CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 11:20 PM ET )
This week: 4,526 CVEs published, 324 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,526 Show in the list Critical, last 7 days 324 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64290 Medium 5.5 iommufd: Break the loop on failure in iommufd_fault_fops_read() Assigned by Linux
Jul 25, 2026 CVE-2026-64289 Medium 5.5 iommufd: Set upper bounds on cache invalidation entry_num and entry_len Assigned by Linux
Jul 25, 2026 CVE-2026-64288 Medium 5.5 KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB Assigned by Linux
Jul 25, 2026 CVE-2026-64287 High 8.2 KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU Assigned by Linux
Jul 25, 2026 CVE-2026-64286 High 8.2 KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU Assigned by Linux
Jul 25, 2026 CVE-2026-64285 Medium 5.5 KVM: SEV: Pin source page for write when adding CPUID data for SNP guest Assigned by Linux
Jul 25, 2026 CVE-2026-64284 High 7.1 KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Assigned by Linux
Jul 25, 2026 CVE-2026-64283 High 7.0 KVM: guest_memfd: Treat memslot binding offset+size as unsigned values Assigned by Linux
Jul 25, 2026 CVE-2026-64282 Medium 4.7 KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier Assigned by Linux
Jul 25, 2026 CVE-2026-64281 High 7.5 svcrdma: wake sq waiters when the transport closes Assigned by Linux
Jul 25, 2026 CVE-2026-64280 High 8.8 fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() Assigned by Linux
Jul 25, 2026 CVE-2026-64279 High 7.8 i2c: core: fix adapter deregistration race Assigned by Linux
Jul 25, 2026 CVE-2026-64278 Medium 5.5 i2c: imx-lpi2c: mark I2C adapter when hardware is powered down Assigned by Linux
Jul 25, 2026 CVE-2026-64277 High 7.8 Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count Assigned by Linux
Jul 25, 2026 CVE-2026-64276 High 7.8 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count Assigned by Linux
Jul 25, 2026 CVE-2026-64275 Medium 5.5 Input: elan_i2c - prevent division by zero and arithmetic underflow Assigned by Linux
Jul 25, 2026 CVE-2026-64274 High 7.8 Input: goodix - clamp the device-reported contact count Assigned by Linux
Jul 25, 2026 CVE-2026-64273 High 7.8 Input: iforce - bound the device-reported force-feedback effect index Assigned by Linux
Jul 25, 2026 CVE-2026-64272 High 7.8 Input: mms114 - fix touch indexing for MMS134S and MMS136 Assigned by Linux
Jul 25, 2026 CVE-2026-64271 High 7.8 Input: touchwin - reset the packet index on every complete packet Assigned by Linux
Jul 25, 2026 CVE-2026-64270 High 7.8 Input: mms114 - reject an oversized device packet size Assigned by Linux
Jul 25, 2026 CVE-2026-64269 Critical 9.1 RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg Assigned by Linux
Jul 25, 2026 CVE-2026-64268 Critical 9.8 RDMA/siw: bound Read Response placement to the RREAD length Assigned by Linux
Jul 25, 2026 CVE-2026-64267 Medium 5.5 fuse: avoid 32-bit prune notification count wrap Assigned by Linux
Jul 25, 2026 CVE-2026-64266 High 7.8 fuse: re-lock request before returning from fuse_ref_folio() Assigned by Linux
Jul 25, 2026 CVE-2026-64265 High 7.8 fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req Assigned by Linux
Jul 25, 2026 CVE-2026-64264 Medium 5.5 fuse-uring: fix EFAULT clobber in fuse_uring_commit Assigned by Linux
Jul 25, 2026 CVE-2026-64263 Medium 5.5 fuse-uring: fix moving cancelled entry to ent_in_userspace list Assigned by Linux
Jul 25, 2026 CVE-2026-64262 Medium 5.5 fuse-uring: end fuse_req on io-uring cancel task work Assigned by Linux
Jul 25, 2026 CVE-2026-64261 High 7.8 fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues Assigned by Linux
Jul 25, 2026 CVE-2026-64260 High 7.8 fuse-uring: Avoid queue->stopped races and set/read that value under lock Assigned by Linux
Jul 25, 2026 CVE-2026-64259 High 7.8 fuse-uring: make a fuse_req on SQE commit only findable after memcpy Assigned by Linux
Jul 25, 2026 CVE-2026-64258 Medium 5.5 fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref Assigned by Linux
Jul 25, 2026 CVE-2026-64257 Critical 9.1 smb: client: reject overlapping data areas in SMB2 responses Assigned by Linux
Jul 25, 2026 CVE-2026-64256 Medium 5.5 xfs: don't wrap around quota ids in dqiterate Assigned by Linux
Jul 25, 2026 CVE-2026-64255 High 8.8 wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Assigned by Linux
Jul 24, 2026 CVE-2026-64254 Medium 5.5 NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR Assigned by Linux
Jul 24, 2026 CVE-2026-64253 Medium 5.5 kernel/fork: clear PF_BLOCK_TS in copy_process() Assigned by Linux
Jul 24, 2026 CVE-2026-64252 Medium 5.5 MIPS: DEC: Prevent initial console buffer from landing in XKPHYS Assigned by Linux
Jul 24, 2026 CVE-2026-64251 High 7.8 pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next() Assigned by Linux
Jul 24, 2026 CVE-2026-64250 Medium 5.5 LoongArch: Report dying CPU to RCU in stop_this_cpu() Assigned by Linux
Jul 24, 2026 CVE-2026-64249 High 7.8 fpga: region: fix use-after-free in child_regions_with_firmware() Assigned by Linux
Jul 24, 2026 CVE-2026-64248 Medium 5.5 MIPS: smp: report dying CPU to RCU in stop_this_cpu() Assigned by Linux
Jul 24, 2026 CVE-2026-64247 High 8.4 KVM: x86: hyper-v: Bound the bank index when querying sparse banks Assigned by Linux
Jul 24, 2026 CVE-2026-64246 High 7.8 power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() Assigned by Linux
Jul 24, 2026 CVE-2026-64245 High 7.8 fbdev: modedb: fix a possible UAF in fb_find_mode() Assigned by Linux
Jul 24, 2026 CVE-2026-64244 Medium 5.5 drivers/base/memory: set mem->altmap after successful device registration Assigned by Linux
Jul 24, 2026 CVE-2026-64243 High 7.1 ASoC: codecs: simple-mux: Fix enum control bounds check Assigned by Linux
Jul 24, 2026 CVE-2026-64242 High 7.8 usb: gadget: net2280: Fix double free in probe error path Assigned by Linux
Jul 24, 2026 CVE-2026-64241 Medium 5.5 gpio: rockchip: teardown bugs and resource leaks Assigned by Linux
Jul 24, 2026
Previous Page 100 of 200 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
