CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 13:40 UTC )
This week: 4,610 CVEs published, 309 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,610 Show in the list Critical, last 7 days 309 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-80541 High 7.8 drm/amdgpu: validate GEM_CREATE domain combinations Assigned by Linux
Aug 26, 2026 CVE-2026-80540 High 7.8 drm/amdgpu: Fix UVD decode image min size calculation Assigned by Linux
Aug 26, 2026 CVE-2026-80539 Not yet scored drm/amdgpu: disallow multiple FENCE chunks in one submit Assigned by Linux
Aug 26, 2026 CVE-2026-80538 High 7.1 xfs: propagate errors from xfs_rtginode_load Assigned by Linux
Aug 26, 2026 CVE-2026-80537 High 7.8 xfs: fix off-by-one in rtrefcount btree root level validation Assigned by Linux
Aug 26, 2026 CVE-2026-80536 High 8.4 xfs: bounds-check buffer log item's dirty bitmap Assigned by Linux
Aug 26, 2026 CVE-2026-80535 Not yet scored xfs: don't double-lock when deleting a self-referential directory Assigned by Linux
Aug 26, 2026 CVE-2026-80534 Not yet scored xfs: fix ilock leak on error in xfs_dq_get_next_id Assigned by Linux
Aug 26, 2026 CVE-2026-80533 Not yet scored xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair Assigned by Linux
Aug 26, 2026 CVE-2026-80532 Not yet scored xfs: fix another iunlink infinite loop bug in online fsck Assigned by Linux
Aug 26, 2026 CVE-2026-80531 High 7.8 xfs: avoid UAF on sc->tempip in xrep_tempfile_create Assigned by Linux
Aug 26, 2026 CVE-2026-80530 High 7.1 xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN Assigned by Linux
Aug 26, 2026 CVE-2026-80529 Not yet scored xfs: don't swallow dquot recovery verification errors Assigned by Linux
Aug 26, 2026 CVE-2026-80528 Critical 9.8 ceph: avoid fs reclaim while using current->journal_info Assigned by Linux
Aug 26, 2026 CVE-2026-80527 High 7.5 ceph: fix hanging __ceph_get_caps() with stale mds_wanted Assigned by Linux
Aug 26, 2026 CVE-2026-80526 High 7.8 ASoC: tas2562: Validate values for volume writes Assigned by Linux
Aug 26, 2026 CVE-2026-80525 Not yet scored ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup Assigned by Linux
Aug 26, 2026 CVE-2026-80524 Not yet scored optee: ffa: Add NULL check in optee_ffa_lend_protmem Assigned by Linux
Aug 26, 2026 CVE-2026-80523 High 7.1 clk: spacemit: k3: set hdma clock as critical Assigned by Linux
Aug 26, 2026 CVE-2026-80522 High 7.8 crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() Assigned by Linux
Aug 26, 2026 CVE-2026-80521 High 7.8 af_unix: Unlink scc_entry in unix_del_edge(). Assigned by Linux
Aug 26, 2026 CVE-2026-80520 High 7.5 ovpn: fix NULL dereference when killing missing key Assigned by Linux
Aug 26, 2026 CVE-2026-80519 Critical 9.8 ovpn: finish crypto callback cleanup before peer release Assigned by Linux
Aug 26, 2026 CVE-2026-74754 Not yet scored scsi: core: pair EH runtime PM get and put Assigned by Linux
Aug 26, 2026 CVE-2026-74753 High 7.8 perf: Reject exited events as group leaders Assigned by Linux
Aug 26, 2026 CVE-2026-74752 Critical 9.8 sctp: validate cookie AUTH state before use Assigned by Linux
Aug 26, 2026 CVE-2026-74751 Critical 9.4 riscv: lib: Fix ZBB strnlen reading past count boundary Assigned by Linux
Aug 26, 2026 CVE-2026-74750 High 7.5 ovpn: defer key slot crypto freeing to workqueue Assigned by Linux
Aug 26, 2026 CVE-2026-74749 Not yet scored rseq: Prevent hard lockup on granted time slice extension Assigned by Linux
Aug 26, 2026 CVE-2026-74748 High 7.8 netfilter: ipset: fix refcount race between list:set GC and swap Assigned by Linux
Aug 26, 2026 CVE-2026-74747 High 7.8 ipvs: revalidate ihl to prevent out-of-bounds access Assigned by Linux
Aug 26, 2026 CVE-2026-74746 Critical 9.8 netfilter: flowtable: publish GC-visible tuple last Assigned by Linux
Aug 26, 2026 CVE-2026-74745 High 7.5 eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Assigned by Linux
Aug 26, 2026 CVE-2026-74744 Critical 9.8 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev Assigned by Linux
Aug 26, 2026 CVE-2026-74743 Critical 9.8 macvlan: inherit needed_headroom and needed_tailroom from lowerdev Assigned by Linux
Aug 26, 2026 CVE-2026-74742 High 7.5 veth: fix queue index used to wake the peer txq in veth_poll Assigned by Linux
Aug 26, 2026 CVE-2026-74741 High 7.5 net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling Assigned by Linux
Aug 26, 2026 CVE-2026-74740 Not yet scored net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain Assigned by Linux
Aug 26, 2026 CVE-2026-74739 High 7.8 net/sched: cls_u32: skip hash tables in u32_bind_class() Assigned by Linux
Aug 26, 2026 CVE-2026-74738 Not yet scored regmap: sdw-mbq: don't call an unset readable_reg callback Assigned by Linux
Aug 26, 2026 CVE-2026-74737 Critical 9.8 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG Assigned by Linux
Aug 26, 2026 CVE-2026-74736 High 7.8 net/sched: cls_bpf: reject dev-bound programs bound to a different device Assigned by Linux
Aug 26, 2026 CVE-2026-74735 Not yet scored l2tp: fix tunnel and session refcount leak on seq_file release Assigned by Linux
Aug 26, 2026 CVE-2026-74734 Not yet scored firewire: ohci: fix NULL pointer dereference in ar_context_release Assigned by Linux
Aug 26, 2026 CVE-2026-74733 High 7.8 gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Assigned by Linux
Aug 22, 2026 CVE-2026-74731 High 7.8 sched_ext: Skip sub-disable teardown for never-linked sub-schedulers Assigned by Linux
Aug 22, 2026 CVE-2026-74730 Critical 9.8 NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Assigned by Linux
Aug 22, 2026 CVE-2026-74729 Not yet scored soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read Assigned by Linux
Aug 22, 2026 CVE-2026-74728 Not yet scored xfs: handle NULL b_addr in xfs_buf_free Assigned by Linux
Aug 22, 2026 CVE-2026-74727 Critical 9.8 ovpn: skip rehash for peers already removed from by_id Assigned by Linux
Aug 22, 2026
Previous Page 61 of 179 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
