CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 19:40 UTC )
This week: 4,583 CVEs published, 338 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,583 Show in the list Critical, last 7 days 338 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64583 High 7.8 usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown Assigned by Linux
Aug 6, 2026 CVE-2026-64584 High 7.8 usb: gadget: f_midi: cancel pending IN work before freeing the midi object Assigned by Linux
Aug 6, 2026 CVE-2026-64585 High 7.8 can: esd_usb: kill anchored URBs before freeing netdevs Assigned by Linux
Aug 6, 2026 CVE-2026-64586 High 8.8 wifi: brcmfmac: drain bus_reset work on device removal Assigned by Linux
Aug 6, 2026 CVE-2026-64587 High 7.0 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Assigned by Linux
Aug 6, 2026 CVE-2026-64588 High 7.8 fuse-uring: fix data races on ring->ready Assigned by Linux
Aug 6, 2026 CVE-2026-64589 Not yet scored i2c: core: fix NULL-deref on adapter registration failure Assigned by Linux
Aug 6, 2026 CVE-2026-64590 Not yet scored dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning Assigned by Linux
Aug 6, 2026 CVE-2026-64591 Not yet scored iommu/vt-d: Avoid WARNING in sva unbind path Assigned by Linux
Aug 6, 2026 CVE-2026-64592 Not yet scored riscv: mm: Unconditionally sfence.vma for spurious fault Assigned by Linux
Aug 6, 2026 CVE-2026-64593 Not yet scored btrfs: do not trim a device which is not writeable Assigned by Linux
Aug 6, 2026 CVE-2026-64594 Not yet scored usb: gadget: f_fs: initialize reset_work at allocation time Assigned by Linux
Aug 6, 2026 CVE-2026-64595 Not yet scored HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() Assigned by Linux
Aug 6, 2026 CVE-2026-64596 Not yet scored libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() Assigned by Linux
Aug 6, 2026 CVE-2026-64597 Critical 9.8 smb: client: fix double-free in SMB2_close() replay Assigned by Linux
Aug 6, 2026 CVE-2026-64598 High 8.8 smb/client: Fix error code in smb2_aead_req_alloc() Assigned by Linux
Aug 6, 2026 CVE-2026-64599 High 7.8 crypto: amlogic - avoid double cleanup in meson_crypto_probe() Assigned by Linux
Aug 6, 2026 CVE-2026-64601 High 7.8 ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission Assigned by Linux
Aug 6, 2026 CVE-2026-64602 Not yet scored iio: adc: spear: Initialize completion before requesting IRQ Assigned by Linux
Aug 6, 2026 CVE-2026-64603 Not yet scored platform/x86: intel-hid: Protect ACPI notify handler against recursion Assigned by Linux
Aug 6, 2026 CVE-2026-64604 Not yet scored KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Assigned by Linux
Aug 6, 2026 CVE-2026-68480 Not yet scored x86/bugs: Make Safe-RET robust against interrupt injection Assigned by Linux
Aug 6, 2026 CVE-2026-68081 Not yet scored KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Assigned by Linux
Aug 8, 2026 CVE-2026-68082 Critical 9.8 libceph: fix two unsafe bare decodes in decode_lockers() Assigned by Linux
Aug 8, 2026 CVE-2026-68083 Critical 9.1 ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Assigned by Linux
Aug 10, 2026 CVE-2026-68084 Not yet scored staging: vme_user: fix location monitor leak in tsi148 bridge Assigned by Linux
Aug 10, 2026 CVE-2026-68085 High 8.0 Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled Assigned by Linux
Aug 10, 2026 CVE-2026-68086 Not yet scored mm/khugepaged: write all dirty file folios when collapsing Assigned by Linux
Aug 10, 2026 CVE-2026-68087 Not yet scored HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() Assigned by Linux
Aug 10, 2026 CVE-2026-68088 Not yet scored usb: gadget: function: rndis: add length check to response query Assigned by Linux
Aug 10, 2026 CVE-2026-68089 Not yet scored iio: core: fix uninitialized data in debugfs Assigned by Linux
Aug 10, 2026 CVE-2026-68090 Not yet scored debugobjects: Plug race against a concurrent OOM disable Assigned by Linux
Aug 10, 2026 CVE-2026-68091 High 8.8 HID: wacom: stop hardware after post-start probe failures Assigned by Linux
Aug 10, 2026 CVE-2026-68092 Not yet scored time/jiffies: Register jiffies clocksource before usage Assigned by Linux
Aug 10, 2026 CVE-2026-68093 Not yet scored KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug Assigned by Linux
Aug 10, 2026 CVE-2026-68094 Not yet scored sched_ext: Preserve rq tracking across local DSQ dispatch Assigned by Linux
Aug 10, 2026 CVE-2026-68095 Not yet scored fuse-uring: fix race between registration and connection abortion Assigned by Linux
Aug 10, 2026 CVE-2026-68096 High 7.5 audit: fix recursive locking deadlock in audit_dupe_exe() Assigned by Linux
Aug 10, 2026 CVE-2026-68097 High 8.8 ksmbd: validate ACE size against SID sub-authorities Assigned by Linux
Aug 10, 2026 CVE-2026-68098 High 8.8 ksmbd: bound DACL dedup walk to copied ACEs Assigned by Linux
Aug 10, 2026 CVE-2026-68099 Not yet scored ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL Assigned by Linux
Aug 10, 2026 CVE-2026-68100 High 8.1 ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl Assigned by Linux
Aug 10, 2026 CVE-2026-68102 Not yet scored drm/amdgpu: fix aperture mapping leak Assigned by Linux
Aug 10, 2026 CVE-2026-68103 High 7.1 drm/amdgpu: reject mapping a reserved doorbell to a new queue Assigned by Linux
Aug 10, 2026 CVE-2026-68104 High 7.8 drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Assigned by Linux
Aug 10, 2026 CVE-2026-68105 Not yet scored drm/amdgpu: Fix kernel panic during driver load failure Assigned by Linux
Aug 10, 2026 CVE-2026-68106 High 7.8 drm/amdgpu: fix division by zero with invalid uvd dimensions Assigned by Linux
Aug 10, 2026 CVE-2026-68107 High 8.8 drm/amdgpu/vcn4: avoid rereading IB param length Assigned by Linux
Aug 10, 2026 CVE-2026-68108 High 8.8 drm/amdgpu/vce: fix integer overflow in image size Assigned by Linux
Aug 10, 2026 CVE-2026-68109 Not yet scored drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() Assigned by Linux
Aug 10, 2026
Previous Page 92 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
