CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 21:50 UTC )
What this means for you
This week: 5,333 CVEs published, 345 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,333 Show in the list Critical, last 7 days 345 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem . Show all products
CVE Severity Title Published CVE-2024-27025 Medium 5.5 nbd: null check for nla_nest_start Assigned by Linux
May 1, 2024 CVE-2024-27024 High 7.8 net/rds: fix WARNING in rds_conn_connect_if_down Assigned by Linux
May 1, 2024 CVE-2024-27020 High 7.8 netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() Assigned by Linux
May 1, 2024 CVE-2024-27013 Medium 5.5 tun: limit printing rate when illegal packet received by tun dev Assigned by Linux
May 1, 2024 CVE-2024-27004 Medium 5.5 clk: Get runtime PM before walking tree during disable_unused Assigned by Linux
May 1, 2024 CVE-2024-26993 Medium 5.5 fs: sysfs: Fix reference leak in sysfs_break_active_protection() Assigned by Linux
May 1, 2024 CVE-2024-26988 High 7.8 init/main.c: Fix potential static_command_line memory overflow Assigned by Linux
May 1, 2024 CVE-2024-26982 High 7.1 Squashfs: check the inode number is not the invalid value of zero Assigned by Linux
May 1, 2024 CVE-2024-26974 High 7.8 crypto: qat - resolve race condition during AER recovery Assigned by Linux
May 1, 2024 CVE-2024-26973 Medium 5.5 fat: fix uninitialized field in nostale filehandles Assigned by Linux
May 1, 2024 CVE-2024-26961 High 7.0 mac802154: fix llsec key resources release in mac802154_llsec_key_del Assigned by Linux
May 1, 2024 CVE-2024-26960 High 7.0 mm: swap: fix race between free_swap_and_cache() and swapoff() Assigned by Linux
May 1, 2024 CVE-2024-26958 High 7.8 nfs: fix UAF in direct writes Assigned by Linux
May 1, 2024 CVE-2024-26951 High 7.8 wireguard: netlink: check for dangling peer via is_dead instead of empty list Assigned by Linux
May 1, 2024 CVE-2024-26950 High 7.8 wireguard: netlink: access device through ctx instead of peer Assigned by Linux
May 1, 2024 CVE-2024-26937 Medium 5.5 drm/i915/gt: Reset queue_priority_hint on parking Assigned by Linux
May 1, 2024 CVE-2024-26935 Medium 5.5 scsi: core: Fix unremoved procfs host directory regression Assigned by Linux
May 1, 2024 CVE-2024-26934 High 7.8 USB: core: Fix deadlock in usb_deauthorize_interface() Assigned by Linux
May 1, 2024 CVE-2023-6237 Medium 5.9 Excessive time spent checking invalid RSA public keys Assigned by openssl
Apr 25, 2024 CVE-2024-26925 High 7.8 netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path Assigned by Linux
Apr 24, 2024 CVE-2024-26923 High 7.8 af_unix: Fix garbage collector racing against connect() Assigned by Linux
Apr 24, 2024 CVE-2024-26920 Medium 5.5 tracing/trigger: Fix to return error if failed to alloc snapshot Assigned by Linux
Apr 17, 2024 CVE-2024-26907 High 7.8 RDMA/mlx5: Fix fortify source warning while accessing Eth segment Assigned by Linux
Apr 17, 2024 CVE-2024-26906 Medium 5.5 x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() Assigned by Linux
Apr 17, 2024 CVE-2024-26903 Medium 5.5 Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security Assigned by Linux
Apr 17, 2024 CVE-2024-26901 Medium 5.3 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak Assigned by Linux
Apr 17, 2024 CVE-2024-26898 High 7.8 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts Assigned by Linux
Apr 17, 2024 CVE-2024-26897 Medium 4.7 wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete Assigned by Linux
Apr 17, 2024 CVE-2024-26895 High 7.8 wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces Assigned by Linux
Apr 17, 2024 CVE-2024-26894 Medium 6.0 ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() Assigned by Linux
Apr 17, 2024 CVE-2024-26891 Medium 5.5 iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected Assigned by Linux
Apr 17, 2024 CVE-2024-26889 Medium 5.5 Bluetooth: hci_core: Fix possible buffer overflow Assigned by Linux
Apr 17, 2024 CVE-2024-26885 High 7.8 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches Assigned by Linux
Apr 17, 2024 CVE-2024-26884 High 7.8 bpf: Fix hashtab overflow check on 32-bit arches Assigned by Linux
Apr 17, 2024 CVE-2024-26883 High 7.8 bpf: Fix stackmap overflow check on 32-bit arches Assigned by Linux
Apr 17, 2024 CVE-2024-26882 High 7.3 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() Assigned by Linux
Apr 17, 2024 CVE-2024-26880 High 7.8 dm: call the resume method on internal suspend Assigned by Linux
Apr 17, 2024 CVE-2024-26878 Medium 4.7 quota: Fix potential NULL pointer dereference Assigned by Linux
Apr 17, 2024 CVE-2024-26877 Critical 9.8 crypto: xilinx - call finalize with bh disabled Assigned by Linux
Apr 17, 2024 CVE-2024-26875 Medium 6.4 media: pvrusb2: fix uaf in pvr2_context_set_notify Assigned by Linux
Apr 17, 2024 CVE-2024-26872 High 7.8 RDMA/srpt: Do not register event handler until srpt device is fully setup Assigned by Linux
Apr 17, 2024 CVE-2024-26870 High 7.8 NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 Assigned by Linux
Apr 17, 2024 CVE-2024-26863 Medium 5.5 hsr: Fix uninit-value access in hsr_get_node() Assigned by Linux
Apr 17, 2024 CVE-2024-26861 Medium 4.7 wireguard: receive: annotate data-race around receiving_counter.counter Assigned by Linux
Apr 17, 2024 CVE-2024-26859 Medium 4.7 net/bnx2x: Prevent access to a freed page in page_pool Assigned by Linux
Apr 17, 2024 CVE-2024-26855 Medium 5.5 net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() Assigned by Linux
Apr 17, 2024 CVE-2024-26852 High 7.8 net/ipv6: avoid possible UAF in ip6_route_mpath_notify() Assigned by Linux
Apr 17, 2024 CVE-2024-26851 High 7.5 netfilter: nf_conntrack_h323: Add protection for bmp length out of range Assigned by Linux
Apr 17, 2024 CVE-2024-26820 Medium 5.5 hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed Assigned by Linux
Apr 17, 2024 CVE-2024-26816 Medium 5.5 x86, relocs: Ignore relocations in .notes section Assigned by Linux
Apr 10, 2024
Previous Page 15 of 20 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.