CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 21:20 UTC )
This week: 4,548 CVEs published, 334 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,548 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68160 Critical 9.8 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Assigned by Linux
Aug 10, 2026 CVE-2026-68161 Critical 9.8 sctp: close UDP tunnel sockets during netns teardown Assigned by Linux
Aug 10, 2026 CVE-2026-68162 High 7.8 sctp: avoid auth_enable sysctl UAF during netns teardown Assigned by Linux
Aug 10, 2026 CVE-2026-68163 High 7.8 mm/page_vma_mapped: fix device-private PMD handling Assigned by Linux
Aug 10, 2026 CVE-2026-68164 Not yet scored mm/damon/core: disallow overlapping input ranges for damon_set_regions() Assigned by Linux
Aug 10, 2026 CVE-2026-68165 Not yet scored mm/damon/core: validate ranges in damon_set_regions() Assigned by Linux
Aug 10, 2026 CVE-2026-68166 Not yet scored userfaultfd: prevent registration of special VMAs Assigned by Linux
Aug 10, 2026 CVE-2026-68167 Not yet scored btrfs: do not try compression for data reloc inodes Assigned by Linux
Aug 10, 2026 CVE-2026-68168 Not yet scored afs: Fix afs_edit_dir_remove() to get, not find, block 0 Assigned by Linux
Aug 10, 2026 CVE-2026-68169 Not yet scored mptcp: pm: userspace: fix use-after-free in get_local_id Assigned by Linux
Aug 10, 2026 CVE-2026-68170 Critical 9.8 mptcp: fix stale skb->sk reference on subflow close Assigned by Linux
Aug 10, 2026 CVE-2026-68172 High 7.1 arm64: make huge_ptep_get handled unaligned addresses Assigned by Linux
Aug 10, 2026 CVE-2026-68173 High 7.1 ublk: wait on ublk_dev_ready() instead of ub->completion Assigned by Linux
Aug 10, 2026 CVE-2026-68174 Not yet scored tracing: Fix union collision of module and refcnt for dynamic events Assigned by Linux
Aug 10, 2026 CVE-2026-68175 Not yet scored tracing: Fix resource leak on mmiotrace trace_pipe close Assigned by Linux
Aug 10, 2026 CVE-2026-68176 Not yet scored tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Assigned by Linux
Aug 10, 2026 CVE-2026-68177 High 7.8 tracing: Delay module ref count for "enable_event" trigger Assigned by Linux
Aug 10, 2026 CVE-2026-68178 High 7.8 misc: nsm: pin the module while the device is open Assigned by Linux
Aug 10, 2026 CVE-2026-68179 High 8.4 misc: nsm: only unlock nsm_dev on post-lock error paths Assigned by Linux
Aug 10, 2026 CVE-2026-68180 Not yet scored intel_th: fix MSC output device reference leak Assigned by Linux
Aug 10, 2026 CVE-2026-68181 Not yet scored mei: bus: access mei_device under device_lock on cleanup Assigned by Linux
Aug 10, 2026 CVE-2026-68182 Not yet scored comedi: comedi_parport: deal with premature interrupt Assigned by Linux
Aug 10, 2026 CVE-2026-68183 Not yet scored firmware: stratix10-svc: fix memory leaks and list corruption bugs Assigned by Linux
Aug 10, 2026 CVE-2026-68184 Not yet scored cdrom: fix stack out-of-bounds read in CDROMVOLCTRL Assigned by Linux
Aug 10, 2026 CVE-2026-68185 Not yet scored LoongArch: Move jump_label_init() before parse_early_param() Assigned by Linux
Aug 10, 2026 CVE-2026-68186 Not yet scored binfmt_misc: set have_execfd only once the interpreter is opened Assigned by Linux
Aug 10, 2026 CVE-2026-68187 Not yet scored exec: fix unsigned loop counter wrap in transfer_args_to_stack() Assigned by Linux
Aug 10, 2026 CVE-2026-68188 Not yet scored Bluetooth: RFCOMM: Fix session UAF in set_termios Assigned by Linux
Aug 10, 2026 CVE-2026-68189 High 7.8 Bluetooth: hci_sync: Protect UUID list traversal Assigned by Linux
Aug 10, 2026 CVE-2026-68190 Not yet scored staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() Assigned by Linux
Aug 10, 2026 CVE-2026-68191 Not yet scored wifi: ath12k: fix NULL pointer dereference in rhash table destroy Assigned by Linux
Aug 10, 2026 CVE-2026-68192 High 8.8 wifi: brcmfmac: make release_scratchbuffers idempotent Assigned by Linux
Aug 10, 2026 CVE-2026-68193 Not yet scored wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses Assigned by Linux
Aug 10, 2026 CVE-2026-68194 Not yet scored wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses Assigned by Linux
Aug 10, 2026 CVE-2026-68195 Not yet scored wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses Assigned by Linux
Aug 10, 2026 CVE-2026-68196 High 8.3 wifi: wilc1000: validate assoc response length before subtracting header Assigned by Linux
Aug 10, 2026 CVE-2026-68197 Not yet scored wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Assigned by Linux
Aug 10, 2026 CVE-2026-68198 High 8.8 wifi: ath6kl: fix use-after-free in aggr_reset_state() Assigned by Linux
Aug 10, 2026 CVE-2026-68199 High 8.8 wifi: ath6kl: fix OOB access from firmware ADDBA window size Assigned by Linux
Aug 10, 2026 CVE-2026-68200 High 7.8 ALSA: timer: don't re-enter an instance callback that is still running Assigned by Linux
Aug 10, 2026 CVE-2026-68201 High 7.8 ALSA: timer: drain a slave's callback before its master detaches it Assigned by Linux
Aug 10, 2026 CVE-2026-68202 High 7.8 ALSA: seq: close a re-opened queue timer in the destructor Assigned by Linux
Aug 10, 2026 CVE-2026-68203 Not yet scored media: vivid: fix cleanup bugs in vivid_init() Assigned by Linux
Aug 10, 2026 CVE-2026-68204 High 7.8 media: vivid: check for vb2_is_busy() when toggling caps Assigned by Linux
Aug 10, 2026 CVE-2026-68205 Not yet scored media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Assigned by Linux
Aug 10, 2026 CVE-2026-68206 High 7.8 media: v4l2-ctrls: validate HEVC active reference counts Assigned by Linux
Aug 10, 2026 CVE-2026-68207 Not yet scored media: ti: vpe: unwind v4l2 device registration on probe error Assigned by Linux
Aug 10, 2026 CVE-2026-68208 Not yet scored media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() Assigned by Linux
Aug 10, 2026 CVE-2026-68209 High 7.8 media: sun4i-csi: Return queued buffers on start_streaming() failure Assigned by Linux
Aug 10, 2026 CVE-2026-68210 High 7.8 media: stm32: dcmi: unregister notifier on probe failure Assigned by Linux
Aug 10, 2026
Previous Page 94 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
