CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 01:30 UTC )
This week: 4,473 CVEs published, 335 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,473 Show in the list Critical, last 7 days 335 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68403 Not yet scored wifi: brcmfmac: initialize SDIO data work before cleanup Assigned by Linux
Aug 10, 2026 CVE-2026-68404 High 7.8 wifi: cfg80211: use wiphy work for socket owner autodisconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68405 Not yet scored wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock Assigned by Linux
Aug 10, 2026 CVE-2026-68406 Not yet scored wifi: cfg80211: validate PMSR FTM preamble range Assigned by Linux
Aug 10, 2026 CVE-2026-68407 Not yet scored wifi: nl80211: free RNR data on MBSSID mismatch Assigned by Linux
Aug 10, 2026 CVE-2026-68408 Not yet scored wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock Assigned by Linux
Aug 10, 2026 CVE-2026-68409 High 8.8 wifi: mac80211: defer link RX stats percpu free to RCU Assigned by Linux
Aug 10, 2026 CVE-2026-68410 Not yet scored wifi: libertas: fix memory leak in helper_firmware_cb() Assigned by Linux
Aug 10, 2026 CVE-2026-68411 Not yet scored wifi: mac80211_hwsim: clamp virtio RX length before skb_put Assigned by Linux
Aug 10, 2026 CVE-2026-68412 Not yet scored wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() Assigned by Linux
Aug 10, 2026 CVE-2026-68413 Not yet scored wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() Assigned by Linux
Aug 10, 2026 CVE-2026-68414 High 7.5 wifi: cfg80211: cancel sched scan results work on unregister Assigned by Linux
Aug 10, 2026 CVE-2026-68415 High 7.8 xfrm: clear mode callbacks after failed mode setup Assigned by Linux
Aug 10, 2026 CVE-2026-68416 Not yet scored mtd: fix double free and WARN_ON in add_mtd_device() error paths Assigned by Linux
Aug 10, 2026 CVE-2026-68417 High 7.8 RDMA/siw: publish QP after initialization Assigned by Linux
Aug 10, 2026 CVE-2026-68418 Not yet scored RDMA/irdma: Prevent user-triggered null deref on QP create Assigned by Linux
Aug 10, 2026 CVE-2026-68419 High 7.8 RDMA/irdma: Prevent rereg_mr for non-mem regions Assigned by Linux
Aug 10, 2026 CVE-2026-68420 High 7.1 xfrm: reject optional IPTFS templates in outbound policies Assigned by Linux
Aug 10, 2026 CVE-2026-68421 Not yet scored sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() Assigned by Linux
Aug 10, 2026 CVE-2026-68422 Not yet scored btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() Assigned by Linux
Aug 10, 2026 CVE-2026-68423 Not yet scored mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() Assigned by Linux
Aug 10, 2026 CVE-2026-68424 Not yet scored mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins() Assigned by Linux
Aug 10, 2026 CVE-2026-68425 High 7.1 IB/mad: Drop unmatched RMPP responses before reassembly Assigned by Linux
Aug 10, 2026 CVE-2026-68426 Critical 9.8 xfrm: fix stale skb->prev after async crypto steals a GSO segment Assigned by Linux
Aug 10, 2026 CVE-2026-68427 High 7.8 gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings Assigned by Linux
Aug 10, 2026 CVE-2026-68428 Not yet scored KVM: x86/mmu: Fix use-after-free on vendor module reload Assigned by Linux
Aug 10, 2026 CVE-2026-68429 Not yet scored drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() Assigned by Linux
Aug 12, 2026 CVE-2026-68430 Not yet scored drm/amdgpu/gfx8: drop unecessary BUG_ON() Assigned by Linux
Aug 12, 2026 CVE-2026-68431 Critical 9.1 ksmbd: validate minimum PDU size for transform requests Assigned by Linux
Aug 12, 2026 CVE-2026-68432 High 8.8 vxlan: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 12, 2026 CVE-2026-68433 High 8.6 libceph: bound get_version reply decode to front len Assigned by Linux
Aug 12, 2026 CVE-2026-68434 Not yet scored serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Assigned by Linux
Aug 12, 2026 CVE-2026-68435 Not yet scored LoongArch: Fix address space mismatch in kexec command line lookup Assigned by Linux
Aug 12, 2026 CVE-2026-68436 Not yet scored drm/amd/display: use kvzalloc to allocate struct dc Assigned by Linux
Aug 12, 2026 CVE-2026-68437 Not yet scored drm/imagination: Fit paired fragment job in the correct CCCB Assigned by Linux
Aug 12, 2026 CVE-2026-68438 Not yet scored smp: Make CSD lock acquisition atomic for debug mode Assigned by Linux
Aug 12, 2026 CVE-2026-68439 Not yet scored wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() Assigned by Linux
Aug 12, 2026 CVE-2026-68440 High 7.8 net: txgbe: fix heap overflow when reading module EEPROM Assigned by Linux
Aug 12, 2026 CVE-2026-68441 Not yet scored net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains Assigned by Linux
Aug 12, 2026 CVE-2026-68442 High 7.8 btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps Assigned by Linux
Aug 12, 2026 CVE-2026-68443 Not yet scored hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Assigned by Linux
Aug 12, 2026 CVE-2026-68444 Not yet scored firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() Assigned by Linux
Aug 12, 2026 CVE-2026-68445 High 7.8 drm/vc4: Prevent shader BO mappings from becoming writable Assigned by Linux
Aug 12, 2026 CVE-2026-68446 High 7.8 drm/vmwgfx: Validate vmw_surface_metadata::array_size Assigned by Linux
Aug 12, 2026 CVE-2026-68447 High 7.1 drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size Assigned by Linux
Aug 12, 2026 CVE-2026-68448 Not yet scored ovl: check access to copy_file_range source with src mounter creds Assigned by Linux
Aug 12, 2026 CVE-2026-68449 Not yet scored ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning Assigned by Linux
Aug 12, 2026 CVE-2026-68450 Not yet scored btrfs: free mapping node on duplicate reloc root insert Assigned by Linux
Aug 12, 2026 CVE-2026-68451 High 7.8 s390/zcrypt: Validate length for CCA ECC private key requests Assigned by Linux
Aug 13, 2026 CVE-2026-68452 High 7.8 s390/zcrypt: Validate length for CCA AES cipher key requests Assigned by Linux
Aug 13, 2026
Previous Page 99 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
