CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 20:30 UTC )
This week: 5,368 CVEs published, 343 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,368 Show in the list Critical, last 7 days 343 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
CVE Severity Title Published CVE-2024-38589 Medium 5.5 netrom: fix possible dead-lock in nr_rt_ioctl() Assigned by Linux
Jun 19, 2024 CVE-2024-38587 High 7.8 speakup: Fix sizeof() vs ARRAY_SIZE() bug Assigned by Linux
Jun 19, 2024 CVE-2024-38579 Medium 5.5 crypto: bcm - Fix pointer arithmetic Assigned by Linux
Jun 19, 2024 CVE-2024-38578 High 7.8 ecryptfs: Fix buffer size for tag 66 packet Assigned by Linux
Jun 19, 2024 CVE-2024-38567 Medium 5.5 wifi: carl9170: add a proper sanity check for endpoints Assigned by Linux
Jun 19, 2024 CVE-2024-38565 Medium 6.5 wifi: ar5523: enable proper endpoint verification Assigned by Linux
Jun 19, 2024 CVE-2024-38560 High 7.1 scsi: bfa: Ensure the copied buf is NUL terminated Assigned by Linux
Jun 19, 2024 CVE-2024-38559 Medium 4.4 scsi: qedf: Ensure the copied buf is NUL terminated Assigned by Linux
Jun 19, 2024 CVE-2024-38558 Critical 10.0 net: openvswitch: fix overwriting ct original tuple for ICMPv6 Assigned by Linux
Jun 19, 2024 CVE-2024-38552 High 7.3 drm/amd/display: Fix potential index out of bounds in color transformation function Assigned by Linux
Jun 19, 2024 CVE-2024-38547 Medium 5.5 media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries Assigned by Linux
Jun 19, 2024 CVE-2024-36978 High 7.8 net: sched: sch_multiq: fix possible OOB write in multiq_tune() Assigned by Linux
Jun 19, 2024 CVE-2024-36974 High 7.8 net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP Assigned by Linux
Jun 18, 2024 CVE-2024-36959 Medium 5.5 pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() Assigned by Linux
May 30, 2024 CVE-2024-36940 High 7.8 pinctrl: core: delete incorrect free in pinctrl_enable() Assigned by Linux
May 30, 2024 CVE-2024-36939 Medium 5.5 nfs: Handle error of rpc_proc_register() in nfs_net_init(). Assigned by Linux
May 30, 2024 CVE-2024-36929 High 7.5 net: core: reject skb_copy(_expand) for fraglist GSO skbs Assigned by Linux
May 30, 2024 CVE-2024-36922 High 8.8 wifi: iwlwifi: read txq->read_ptr under lock Assigned by Linux
May 30, 2024 CVE-2024-36916 Medium 6.5 blk-iocost: avoid out of bounds shift Assigned by Linux
May 30, 2024 CVE-2024-36905 Medium 5.5 tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets Assigned by Linux
May 30, 2024 CVE-2024-36904 High 7.8 tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Assigned by Linux
May 30, 2024 CVE-2024-36902 Medium 5.5 ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() Assigned by Linux
May 30, 2024 CVE-2024-36899 High 7.0 gpiolib: cdev: Fix use after free in lineinfo_changed_notify Assigned by Linux
May 30, 2024 CVE-2024-36894 High 7.8 usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete Assigned by Linux
May 30, 2024 CVE-2024-36020 High 7.8 i40e: fix vf may be used uninitialized in this function warning Assigned by Linux
May 30, 2024 CVE-2021-47316 High 7.5 nfsd: fix NULL dereference in nfs3svc_encode_getaclres Assigned by Linux
May 21, 2024 CVE-2024-36008 Medium 5.5 ipv4: check for NULL idev in ip_route_use_hint() Assigned by Linux
May 20, 2024 CVE-2024-36007 High 7.8 mlxsw: spectrum_acl_tcam: Fix warning during rehash Assigned by Linux
May 20, 2024 CVE-2024-36006 Medium 5.5 mlxsw: spectrum_acl_tcam: Fix incorrect list API usage Assigned by Linux
May 20, 2024 CVE-2024-36005 Medium 5.5 netfilter: nf_tables: honor table dormant flag from netdev release event path Assigned by Linux
May 20, 2024 CVE-2024-36004 Medium 5.5 i40e: Do not use WQ_MEM_RECLAIM flag for workqueue Assigned by Linux
May 20, 2024 CVE-2024-35997 Medium 5.5 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up Assigned by Linux
May 20, 2024 CVE-2024-35996 Medium 5.5 cpu: Re-enable CPU mitigations by default for !X86 architectures Assigned by Linux
May 20, 2024 CVE-2024-35990 High 7.8 dma: xilinx_dpdma: Fix locking Assigned by Linux
May 20, 2024 CVE-2024-35988 Medium 5.5 riscv: Fix TASK_SIZE on 64-bit NOMMU Assigned by Linux
May 20, 2024 CVE-2024-35984 Medium 5.5 i2c: smbus: fix NULL function pointer dereference Assigned by Linux
May 20, 2024 CVE-2024-35983 Medium 5.5 bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS Assigned by Linux
May 20, 2024 CVE-2024-35982 Medium 5.1 batman-adv: Avoid infinite loop trying to resize local TT Assigned by Linux
May 20, 2024 CVE-2024-35978 Medium 5.5 Bluetooth: Fix memory leak in hci_req_sync_complete() Assigned by Linux
May 20, 2024 CVE-2024-35976 High 7.1 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING Assigned by Linux
May 20, 2024 CVE-2024-35973 Medium 5.5 geneve: fix header validation in geneve[6]_xmit_skb Assigned by Linux
May 20, 2024 CVE-2024-35969 High 8.8 ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Assigned by Linux
May 20, 2024 CVE-2024-35967 High 7.1 Bluetooth: SCO: Fix not validating setsockopt user input Assigned by Linux
May 20, 2024 CVE-2024-35966 High 7.1 Bluetooth: RFCOMM: Fix not validating setsockopt user input Assigned by Linux
May 20, 2024 CVE-2024-35965 High 7.1 Bluetooth: L2CAP: Fix not validating setsockopt user input Assigned by Linux
May 20, 2024 CVE-2024-35962 High 7.1 netfilter: complete validation of user input Assigned by Linux
May 20, 2024 CVE-2024-35960 Critical 9.1 net/mlx5: Properly link new fs rules into the tree Assigned by Linux
May 20, 2024 CVE-2024-35958 High 7.8 net: ena: Fix incorrect descriptor free behavior Assigned by Linux
May 20, 2024 CVE-2024-35955 High 8.8 kprobes: Fix possible use-after-free issue on kprobe registration Assigned by Linux
May 20, 2024 CVE-2024-35950 High 7.8 drm/client: Fully protect modes[] with dev->mode_config.mutex Assigned by Linux
May 20, 2024
Previous Page 13 of 20 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
