CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 16:10 UTC )
This week: 4,565 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,565 Show in the list Critical, last 7 days 305 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74676 Not yet scored vt: add permission check for KDSKBMETA ioctl Assigned by Linux
Aug 22, 2026 CVE-2026-74675 High 7.8 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get Assigned by Linux
Aug 22, 2026 CVE-2026-74674 High 7.8 mm: fix incorrect flush address in direct page table reclaim Assigned by Linux
Aug 22, 2026 CVE-2026-74673 Not yet scored Input: evdev - fix information leak in evdev_pass_values() Assigned by Linux
Aug 22, 2026 CVE-2026-74672 Not yet scored mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Assigned by Linux
Aug 22, 2026 CVE-2026-74671 Not yet scored ima: fix out-of-bounds read in xattr_verify() Assigned by Linux
Aug 22, 2026 CVE-2026-74670 High 7.8 ipvs: stop estimator after disabled calc phase Assigned by Linux
Aug 22, 2026 CVE-2026-74669 Critical 9.8 ipvs: clear IPv4 options after rebasing tunnel ICMP errors Assigned by Linux
Aug 22, 2026 CVE-2026-74668 High 7.8 packet: use consistent hard_header_len in TX_RING send path Assigned by Linux
Aug 22, 2026 CVE-2026-74667 High 7.8 net/packet: reset the MAC header on the packet-socket transmit path Assigned by Linux
Aug 22, 2026 CVE-2026-74666 High 7.8 packet: synchronize pressure clearing with ring reconfiguration Assigned by Linux
Aug 22, 2026 CVE-2026-74665 Critical 9.1 net: fix skb length accounting after generic XDP frag adjustment Assigned by Linux
Aug 22, 2026 CVE-2026-74664 Not yet scored net: openvswitch: reallocate update replies for mismatched IDs Assigned by Linux
Aug 22, 2026 CVE-2026-74663 High 7.8 net/sched: reject overly deep qdisc hierarchies Assigned by Linux
Aug 22, 2026 CVE-2026-74662 Critical 9.8 inet: frags: publish queues before arming timer Assigned by Linux
Aug 22, 2026 CVE-2026-74661 High 7.8 mac802154: fix netdev use-after-free in beacon worker Assigned by Linux
Aug 22, 2026 CVE-2026-74660 High 7.8 netfilter: ebt_nflog: pin the NFLOG backend Assigned by Linux
Aug 22, 2026 CVE-2026-74659 Not yet scored net: bridge: mrp: fix uninitialised bytes on the wire Assigned by Linux
Aug 22, 2026 CVE-2026-74658 Not yet scored futex: Prevent robust futex exit race some more Assigned by Linux
Aug 22, 2026 CVE-2026-74657 Not yet scored ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops Assigned by Linux
Aug 22, 2026 CVE-2026-74656 High 7.8 ipv4: fix use-after-free in fib_nhc_update_mtu() Assigned by Linux
Aug 22, 2026 CVE-2026-74655 High 8.8 serial: qcom-geni: fix TX DMA buffer flush Assigned by Linux
Aug 22, 2026 CVE-2026-74654 Not yet scored serial: 8250_dma: Clear stale RX state on shutdown Assigned by Linux
Aug 22, 2026 CVE-2026-74653 Not yet scored serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx Assigned by Linux
Aug 22, 2026 CVE-2026-74652 High 7.8 serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ Assigned by Linux
Aug 22, 2026 CVE-2026-74651 High 8.1 staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() Assigned by Linux
Aug 22, 2026 CVE-2026-74650 Not yet scored staging: rtl8723bs: fix OOB read in WMM_param_handler() Assigned by Linux
Aug 22, 2026 CVE-2026-74649 High 8.8 staging: rtl8723bs: fix missing shared-key auth challenge length check Assigned by Linux
Aug 22, 2026 CVE-2026-74648 High 7.8 staging: rtl8723bs: validate monitor transmit frame lengths Assigned by Linux
Aug 22, 2026 CVE-2026-74647 High 7.8 misc: fastrpc: Remove buffer from list prior to unmap operation Assigned by Linux
Aug 22, 2026 CVE-2026-74646 High 7.8 misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke Assigned by Linux
Aug 22, 2026 CVE-2026-74645 Not yet scored mm/damon/lru_sort: error out for >10000 active_mem_bp Assigned by Linux
Aug 22, 2026 CVE-2026-74644 Not yet scored mm/damon/ops-common: putback folios on invalid migrate nid Assigned by Linux
Aug 22, 2026 CVE-2026-74643 Not yet scored samples/damon/mtier: error out for zero quota goal target values Assigned by Linux
Aug 22, 2026 CVE-2026-74642 Not yet scored ALSA: usb: Fix UAF at delayed release of MIDI2 EPs Assigned by Linux
Aug 22, 2026 CVE-2026-74641 High 7.8 ALSA: usx2y: bound the hwdep mmap fault offset Assigned by Linux
Aug 22, 2026 CVE-2026-74640 High 7.8 ALSA: FCP: fix OOB write in fcp_meter_ctl_get() Assigned by Linux
Aug 22, 2026 CVE-2026-74639 Not yet scored ALSA: us144mkii: re-anchor capture URBs on resubmission Assigned by Linux
Aug 22, 2026 CVE-2026-74638 Not yet scored drm/v3d: Serialize the scheduler timeout handlers Assigned by Linux
Aug 22, 2026 CVE-2026-74637 High 7.8 perf/core: Fix group leader use-after-free after sibling detach Assigned by Linux
Aug 22, 2026 CVE-2026-74636 Not yet scored tracing: Fix race between update_event_fields and, event_define_fields Assigned by Linux
Aug 22, 2026 CVE-2026-74635 High 7.8 fbdev: bitblit: bound-check glyph index in bit_cursor() Assigned by Linux
Aug 22, 2026 CVE-2026-74634 High 7.8 ring-buffer: Prevent subbuf order change when resizing is disabled Assigned by Linux
Aug 22, 2026 CVE-2026-74633 Not yet scored tracing: Fix NULL pointer dereference in module event cache removal Assigned by Linux
Aug 22, 2026 CVE-2026-74632 High 7.8 mm/huge_memory: fix huge_zero_pfn race Assigned by Linux
Aug 22, 2026 CVE-2026-74631 High 8.4 net: smc: fix splice entry lifetime imbalance in smc_rx_splice Assigned by Linux
Aug 22, 2026 CVE-2026-74630 High 7.8 ipv6: prevent in6_dev_get() from resurrecting inet6_dev Assigned by Linux
Aug 22, 2026 CVE-2026-74629 High 8.8 net/dibs: Correct freeing of dmb_clientid_arr Assigned by Linux
Aug 22, 2026 CVE-2026-74628 Critical 9.8 net/x25: fix use-after-free of the socket by its timers Assigned by Linux
Aug 22, 2026 CVE-2026-74627 High 7.8 net: devmem: prevent net-iov / page mixing Assigned by Linux
Aug 22, 2026
Previous Page 63 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
