CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 24, 2026, 1:50 AM ET )
This week: 4,513 CVEs published, 324 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,513 Show in the list Critical, last 7 days 324 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,756 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64179 Medium 5.5 net: wwan: iosm: fix potential memory leaks in ipc_imem_init() Assigned by Linux
Jul 19, 2026 CVE-2026-64178 High 8.8 Bluetooth: bnep: Fix UAF read of dev->name Assigned by Linux
Jul 19, 2026 CVE-2026-64177 Medium 5.5 phonet/pep: disable BH around forwarded sk_receive_skb() Assigned by Linux
Jul 19, 2026 CVE-2026-64176 High 8.1 wifi: iwlwifi: mvm: fix driver-set TX rates on old devices Assigned by Linux
Jul 19, 2026 CVE-2026-64175 High 7.5 wifi: iwlwifi: mld: stop TX during firmware restart Assigned by Linux
Jul 19, 2026 CVE-2026-64174 Medium 5.5 wifi: cfg80211: advance loop vars in cfg80211_merge_profile() Assigned by Linux
Jul 19, 2026 CVE-2026-64173 Medium 5.5 tracing: Do not call map->ops->elt_free() if elt_alloc() fails Assigned by Linux
Jul 19, 2026 CVE-2026-64172 High 7.1 KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Assigned by Linux
Jul 19, 2026 CVE-2026-64171 Medium 5.5 i2c: tegra: fix pm_runtime leak on mutex_lock failure Assigned by Linux
Jul 19, 2026 CVE-2026-64170 Medium 5.5 spi: qup: fix error pointer deref after DMA setup failure Assigned by Linux
Jul 19, 2026 CVE-2026-64169 Medium 5.5 spi: ep93xx: fix error pointer deref after DMA setup failure Assigned by Linux
Jul 19, 2026 CVE-2026-64168 Medium 5.5 spi: sprd: fix error pointer deref after DMA setup failure Assigned by Linux
Jul 19, 2026 CVE-2026-64167 Medium 5.5 kho: skip KHO for crash kernel Assigned by Linux
Jul 19, 2026 CVE-2026-64166 Medium 5.5 firmware: arm_ffa: Check for NULL FF-A ID table while driver registration Assigned by Linux
Jul 19, 2026 CVE-2026-64165 Medium 5.5 ARM: integrator: Fix early initialization Assigned by Linux
Jul 19, 2026 CVE-2026-64164 Medium 5.5 btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() Assigned by Linux
Jul 19, 2026 CVE-2026-64163 Medium 5.5 test_kprobes: clear kprobes between test runs Assigned by Linux
Jul 19, 2026 CVE-2026-64162 Critical 9.8 idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() Assigned by Linux
Jul 19, 2026 CVE-2026-64161 Medium 5.5 net: ti: icssm-prueth: fix eth_ports_node leak in probe Assigned by Linux
Jul 19, 2026 CVE-2026-64160 Critical 9.8 netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Assigned by Linux
Jul 19, 2026 CVE-2026-64159 Medium 5.5 netfs: Fix zeropoint update where i_size > remote_i_size Assigned by Linux
Jul 19, 2026 CVE-2026-64157 Medium 5.5 netfs: Fix partial invalidation of streaming-write folio Assigned by Linux
Jul 19, 2026 CVE-2026-64156 Medium 5.5 netfs, afs: Fix write skipping in dir/link writepages Assigned by Linux
Jul 19, 2026 CVE-2026-64155 Medium 5.5 wifi: ath11k: fix error path leaks in some WMI WOW calls Assigned by Linux
Jul 19, 2026 CVE-2026-64154 Medium 5.5 drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() Assigned by Linux
Jul 19, 2026 CVE-2026-64153 High 8.8 drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Assigned by Linux
Jul 19, 2026 CVE-2026-64152 High 7.8 iommu: Handle unmap error when iommu_debug is enabled Assigned by Linux
Jul 19, 2026 CVE-2026-64151 High 8.4 iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Assigned by Linux
Jul 19, 2026 CVE-2026-64150 Critical 9.8 netfilter: nft_inner: release local_lock before re-enabling softirqs Assigned by Linux
Jul 19, 2026 CVE-2026-64149 Medium 5.5 dma-mapping: move dma_map_resource() sanity check into debug code Assigned by Linux
Jul 19, 2026 CVE-2026-64148 High 7.5 pds_core: fix error handling in pdsc_devcmd_wait Assigned by Linux
Jul 19, 2026 CVE-2026-64147 Medium 5.5 pds_core: fix debugfs_lookup dentry leak and error handling Assigned by Linux
Jul 19, 2026 CVE-2026-64146 Medium 5.5 erofs: fix metabuf leak in inode xattr initialization Assigned by Linux
Jul 19, 2026 CVE-2026-64145 High 7.8 wifi: wilc1000: fix dma_buffer leak on bus acquire failure Assigned by Linux
Jul 19, 2026 CVE-2026-64144 Medium 5.5 Bluetooth: btmtk: fix urb->setup_packet leak in error paths Assigned by Linux
Jul 19, 2026 CVE-2026-64143 Medium 5.5 platform/x86: uniwill-laptop: Do not enable the charging limit even when forced Assigned by Linux
Jul 19, 2026 CVE-2026-64142 Critical 9.8 ksmbd: close durable scavenger races against m_fp_list lookups Assigned by Linux
Jul 19, 2026 CVE-2026-64141 High 7.5 ksmbd: fix null pointer dereference in compare_guid_key() Assigned by Linux
Jul 19, 2026 CVE-2026-64140 High 7.5 ksmbd: fix null pointer dereference in proc_show_files() Assigned by Linux
Jul 19, 2026 CVE-2026-64139 Medium 5.5 ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Assigned by Linux
Jul 19, 2026 CVE-2026-64138 High 8.8 ksmbd: validate SID in parent security descriptor during ACL inheritance Assigned by Linux
Jul 19, 2026 CVE-2026-64137 High 7.8 smb: client: require net admin for CIFS SWN netlink Assigned by Linux
Jul 19, 2026 CVE-2026-64136 Critical 9.8 smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Assigned by Linux
Jul 19, 2026 CVE-2026-64135 Medium 5.5 hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX Assigned by Linux
Jul 19, 2026 CVE-2026-64134 High 7.8 ALSA: pcm: Don't setup bogus iov_iter for silencing Assigned by Linux
Jul 19, 2026 CVE-2026-64133 High 7.8 ALSA: asihpi: Fix potential OOB array access at reading cache Assigned by Linux
Jul 19, 2026 CVE-2026-64132 Critical 9.8 ipv6: ioam: refresh hdr pointer before ioam6_event() Assigned by Linux
Jul 19, 2026 CVE-2026-64131 Medium 5.5 mm/memory: fix spurious warning when unmapping device-private/exclusive pages Assigned by Linux
Jul 19, 2026 CVE-2026-64130 Medium 5.5 mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free Assigned by Linux
Jul 19, 2026 CVE-2026-64129 Medium 5.5 mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page Assigned by Linux
Jul 19, 2026
Previous Page 102 of 200 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
