CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 15:00 UTC )
This week: 4,588 CVEs published, 308 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,588 Show in the list Critical, last 7 days 308 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74726 High 7.3 bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor Assigned by Linux
Aug 22, 2026 CVE-2026-74725 High 7.8 enic: fix tx_hang_reset use-after-free on device removal Assigned by Linux
Aug 22, 2026 CVE-2026-74724 High 7.8 ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Assigned by Linux
Aug 22, 2026 CVE-2026-74723 Critical 9.8 btrfs: lzo: reject inline extents without valid headers Assigned by Linux
Aug 22, 2026 CVE-2026-74722 Not yet scored btrfs: fix memory leak in btrfs_do_encoded_write() Assigned by Linux
Aug 22, 2026 CVE-2026-74721 High 7.8 accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() Assigned by Linux
Aug 22, 2026 CVE-2026-74720 High 7.8 bpf: Preserve pointer state for commuted arithmetic Assigned by Linux
Aug 22, 2026 CVE-2026-74719 Not yet scored net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() Assigned by Linux
Aug 22, 2026 CVE-2026-74718 Not yet scored devlink: fix net namespace reference leak in reload Assigned by Linux
Aug 22, 2026 CVE-2026-74717 High 7.5 net/mlx5: fw_tracer, return NULL on create error Assigned by Linux
Aug 22, 2026 CVE-2026-74716 Not yet scored accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() Assigned by Linux
Aug 22, 2026 CVE-2026-74715 High 7.8 bpf: Fix netns reference imbalance in conntrack kfuncs Assigned by Linux
Aug 22, 2026 CVE-2026-74714 High 7.8 bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() Assigned by Linux
Aug 22, 2026 CVE-2026-74713 High 7.1 vhost_iotlb: bound map allocation in add_range Assigned by Linux
Aug 22, 2026 CVE-2026-74712 Critical 9.3 vdpa/mlx5: Fix buffer length in create_direct_keys() Assigned by Linux
Aug 22, 2026 CVE-2026-74711 High 8.4 hwmon: (pmbus) Fix type confusion in notification logic Assigned by Linux
Aug 22, 2026 CVE-2026-74710 High 7.8 xsk: require at least 16 bytes of TX metadata Assigned by Linux
Aug 22, 2026 CVE-2026-74709 Not yet scored xsk: clear metadata pointer when no timestamp is requested Assigned by Linux
Aug 22, 2026 CVE-2026-74708 High 7.8 xsk: validate launch-time metadata size Assigned by Linux
Aug 22, 2026 CVE-2026-74707 High 7.8 xsk: validate metadata when processing requests Assigned by Linux
Aug 22, 2026 CVE-2026-74706 Not yet scored bnge: Fix NULL pointer dereference in aux device release Assigned by Linux
Aug 22, 2026 CVE-2026-74705 Critical 10.0 udp: fix potential use-after-free in tunnel segmentation Assigned by Linux
Aug 22, 2026 CVE-2026-74704 High 8.2 net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter Assigned by Linux
Aug 22, 2026 CVE-2026-74703 High 7.1 vhost-scsi: Validate T10 PI scatterlist counts Assigned by Linux
Aug 22, 2026 CVE-2026-74702 High 8.8 vhost-scsi: reject feature changes after endpoint Assigned by Linux
Aug 22, 2026 CVE-2026-74701 High 7.8 net/openvswitch: check Ethernet header length in key_extract() Assigned by Linux
Aug 22, 2026 CVE-2026-74700 High 7.8 net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Assigned by Linux
Aug 22, 2026 CVE-2026-74699 Not yet scored drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() Assigned by Linux
Aug 22, 2026 CVE-2026-74698 Not yet scored net/mlx5e: fix BQL reset on SQ re-activation Assigned by Linux
Aug 22, 2026 CVE-2026-74697 High 8.2 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption Assigned by Linux
Aug 22, 2026 CVE-2026-74696 High 7.5 tcp: fix TFO max_qlen accounting across reuseport migration Assigned by Linux
Aug 22, 2026 CVE-2026-74695 High 7.5 netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Assigned by Linux
Aug 22, 2026 CVE-2026-74694 Not yet scored net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length Assigned by Linux
Aug 22, 2026 CVE-2026-74693 Not yet scored net: prestera: validate firmware header length Assigned by Linux
Aug 22, 2026 CVE-2026-74692 High 7.5 net/smc: fix TOCTOU race between smc_listen_out() and listener close Assigned by Linux
Aug 22, 2026 CVE-2026-74691 High 8.8 net: thunderbolt: Tear down DMA paths before stopping the rings Assigned by Linux
Aug 22, 2026 CVE-2026-74690 High 8.4 s390/ism: Fix UAF of sba and ieq during ism_dev_exit() Assigned by Linux
Aug 22, 2026 CVE-2026-74689 High 7.1 net/atm: fix slab-out-of-bounds read in vcc_setsockopt() Assigned by Linux
Aug 22, 2026 CVE-2026-74688 Critical 9.8 sctp: clear control chunk transport if it is being removed Assigned by Linux
Aug 22, 2026 CVE-2026-74687 High 7.8 watchdog: at91sam9_wdt: prevent timer rearm during teardown Assigned by Linux
Aug 22, 2026 CVE-2026-74686 Not yet scored rqspinlock: Reset tail when preserving queue on deadlock Assigned by Linux
Aug 22, 2026 CVE-2026-74685 Not yet scored hwmon: (ltc4282) Clamp negative current limits Assigned by Linux
Aug 22, 2026 CVE-2026-74684 High 7.1 net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() Assigned by Linux
Aug 22, 2026 CVE-2026-74683 Not yet scored Input: evdev - sanitize event type index when fetching event masks Assigned by Linux
Aug 22, 2026 CVE-2026-74682 Not yet scored ALSA: usb-audio: fix OOB write on Type II inbound URBs Assigned by Linux
Aug 22, 2026 CVE-2026-74681 Not yet scored usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg Assigned by Linux
Aug 22, 2026 CVE-2026-74680 Not yet scored usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() Assigned by Linux
Aug 22, 2026 CVE-2026-74679 Not yet scored usb: gadget: f_ncm: Use unsigned int for ndp_index Assigned by Linux
Aug 22, 2026 CVE-2026-74678 High 7.5 net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() Assigned by Linux
Aug 22, 2026 CVE-2026-74677 Not yet scored net: usb: ipheth: fix carrier_work UAF on disconnect Assigned by Linux
Aug 22, 2026
Previous Page 62 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
