CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 24, 2026, 3:00 AM ET )
This week: 4,519 CVEs published, 324 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,519 Show in the list Critical, last 7 days 324 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,756 Show in the list Showing CVEs that name the product linux:linux . Show all products
10,102 CVEs, showing 5101 to 5150 Previous Page 103 of 203 Next CVE Severity Title Published CVE-2026-64128 Medium 5.5 Bluetooth: ISO: drop ISO_END frames received without prior ISO_START Assigned by Linux
Jul 19, 2026 CVE-2026-64127 Medium 5.5 Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Assigned by Linux
Jul 19, 2026 CVE-2026-64126 High 7.3 Bluetooth: MGMT: validate Add Extended Advertising Data length Assigned by Linux
Jul 19, 2026 CVE-2026-64125 Critical 9.8 net: bcmgenet: keep RBUF EEE/PM disabled Assigned by Linux
Jul 19, 2026 CVE-2026-64124 High 8.8 net: devmem: reject dma-buf bind with non-page-aligned size or SG length Assigned by Linux
Jul 19, 2026 CVE-2026-64123 High 7.8 net: hsr: defer node table free until after RCU readers Assigned by Linux
Jul 19, 2026 CVE-2026-64122 Critical 9.8 net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover Assigned by Linux
Jul 19, 2026 CVE-2026-64121 High 7.1 net: ifb: report ethtool stats over num_tx_queues Assigned by Linux
Jul 19, 2026 CVE-2026-64120 Medium 5.5 net: ethtool: fix NULL pointer dereference in phy_reply_size Assigned by Linux
Jul 19, 2026 CVE-2026-64119 Medium 5.5 l2tp: use list_del_rcu in l2tp_session_unhash Assigned by Linux
Jul 19, 2026 CVE-2026-64118 High 8.4 qed: fix double free in qed_cxt_tables_alloc() Assigned by Linux
Jul 19, 2026 CVE-2026-64117 High 8.8 wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Assigned by Linux
Jul 19, 2026 CVE-2026-64116 High 7.5 ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Assigned by Linux
Jul 19, 2026 CVE-2026-64115 High 8.8 vsock/vmci: fix UAF when peer resets connection during handshake Assigned by Linux
Jul 19, 2026 CVE-2026-64114 High 7.8 ipv4: raw: reject IP_HDRINCL packets with ihl < 5 Assigned by Linux
Jul 19, 2026 CVE-2026-64113 Critical 9.8 ixgbevf: fix use-after-free in VEPA multicast source pruning Assigned by Linux
Jul 19, 2026 CVE-2026-64112 High 7.8 rbd: eliminate a race in lock_dwork draining on unmap Assigned by Linux
Jul 19, 2026 CVE-2026-64111 High 7.1 lsm: hold cred_guard_mutex for lsm_set_self_attr() Assigned by Linux
Jul 19, 2026 CVE-2026-64110 Medium 5.5 igc: fix potential skb leak in igc_fpe_xmit_smd_frame() Assigned by Linux
Jul 19, 2026 CVE-2026-64109 High 8.8 af_unix: Fix UAF read of tail->len in unix_stream_data_wait() Assigned by Linux
Jul 19, 2026 CVE-2026-64108 High 7.8 cifs: Fix busy dentry used after unmounting Assigned by Linux
Jul 19, 2026 CVE-2026-64107 Medium 5.5 ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() Assigned by Linux
Jul 19, 2026 CVE-2026-64106 Critical 9.0 KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Assigned by Linux
Jul 19, 2026 CVE-2026-64105 Medium 5.5 KVM: arm64: vgic: Free private_irqs when init fails after allocation Assigned by Linux
Jul 19, 2026 CVE-2026-64104 High 8.7 virt: sev-guest: Explicitly leak pages in unknown state Assigned by Linux
Jul 19, 2026 CVE-2026-64103 High 7.8 scsi: isci: Fix use-after-free in device removal path Assigned by Linux
Jul 19, 2026 CVE-2026-64102 Critical 9.8 RDMA/siw: Reject MPA FPDU length underflow before signed receive math Assigned by Linux
Jul 19, 2026 CVE-2026-64101 Medium 5.5 fwctl: pds: Validate RPC input size before parsing Assigned by Linux
Jul 19, 2026 CVE-2026-64100 Medium 5.5 drm/msm: Fix shrinker deadlock Assigned by Linux
Jul 19, 2026 CVE-2026-64099 High 7.8 drm/v3d: Fix use-after-free of CPU job query arrays on error path Assigned by Linux
Jul 19, 2026 CVE-2026-64098 High 7.8 drm/virtio: use uninterruptible resv lock for plane updates Assigned by Linux
Jul 19, 2026 CVE-2026-64097 High 7.8 drm/amd/display: Validate GPIO pin LUT table size before iterating Assigned by Linux
Jul 19, 2026 CVE-2026-64096 High 8.8 batman-adv: mcast: fix use-after-free in orig_node RCU release Assigned by Linux
Jul 19, 2026 CVE-2026-64095 High 7.1 batman-adv: bla: avoid double decrement of bla.num_requests Assigned by Linux
Jul 19, 2026 CVE-2026-64094 Medium 5.5 batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Assigned by Linux
Jul 19, 2026 CVE-2026-64093 High 8.8 batman-adv: tp_meter: directly shut down timer on cleanup Assigned by Linux
Jul 19, 2026 CVE-2026-64092 Medium 5.5 batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown Assigned by Linux
Jul 19, 2026 CVE-2026-64091 Critical 9.8 batman-adv: tt: fix TOCTOU race for reported vlans Assigned by Linux
Jul 19, 2026 CVE-2026-64090 Medium 5.5 batman-adv: tt: avoid empty VLAN responses Assigned by Linux
Jul 19, 2026 CVE-2026-64089 Critical 9.8 batman-adv: tt: fix negative last_changeset_len Assigned by Linux
Jul 19, 2026 CVE-2026-64088 High 8.8 batman-adv: tt: fix negative tt_buff_len Assigned by Linux
Jul 19, 2026 CVE-2026-64087 Medium 5.5 hwmon: (pmbus/adm1266) reject implausible blackbox record_count Assigned by Linux
Jul 19, 2026 CVE-2026-64086 High 7.8 hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer Assigned by Linux
Jul 19, 2026 CVE-2026-64085 High 7.8 hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer Assigned by Linux
Jul 19, 2026 CVE-2026-64084 High 7.8 hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR Assigned by Linux
Jul 19, 2026 CVE-2026-64083 Medium 5.5 hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors Assigned by Linux
Jul 19, 2026 CVE-2026-64082 High 7.8 riscv: Fix register corruption from uninitialized cregs on error Assigned by Linux
Jul 19, 2026 CVE-2026-64081 High 8.4 firmware: arm_ffa: Validate framework notification message layout Assigned by Linux
Jul 19, 2026 CVE-2026-64080 Critical 9.3 firmware: arm_ffa: Snapshot notifier callbacks under lock Assigned by Linux
Jul 19, 2026 CVE-2026-64079 Medium 5.5 netfilter: x_tables: allocate hook ops while under mutex Assigned by Linux
Jul 19, 2026
Previous Page 103 of 203 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
