CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 10:00 UTC )
This week: 4,590 CVEs published, 307 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,590 Show in the list Critical, last 7 days 307 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80742 Not yet scored af_packet: Don't send zero-byte data in tpacket_snd(). Assigned by Linux
Sep 3, 2026 CVE-2026-80741 High 7.1 drm/log: Fix out-of-bounds read on empty message length Assigned by Linux
Sep 3, 2026 CVE-2026-80740 Not yet scored drm/log: Fix infinite loop when scale is too large for display Assigned by Linux
Sep 3, 2026 CVE-2026-80739 Not yet scored net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock Assigned by Linux
Sep 3, 2026 CVE-2026-80738 High 7.3 bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie Assigned by Linux
Sep 3, 2026 CVE-2026-80737 High 7.8 serial: amba-pl011: synchronize DMA teardown Assigned by Linux
Sep 3, 2026 CVE-2026-80736 High 7.8 thunderbolt: Fix bandwidth group reservation indexing Assigned by Linux
Sep 3, 2026 CVE-2026-80735 High 7.3 ovpn: ensure socket is owned by ovpn before deref sk_user_data Assigned by Linux
Sep 3, 2026 CVE-2026-80734 High 8.8 btrfs: initialize inode mapping flags for cached inodes Assigned by Linux
Sep 3, 2026 CVE-2026-80733 Not yet scored net: remove WARN_ON_ONCE() from sk_mc_loop() Assigned by Linux
Sep 3, 2026 CVE-2026-80732 High 7.8 ata: pata_sl82c105: fix bridge revision use-after-free Assigned by Linux
Sep 3, 2026 CVE-2026-80731 High 7.8 net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header Assigned by Linux
Sep 3, 2026 CVE-2026-80730 Not yet scored ring-buffer: Fix crash passing ERR_PTR to kthread_stop() Assigned by Linux
Sep 3, 2026 CVE-2026-80729 Not yet scored mm/huge_memory: initialise workingset state before folio split Assigned by Linux
Sep 3, 2026 CVE-2026-80728 Not yet scored Revert "drm/amdgpu: fix aperture mapping leak" Assigned by Linux
Sep 3, 2026 CVE-2026-80727 Not yet scored x86/mce: Set up the polling timer before CMCI discovery Assigned by Linux
Sep 3, 2026 CVE-2026-80725 Critical 9.8 net: gro: properly validate BIG TCP aggregation criteria Assigned by Linux
Aug 29, 2026 CVE-2026-80724 High 8.8 ptp: vmclock: prevent read-only mappings from becoming writable Assigned by Linux
Aug 28, 2026 CVE-2026-80723 High 8.4 of: reserved_mem: prevent OOB when too many dynamic regions are defined Assigned by Linux
Aug 28, 2026 CVE-2026-80722 High 8.8 wifi: mac80211: validate individual TWT params before driver setup Assigned by Linux
Aug 28, 2026 CVE-2026-80721 High 8.8 Bluetooth: ISO: ensure no dangling hcon references in iso_conn Assigned by Linux
Aug 28, 2026 CVE-2026-80720 High 7.5 iomap: add a separate bio_set for iomap_split_ioend Assigned by Linux
Aug 28, 2026 CVE-2026-80719 Not yet scored mm: mglru: fix stale batch updates after memcg reparenting Assigned by Linux
Aug 28, 2026 CVE-2026-80718 High 7.8 mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() Assigned by Linux
Aug 28, 2026 CVE-2026-80717 High 7.5 sctp: validate Adaptation Indication parameter length Assigned by Linux
Aug 28, 2026 CVE-2026-80716 High 7.8 ALSA: pcm: wake linked drain waiters on unlink Assigned by Linux
Aug 28, 2026 CVE-2026-80715 Not yet scored igc: remove napi_synchronize() in igc_down() Assigned by Linux
Aug 28, 2026 CVE-2026-80714 Critical 9.8 ipvs: do not propagate one-packet flag to synced conns Assigned by Linux
Aug 28, 2026 CVE-2026-80713 High 8.4 io_uring: preserve task restrictions across exec Assigned by Linux
Aug 28, 2026 CVE-2026-80712 High 8.4 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE Assigned by Linux
Aug 28, 2026 CVE-2026-80711 Not yet scored power: supply: max17040: handle missing status supplier Assigned by Linux
Aug 28, 2026 CVE-2026-80710 High 7.8 s390/dasd: Fix undersized format-check buffer Assigned by Linux
Aug 28, 2026 CVE-2026-80709 High 7.8 s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs Assigned by Linux
Aug 28, 2026 CVE-2026-80708 Not yet scored s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() Assigned by Linux
Aug 28, 2026 CVE-2026-80707 High 7.5 can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Assigned by Linux
Aug 28, 2026 CVE-2026-80706 High 7.8 can: softing: fw_parse(): validate firmware record spans Assigned by Linux
Aug 28, 2026 CVE-2026-80705 Not yet scored drm/amd/display: check if dml21_add_phantom_plane() is successful Assigned by Linux
Aug 28, 2026 CVE-2026-80704 Not yet scored drm/amd/display: use proper context for logging Assigned by Linux
Aug 28, 2026 CVE-2026-80703 Not yet scored drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Assigned by Linux
Aug 28, 2026 CVE-2026-80702 High 7.8 drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size Assigned by Linux
Aug 28, 2026 CVE-2026-80701 Not yet scored drm/vmwgfx: enforce cursor size limits for MOB cursors Assigned by Linux
Aug 28, 2026 CVE-2026-80700 High 7.8 drm/vmwgfx: validate external BO copy bounds for both stride paths Assigned by Linux
Aug 28, 2026 CVE-2026-80699 Not yet scored KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context Assigned by Linux
Aug 28, 2026 CVE-2026-80698 Not yet scored dmaengine: idxd: fix double free of wq, engine, and group structs Assigned by Linux
Aug 28, 2026 CVE-2026-80697 Not yet scored erofs: ensure valid f_path for page cache sharing Assigned by Linux
Aug 28, 2026 CVE-2026-80696 High 7.8 hwmon: (ltc4282) Fix reading the minimum alarm voltage Assigned by Linux
Aug 28, 2026 CVE-2026-80695 Not yet scored hwmon: (sht3x) Fix unaligned accesses Assigned by Linux
Aug 28, 2026 CVE-2026-80694 Critical 9.8 net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller Assigned by Linux
Aug 28, 2026 CVE-2026-80693 Critical 9.3 idpf: bound interrupt-vector register fill to the allocated array Assigned by Linux
Aug 28, 2026 CVE-2026-80692 High 8.8 Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks Assigned by Linux
Aug 28, 2026
Previous Page 57 of 178 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
