CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 20:30 UTC )
This week: 4,585 CVEs published, 337 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,585 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68110 Not yet scored drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() Assigned by Linux
Aug 10, 2026 CVE-2026-68111 Not yet scored drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() Assigned by Linux
Aug 10, 2026 CVE-2026-68112 Not yet scored drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() Assigned by Linux
Aug 10, 2026 CVE-2026-68113 Not yet scored drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() Assigned by Linux
Aug 10, 2026 CVE-2026-68114 Not yet scored drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() Assigned by Linux
Aug 10, 2026 CVE-2026-68115 Not yet scored drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() Assigned by Linux
Aug 10, 2026 CVE-2026-68116 High 7.9 vxlan: mdb: Fix source list corruption on a failed replace Assigned by Linux
Aug 10, 2026 CVE-2026-68117 Critical 9.8 tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Assigned by Linux
Aug 10, 2026 CVE-2026-68118 High 8.2 tcp: challenge ACK for non-exact RST in SYN-RECEIVED Assigned by Linux
Aug 10, 2026 CVE-2026-68119 High 7.5 tcp: initialize standalone TCP-AO response padding Assigned by Linux
Aug 10, 2026 CVE-2026-68120 High 7.5 rtase: Workaround for TX hang caused by hardware packet parsing Assigned by Linux
Aug 10, 2026 CVE-2026-68121 High 7.8 pppoe: reload header pointer after dev_hard_header() Assigned by Linux
Aug 10, 2026 CVE-2026-68122 Not yet scored ovpn: fix peer refcount leak in TCP error paths Assigned by Linux
Aug 10, 2026 CVE-2026-68123 Critical 9.8 openvswitch: fix GSO userspace truncation underflow Assigned by Linux
Aug 10, 2026 CVE-2026-68124 Critical 9.6 mctp: serial: handle zero-length frames to prevent rx buffer overflow Assigned by Linux
Aug 10, 2026 CVE-2026-68125 High 8.8 mac802154: llsec: reject frames shorter than the authentication tag Assigned by Linux
Aug 10, 2026 CVE-2026-68126 Not yet scored mac802154: hold an interface reference across the scan worker Assigned by Linux
Aug 10, 2026 CVE-2026-68127 Critical 9.8 ila: reload IPv6 header after pskb_may_pull in checksum adjust Assigned by Linux
Aug 10, 2026 CVE-2026-68128 High 8.8 ice: reject out-of-range ptype in ice_parser_profile_init Assigned by Linux
Aug 10, 2026 CVE-2026-68129 High 7.5 gve: fix Rx queue stall on alloc failure Assigned by Linux
Aug 10, 2026 CVE-2026-68130 Not yet scored ksmbd: defer destroy_previous_session() until after NTLM authentication Assigned by Linux
Aug 10, 2026 CVE-2026-68131 High 7.5 rbd: Reset positive result codes to zero in object map update path Assigned by Linux
Aug 10, 2026 CVE-2026-68132 Not yet scored super: fix emergency thaw deadlock on frozen block devices Assigned by Linux
Aug 10, 2026 CVE-2026-68133 Not yet scored ice: fix PTP Call Trace during PTP release Assigned by Linux
Aug 10, 2026 CVE-2026-68134 High 7.3 ptp: ptp_s390: Add missing facility check Assigned by Linux
Aug 10, 2026 CVE-2026-68135 Not yet scored net: hip04: fix RX buffer leak on build_skb failure Assigned by Linux
Aug 10, 2026 CVE-2026-68136 Critical 9.8 net: gro: fix double aggregation of flush-marked skbs Assigned by Linux
Aug 10, 2026 CVE-2026-68137 Critical 9.8 net/x25: fix use-after-free in x25_kill_by_neigh() Assigned by Linux
Aug 10, 2026 CVE-2026-68138 High 7.8 net/sched: serialize qdisc_rtab_list against concurrent get/put Assigned by Linux
Aug 10, 2026 CVE-2026-68139 Not yet scored net/mlx5e: Use sender devcom for MPV master-up Assigned by Linux
Aug 10, 2026 CVE-2026-68140 High 8.8 net/iucv: fix use-after-free of a severed iucv_path Assigned by Linux
Aug 10, 2026 CVE-2026-68141 High 7.5 net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() Assigned by Linux
Aug 10, 2026 CVE-2026-68142 High 8.8 geneve: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 10, 2026 CVE-2026-68143 High 7.8 net: slip: serialize receive against buffer reallocation Assigned by Linux
Aug 10, 2026 CVE-2026-68144 Critical 9.8 phonet: pep: fix use-after-free in pep_get_sb() Assigned by Linux
Aug 10, 2026 CVE-2026-68145 High 7.8 iomap: fix out-of-bounds bitmap_set() with zero-length range Assigned by Linux
Aug 10, 2026 CVE-2026-68146 Not yet scored ftrace: Add global mutex to serialize trace_parser access Assigned by Linux
Aug 10, 2026 CVE-2026-68147 High 7.8 fscrypt: Avoid dynamic allocation in fscrypt_get_devices() Assigned by Linux
Aug 10, 2026 CVE-2026-68148 High 7.8 fscrypt: Add missing superblock check in find_or_insert_direct_key() Assigned by Linux
Aug 10, 2026 CVE-2026-68149 High 8.4 fs: preserve ACL_DONT_CACHE state in forget_cached_acl() Assigned by Linux
Aug 10, 2026 CVE-2026-68150 Not yet scored fs/super: fix emergency thaw double-unlock of s_umount Assigned by Linux
Aug 10, 2026 CVE-2026-68151 Not yet scored binfmt_elf_fdpic: only honour the first PT_INTERP Assigned by Linux
Aug 10, 2026 CVE-2026-68152 High 7.8 amt: fix use-after-free in AMT delayed works Assigned by Linux
Aug 10, 2026 CVE-2026-68153 High 7.8 libceph: remove debugfs files before client teardown Assigned by Linux
Aug 10, 2026 CVE-2026-68154 Critical 9.8 libceph: reject zero bucket types in crush_decode Assigned by Linux
Aug 10, 2026 CVE-2026-68155 High 7.5 libceph: Reject monmaps advertising zero monitors Assigned by Linux
Aug 10, 2026 CVE-2026-68156 Critical 9.8 libceph: refresh auth->authorizer_buf{,_len} after authorizer update Assigned by Linux
Aug 10, 2026 CVE-2026-68157 High 7.5 libceph: guard missing CRUSH type name lookup Assigned by Linux
Aug 10, 2026 CVE-2026-68158 Critical 9.8 libceph: Fix multiplication overflow in decode_new_up_state_weight() Assigned by Linux
Aug 10, 2026 CVE-2026-68159 Critical 9.8 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE Assigned by Linux
Aug 10, 2026
Previous Page 93 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
