CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 24, 2026, 12:30 AM ET )
This week: 4,511 CVEs published, 323 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,511 Show in the list Critical, last 7 days 323 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,756 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64240 Medium 5.5 media: rc: igorplugusb: fix control request setup packet Assigned by Linux
Jul 24, 2026 CVE-2026-64239 High 7.8 mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() Assigned by Linux
Jul 24, 2026 CVE-2026-64238 Medium 5.5 gpio: shared: fix deadlock on shared proxy's parent removal Assigned by Linux
Jul 24, 2026 CVE-2026-64237 High 7.1 Input: elan_i2c - validate firmware size before use Assigned by Linux
Jul 24, 2026 CVE-2026-64236 Medium 5.5 i2c: davinci: fix division by zero on missing clock-frequency Assigned by Linux
Jul 24, 2026 CVE-2026-64235 High 8.1 x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines Assigned by Linux
Jul 24, 2026 CVE-2026-64234 Medium 5.5 tty: serial: pch_uart: add check for dma_alloc_coherent() Assigned by Linux
Jul 24, 2026 CVE-2026-64233 Medium 5.5 usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind Assigned by Linux
Jul 24, 2026 CVE-2026-64232 Critical 9.8 block: recompute nr_integrity_segments in blk_insert_cloned_request Assigned by Linux
Jul 24, 2026 CVE-2026-64231 Medium 5.5 drm/msm/dsi: don't dump registers past the mapped region Assigned by Linux
Jul 24, 2026 CVE-2026-64230 Medium 5.5 regulator: tps65219: fix irq_data.rdev not being assigned Assigned by Linux
Jul 24, 2026 CVE-2026-64229 Medium 5.5 x86/mm: Disable broadcast TLB flush when PCID is disabled Assigned by Linux
Jul 24, 2026 CVE-2026-64228 Medium 5.5 net: ethtool: phy: avoid NULL deref when PHY driver is unbound Assigned by Linux
Jul 24, 2026 CVE-2026-64227 Medium 5.5 ACPI: driver: Check ACPI_COMPANION() against NULL during probe Assigned by Linux
Jul 24, 2026 CVE-2026-64226 High 7.8 sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path Assigned by Linux
Jul 24, 2026 CVE-2026-64225 High 7.8 octeontx2-af: CGX: add bounds check to cgx_speed_mbps index Assigned by Linux
Jul 24, 2026 CVE-2026-64224 High 7.8 octeontx2-pf: fix double free in rvu_rep_rsrc_init() Assigned by Linux
Jul 24, 2026 CVE-2026-64223 High 8.1 wifi: mac80211: consume only present negotiated TTLM maps Assigned by Linux
Jul 24, 2026 CVE-2026-64222 High 7.0 octeontx2-pf: avoid double free of pool->stack on AQ init failure Assigned by Linux
Jul 24, 2026 CVE-2026-64221 High 7.8 spi: ti-qspi: fix use-after-free after DMA setup failure Assigned by Linux
Jul 24, 2026 CVE-2026-64220 Medium 5.5 device property: set fwnode->secondary to NULL in fwnode_init() Assigned by Linux
Jul 24, 2026 CVE-2026-64219 High 7.0 drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async Assigned by Linux
Jul 24, 2026 CVE-2026-64218 High 7.8 batman-adv: bla: fix report_work leak on backbone_gw purge Assigned by Linux
Jul 24, 2026 CVE-2026-64217 High 7.8 netfs: Fix overrun check in netfs_extract_user_iter() Assigned by Linux
Jul 24, 2026 CVE-2026-64216 Critical 9.8 netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() Assigned by Linux
Jul 24, 2026 CVE-2026-64215 Medium 5.5 drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table Assigned by Linux
Jul 24, 2026 CVE-2026-64214 Medium 5.5 powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() Assigned by Linux
Jul 24, 2026 CVE-2026-64213 Medium 5.5 hwmon: (lm90) Add lock protection to lm90_alert Assigned by Linux
Jul 24, 2026 CVE-2026-64212 Medium 5.5 wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it Assigned by Linux
Jul 24, 2026 CVE-2026-64211 Medium 5.5 srcu: Don't queue workqueue handlers to never-online CPUs Assigned by Linux
Jul 24, 2026 CVE-2026-64210 High 7.5 net/mlx5e: xsk: Fix unlocked writing to ICOSQ Assigned by Linux
Jul 24, 2026 CVE-2026-64209 High 7.1 phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config Assigned by Linux
Jul 24, 2026 CVE-2026-64208 High 7.5 crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Assigned by Linux
Jul 24, 2026 CVE-2026-64600 High 7.8 xfs: resample the data fork mapping after cycling ILOCK Assigned by Linux
Jul 23, 2026 CVE-2026-64207 Medium 5.5 net/sched: dualpi2: fix GSO backlog accounting Assigned by Linux
Jul 20, 2026 CVE-2026-64206 High 8.8 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Assigned by Linux
Jul 20, 2026 CVE-2026-64205 Medium 5.5 i2c: i801: fix hardware state machine corruption in error path Assigned by Linux
Jul 20, 2026 CVE-2026-64192 Medium 5.5 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Assigned by Linux
Jul 20, 2026 CVE-2026-64191 High 7.8 i2c: stub: Reject I2C block transfers with invalid length Assigned by Linux
Jul 20, 2026 CVE-2026-64190 Medium 5.5 net: team: fix NULL pointer dereference in team_xmit during mode change Assigned by Linux
Jul 20, 2026 CVE-2026-64189 High 7.8 netfilter: ipset: fix race between dump and ip_set_list resize Assigned by Linux
Jul 20, 2026 CVE-2026-64188 High 7.8 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() Assigned by Linux
Jul 20, 2026 CVE-2026-64187 Medium 5.5 xfs: fail recovery on a committed log item with no regions Assigned by Linux
Jul 20, 2026 CVE-2026-64186 High 7.1 iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs Assigned by Linux
Jul 19, 2026 CVE-2026-64185 Medium 5.5 sysfs: don't remove existing directory on update failure Assigned by Linux
Jul 19, 2026 CVE-2026-64184 Medium 5.5 mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() Assigned by Linux
Jul 19, 2026 CVE-2026-64183 Medium 5.5 efi: Allocate runtime workqueue before ACPI init Assigned by Linux
Jul 19, 2026 CVE-2026-64182 Medium 5.5 drivers/base/memory: fix memory block reference leak in poison accounting Assigned by Linux
Jul 19, 2026 CVE-2026-64181 High 7.8 mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() Assigned by Linux
Jul 19, 2026 CVE-2026-64180 Medium 5.5 mm/memory_hotplug: fix memory block reference leak on remove Assigned by Linux
Jul 19, 2026
Previous Page 101 of 200 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
