CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 23:50 UTC )
This week: 4,502 CVEs published, 337 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,502 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68310 Not yet scored wifi: mt76: mt7915: guard HE capability lookups Assigned by Linux
Aug 10, 2026 CVE-2026-68311 Not yet scored wifi: mt76: mt7925: guard link STA in decap offload Assigned by Linux
Aug 10, 2026 CVE-2026-68312 Not yet scored cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Assigned by Linux
Aug 10, 2026 CVE-2026-68313 Not yet scored tipc: fix infinite loop in __tipc_nl_compat_dumpit Assigned by Linux
Aug 10, 2026 CVE-2026-68314 High 7.8 net: mctp i3c: clean up notifier and buses if driver register fails Assigned by Linux
Aug 10, 2026 CVE-2026-68315 High 7.5 sctp: validate stream count in sctp_process_strreset_inreq() Assigned by Linux
Aug 10, 2026 CVE-2026-68316 High 7.8 accel: ethosu: Fix element size accounting for cmd stream validation Assigned by Linux
Aug 10, 2026 CVE-2026-68317 Not yet scored pds_core: fix auxiliary device add/del races Assigned by Linux
Aug 10, 2026 CVE-2026-68318 Not yet scored pds_core: fix use-after-free on workqueue during remove Assigned by Linux
Aug 10, 2026 CVE-2026-68319 Not yet scored pds_core: fix deadlock between reset thread and remove Assigned by Linux
Aug 10, 2026 CVE-2026-68320 High 7.3 sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Assigned by Linux
Aug 10, 2026 CVE-2026-68321 Not yet scored net: txgbe: fix FDIR filter leak on remove Assigned by Linux
Aug 10, 2026 CVE-2026-68322 Not yet scored rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Assigned by Linux
Aug 10, 2026 CVE-2026-68323 High 7.8 tipc: serialize udp bearer replicast list updates Assigned by Linux
Aug 10, 2026 CVE-2026-68324 Not yet scored iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Assigned by Linux
Aug 10, 2026 CVE-2026-68325 Not yet scored iommu/amd: Bound the early ACPI HID map Assigned by Linux
Aug 10, 2026 CVE-2026-68326 High 8.8 wifi: mwifiex: bound uAP association event IEs to the event buffer Assigned by Linux
Aug 10, 2026 CVE-2026-68327 Not yet scored wan: wanxl: Only reset hardware after BAR mapping Assigned by Linux
Aug 10, 2026 CVE-2026-68328 Not yet scored nfp: Check resource mutex allocation Assigned by Linux
Aug 10, 2026 CVE-2026-68329 High 8.8 iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Assigned by Linux
Aug 10, 2026 CVE-2026-68330 High 7.8 net: airoha: Fix DMA direction for NPU mailbox buffer Assigned by Linux
Aug 10, 2026 CVE-2026-68331 Not yet scored dpaa2-eth: put MAC endpoint device on disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68332 Not yet scored net: airoha: Fix potential use-after-free in airoha_ppe_deinit() Assigned by Linux
Aug 10, 2026 CVE-2026-68333 Not yet scored dpaa2-switch: put MAC endpoint device on disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68334 Not yet scored rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() Assigned by Linux
Aug 10, 2026 CVE-2026-68335 High 7.8 rds: drop incoming messages that cross network namespace boundaries Assigned by Linux
Aug 10, 2026 CVE-2026-68336 Not yet scored bonding: fix devconf_all NULL dereference when IPv6 is disabled Assigned by Linux
Aug 10, 2026 CVE-2026-68337 Not yet scored bpf: Reject redirect helpers without a bpf_net_context Assigned by Linux
Aug 10, 2026 CVE-2026-68338 High 7.8 net/packet: avoid fanout hook re-registration after unregister Assigned by Linux
Aug 10, 2026 CVE-2026-68339 Not yet scored Bluetooth: btusb: validate Realtek vendor event length Assigned by Linux
Aug 10, 2026 CVE-2026-68340 High 7.7 hwmon: occ: validate poll response sensor blocks Assigned by Linux
Aug 10, 2026 CVE-2026-68341 High 8.8 ovpn: fix use after free in unlock_ovpn() Assigned by Linux
Aug 10, 2026 CVE-2026-68342 Not yet scored ovpn: avoid putting unrelated P2P peer on socket release Assigned by Linux
Aug 10, 2026 CVE-2026-68343 Critical 9.1 smb: client: validate DFS referral PathConsumed Assigned by Linux
Aug 10, 2026 CVE-2026-68344 Not yet scored usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68345 Not yet scored arm_mpam: guard MBWU state before adding it to garbage Assigned by Linux
Aug 10, 2026 CVE-2026-68346 Not yet scored ALSA: hda: cs35l41: validate and free ACPI mute object Assigned by Linux
Aug 10, 2026 CVE-2026-68347 Not yet scored iommu/amd: Fix IRQ unsafe locking in gdom allocation Assigned by Linux
Aug 10, 2026 CVE-2026-68348 High 7.1 ASoC: tas2781: bound firmware description string parsing Assigned by Linux
Aug 10, 2026 CVE-2026-68349 Not yet scored wifi: carl9170: fix buffer overflow in rx_stream failover path Assigned by Linux
Aug 10, 2026 CVE-2026-68350 Not yet scored wifi: carl9170: fix OOB read from off-by-two in TX status handler Assigned by Linux
Aug 10, 2026 CVE-2026-68351 Not yet scored wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Assigned by Linux
Aug 10, 2026 CVE-2026-68352 High 8.3 wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Assigned by Linux
Aug 10, 2026 CVE-2026-68353 High 8.1 wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Assigned by Linux
Aug 10, 2026 CVE-2026-68354 High 8.8 firewire: net: Fix fragmented datagram reassembly Assigned by Linux
Aug 10, 2026 CVE-2026-68355 Not yet scored wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Assigned by Linux
Aug 10, 2026 CVE-2026-68356 Not yet scored watchdog: airoha: Prevent division by zero when clock frequency is zero Assigned by Linux
Aug 10, 2026 CVE-2026-68357 Not yet scored watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Assigned by Linux
Aug 10, 2026 CVE-2026-68358 Not yet scored hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Assigned by Linux
Aug 10, 2026 CVE-2026-68359 Not yet scored hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Assigned by Linux
Aug 10, 2026
Previous Page 97 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
