CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 16:50 UTC )
This week: 4,561 CVEs published, 306 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,561 Show in the list Critical, last 7 days 306 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2026-64352 High 7.8 bpf: Allow LPM map access from sleepable BPF programs Assigned by Linux
Jul 25, 2026 CVE-2026-64353 Medium 5.5 bpf: Keep dynamic inner array lookups nullable Assigned by Linux
Jul 25, 2026 CVE-2026-64354 High 7.8 bpf: Validate BTF repeated field counts before expansion Assigned by Linux
Jul 25, 2026 CVE-2026-64355 Critical 9.8 bpf: Reject fragmented frames in devmap Assigned by Linux
Jul 25, 2026 CVE-2026-64356 Medium 5.5 xfs: fix memory leak in xfs_dqinode_metadir_create() Assigned by Linux
Jul 25, 2026 CVE-2026-64357 Medium 5.5 xfs: fix exchmaps reservation limit check Assigned by Linux
Jul 25, 2026 CVE-2026-64358 Medium 5.5 media: mtk-jpeg: cancel workqueue on release for supported platforms only Assigned by Linux
Jul 25, 2026 CVE-2026-64359 Medium 5.5 nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Assigned by Linux
Jul 25, 2026 CVE-2026-64360 Medium 5.5 hfs/hfsplus: zero-initialize buffer in hfs_bnode_read Assigned by Linux
Jul 25, 2026 CVE-2026-64361 High 7.8 hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Assigned by Linux
Jul 25, 2026 CVE-2026-64362 High 7.8 HID: lg-g15: cancel pending work on remove to fix a use-after-free Assigned by Linux
Jul 25, 2026 CVE-2026-64363 High 7.8 HID: appleir: fix UAF on pending key_up_timer in remove() Assigned by Linux
Jul 25, 2026 CVE-2026-64364 High 8.8 HID: multitouch: fix out-of-bounds bit access on mt_io_flags Assigned by Linux
Jul 25, 2026 CVE-2026-64365 High 7.8 HID: letsketch: fix UAF on inrange_timer at driver unbind Assigned by Linux
Jul 25, 2026 CVE-2026-64366 High 8.8 HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert Assigned by Linux
Jul 25, 2026 CVE-2026-64367 High 7.8 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow Assigned by Linux
Jul 25, 2026 CVE-2026-64368 High 8.1 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled Assigned by Linux
Jul 25, 2026 CVE-2026-64369 Medium 5.5 s390: Revert support for DCACHE_WORD_ACCESS Assigned by Linux
Jul 25, 2026 CVE-2026-64370 Medium 5.5 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path Assigned by Linux
Jul 25, 2026 CVE-2026-64371 Medium 5.5 proc: protect ptrace_may_access() with exec_update_lock (part 1) Assigned by Linux
Jul 25, 2026 CVE-2026-64372 High 7.8 cpufreq: pcc: fix use-after-free and double free in _OSC evaluation Assigned by Linux
Jul 25, 2026 CVE-2026-64373 Medium 4.7 cpufreq: Fix hotplug-suspend race during reboot Assigned by Linux
Jul 25, 2026 CVE-2026-64374 High 7.5 sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT Assigned by Linux
Jul 25, 2026 CVE-2026-64375 High 7.8 proc: protect ptrace_may_access() with exec_update_lock (FD links) Assigned by Linux
Jul 25, 2026 CVE-2026-64376 Medium 5.5 firmware_loader: fix device reference leak in firmware_upload_register() Assigned by Linux
Jul 25, 2026 CVE-2026-64377 High 7.8 cpufreq: qcom-cpufreq-hw: Fix possible double free Assigned by Linux
Jul 25, 2026 CVE-2026-64378 High 7.8 writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() Assigned by Linux
Jul 25, 2026 CVE-2026-64379 High 7.1 smb: client: mask server-provided mode to 07777 in modefromsid Assigned by Linux
Jul 25, 2026 CVE-2026-64380 High 8.2 smb: client: harden POSIX SID length parsing Assigned by Linux
Jul 25, 2026 CVE-2026-64381 High 7.8 smb: client: Fix next buffer leak in receive_encrypted_standard() Assigned by Linux
Jul 25, 2026 CVE-2026-64382 High 8.8 smb: client: fix double-free in SMB2_open() replay Assigned by Linux
Jul 25, 2026 CVE-2026-64383 Critical 9.8 smb: client: fix double-free in SMB2_flush() replay Assigned by Linux
Jul 25, 2026 CVE-2026-64384 Critical 9.8 smb: client: fix change notify replay double-free Assigned by Linux
Jul 25, 2026 CVE-2026-64385 Critical 9.8 smb: client: fix double-free in SMB2_ioctl() replay Assigned by Linux
Jul 25, 2026 CVE-2026-64386 Critical 9.8 smb: client: fix query_info() replay double-free Assigned by Linux
Jul 25, 2026 CVE-2026-64387 Critical 9.8 smb: client: fix query directory replay double-free Assigned by Linux
Jul 25, 2026 CVE-2026-64388 High 7.8 smb/client: fix chown/chgrp with SMB3 POSIX Extensions Assigned by Linux
Jul 25, 2026 CVE-2026-64389 High 8.2 ksmbd: validate NTLMv2 response before updating session key Assigned by Linux
Jul 25, 2026 CVE-2026-64390 High 8.8 ksmbd: track the connection owning a byte-range lock Assigned by Linux
Jul 25, 2026 CVE-2026-64391 Critical 9.8 ksmbd: use opener credentials for ADS I/O Assigned by Linux
Jul 25, 2026 CVE-2026-64392 Critical 9.1 ksmbd: use opener credentials for delete-on-close Assigned by Linux
Jul 25, 2026 CVE-2026-64393 Critical 9.1 ksmbd: run set info with opener credentials Assigned by Linux
Jul 25, 2026 CVE-2026-64394 High 8.8 ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY Assigned by Linux
Jul 25, 2026 CVE-2026-64395 High 7.5 ksmbd: require source read access for duplicate extents Assigned by Linux
Jul 25, 2026 CVE-2026-64396 High 8.8 ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation Assigned by Linux
Jul 25, 2026 CVE-2026-64397 Critical 9.8 ksmbd: serialize QUERY_DIRECTORY requests per file Assigned by Linux
Jul 25, 2026 CVE-2026-64398 High 8.1 ksmbd: add a permission check for FSCTL_SET_ZERO_DATA Assigned by Linux
Jul 25, 2026 CVE-2026-64399 Critical 9.8 ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Assigned by Linux
Jul 25, 2026 CVE-2026-64400 High 8.6 ksmbd: prevent path traversal bypass by restricting caseless retry Assigned by Linux
Jul 25, 2026 CVE-2026-64401 High 7.8 smb: client: resolve SWN tcon from live registrations Assigned by Linux
Jul 25, 2026
Previous Page 91 of 94 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
