Linux
Jul 25, 2026 CVE-2026-64522 High 8.8 net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA Assigned by Linux
Jul 25, 2026 CVE-2026-64523 Critical 9.8 net/handshake: Take a long-lived file reference at submit Assigned by Linux
Jul 25, 2026 CVE-2026-64524 High 7.7 drm/hyperv: validate resolution_count and fix WIN8 fallback Assigned by Linux
Jul 25, 2026 CVE-2026-64525 Not yet scored xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit Assigned by Linux
Jul 25, 2026 CVE-2026-64526 Not yet scored ethtool: tsconfig: fix missing ethnl_ops_complete() Assigned by Linux
Jul 25, 2026 CVE-2026-64527 Not yet scored drm/hyperv: validate VMBus packet size in receive callback Assigned by Linux
Jul 25, 2026 CVE-2026-64528 Not yet scored tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Assigned by Linux
Jul 25, 2026 CVE-2026-64529 High 7.8 crypto: qat - remove unused character device and IOCTLs Assigned by Linux
Jul 25, 2026 CVE-2026-64530 Critical 9.8 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Assigned by Linux
Jul 26, 2026 CVE-2024-14040 High 7.8 net: nexthop: Increase weight to u16 Assigned by Linux
Jul 26, 2026 CVE-2026-64531 High 7.8 net: openvswitch: reject oversized nested action attrs Assigned by Linux
Jul 27, 2026 CVE-2026-64532 High 7.8 fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Assigned by Linux
Jul 27, 2026 CVE-2026-64533 High 7.8 fs/ntfs3: validate lcns_follow in log_replay conversion Assigned by Linux
Jul 27, 2026 CVE-2026-64534 Critical 9.8 nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Assigned by Linux
Jul 27, 2026 CVE-2026-64535 Critical 9.8 nvmet-tcp: Fix potential UAF when ddgst mismatch Assigned by Linux
Jul 27, 2026 CVE-2026-64536 High 8.1 staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop Assigned by Linux
Jul 27, 2026 CVE-2026-17523 High 7.8 can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet Assigned by redhat
Jul 27, 2026 CVE-2026-64537 Not yet scored bridge: cfm: reject invalid CCM interval at configuration time Assigned by Linux
Jul 27, 2026 CVE-2026-64538 Not yet scored ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Assigned by Linux
Jul 27, 2026 CVE-2026-64539 High 7.8 Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Assigned by Linux
Jul 27, 2026 CVE-2026-64540 High 8.1 usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Assigned by Linux
Jul 27, 2026 CVE-2026-64541 Critical 9.8 net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Assigned by Linux
Jul 27, 2026 CVE-2026-64542 Not yet scored ipv6: ndisc: fix NULL deref in accept_untracked_na() Assigned by Linux
Jul 27, 2026 CVE-2026-64543 High 7.8 tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Assigned by Linux
Jul 27, 2026 CVE-2026-64544 Not yet scored crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Assigned by Linux
Jul 27, 2026 CVE-2026-64545 High 7.5 net, bpf: check master for NULL in xdp_master_redirect() Assigned by Linux
Jul 27, 2026 CVE-2026-64546 High 7.1 drm/edid: fix OOB read in drm_parse_tiled_block() Assigned by Linux
Jul 27, 2026 CVE-2026-64547 High 8.1 net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Assigned by Linux
Jul 27, 2026 CVE-2026-64548 High 8.4 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Assigned by Linux
Jul 27, 2026 CVE-2026-64549 Not yet scored Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Assigned by Linux
Jul 27, 2026 CVE-2026-64550 High 7.3 net: qualcomm: rmnet: validate MAP frame length before ingress parsing Assigned by Linux
Jul 27, 2026 CVE-2026-64551 Critical 9.1 sctp: validate STALE_COOKIE cause length before reading staleness Assigned by Linux
Jul 27, 2026 CVE-2026-64552 High 8.4 virtio-net: fix len check in receive_big() Assigned by Linux
Jul 27, 2026 CVE-2026-64553 Not yet scored net: psample: fix info leak in PSAMPLE_ATTR_DATA Assigned by Linux
Jul 27, 2026 CVE-2026-64554 High 8.8 netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Assigned by Linux
Jul 27, 2026 CVE-2026-64555 High 8.8 KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Assigned by Linux
Jul 27, 2026 CVE-2026-64556 High 7.8 perf/core: Detach event groups during remove_on_exec Assigned by Linux
Jul 29, 2026
Previous Page 90 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.