CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 21:00 UTC )
This week: 4,546 CVEs published, 334 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,546 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74425 High 7.5 afs: handle CB.InitCallBackState3 requests without a server record Assigned by Linux
Aug 15, 2026 CVE-2026-74424 Not yet scored fbcon: fix NULL pointer dereference for a console without vc_data Assigned by Linux
Aug 15, 2026 CVE-2026-74423 Not yet scored accel/amdxdna: Fix leak when pinning ubuf pages Assigned by Linux
Aug 15, 2026 CVE-2026-74422 Not yet scored drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() Assigned by Linux
Aug 15, 2026 CVE-2026-74421 Not yet scored drm/rockchip: dw_dp: Switch to drmm_kzalloc() Assigned by Linux
Aug 15, 2026 CVE-2026-74420 Not yet scored drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges Assigned by Linux
Aug 15, 2026 CVE-2026-74419 High 7.3 accel/amdxdna: Adjust size for copy_to_user() Assigned by Linux
Aug 15, 2026 CVE-2026-74418 Not yet scored dma-fence: Fix potential tracepoint null pointer dereferences Assigned by Linux
Aug 15, 2026 CVE-2026-74417 High 7.8 drm/radeon: fix integer overflow in radeon_align_pitch() Assigned by Linux
Aug 15, 2026 CVE-2026-74416 Not yet scored drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Assigned by Linux
Aug 15, 2026 CVE-2026-74415 Not yet scored spi: atcspi200: fix use-after-free when driver unbind Assigned by Linux
Aug 15, 2026 CVE-2026-74414 Not yet scored hfsplus: Remove the duplicate attr inode dirty marking action Assigned by Linux
Aug 15, 2026 CVE-2026-74413 High 8.8 wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers Assigned by Linux
Aug 15, 2026 CVE-2026-74412 High 8.8 wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers Assigned by Linux
Aug 15, 2026 CVE-2026-74411 High 8.8 wifi: rtw89: Correct data type for scan index to avoid infinite loop Assigned by Linux
Aug 15, 2026 CVE-2026-74410 High 8.1 wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Assigned by Linux
Aug 15, 2026 CVE-2026-74409 High 8.8 wifi: rtw89: add bounds check on firmware mac_id in link lookup Assigned by Linux
Aug 15, 2026 CVE-2026-74408 High 8.8 wifi: ath9k: fix OOB access from firmware tx status queue ID Assigned by Linux
Aug 15, 2026 CVE-2026-74407 High 8.8 wifi: ath11k: cancel SSR work items during PCI shutdown Assigned by Linux
Aug 15, 2026 CVE-2026-74406 Critical 9.8 vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Assigned by Linux
Aug 15, 2026 CVE-2026-74405 High 7.8 OPP: Fix race between OPP addition and lookup Assigned by Linux
Aug 15, 2026 CVE-2026-74404 High 7.8 crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Assigned by Linux
Aug 15, 2026 CVE-2026-74403 High 7.8 crypto: ccp - Check for page allocation failure correctly in TIO Assigned by Linux
Aug 15, 2026 CVE-2026-74402 Not yet scored crypto: atmel-sha204a - fix blocking and non-blocking rng logic Assigned by Linux
Aug 15, 2026 CVE-2026-74401 Critical 9.8 dlm: fix add msg handle in send_queue ordered Assigned by Linux
Aug 15, 2026 CVE-2026-74400 Not yet scored bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries Assigned by Linux
Aug 15, 2026 CVE-2026-74399 Not yet scored evm: terminate and bound the evm_xattrs read buffer Assigned by Linux
Aug 15, 2026 CVE-2026-74398 Critical 9.8 ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Assigned by Linux
Aug 15, 2026 CVE-2026-74397 High 7.8 IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Assigned by Linux
Aug 15, 2026 CVE-2026-74396 High 7.5 RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure Assigned by Linux
Aug 15, 2026 CVE-2026-74395 Not yet scored RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Assigned by Linux
Aug 15, 2026 CVE-2026-74394 Critical 9.8 RDMA/srpt: fix integer overflow in immediate data length check Assigned by Linux
Aug 15, 2026 CVE-2026-74393 Not yet scored drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Assigned by Linux
Aug 15, 2026 CVE-2026-74392 Not yet scored dm: limit target bio polling to one shot Assigned by Linux
Aug 15, 2026 CVE-2026-74391 Not yet scored tracing: Bound synthetic-field strings with seq_buf Assigned by Linux
Aug 15, 2026 CVE-2026-74390 High 7.8 RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Assigned by Linux
Aug 15, 2026 CVE-2026-74389 Not yet scored RDMA/hns: Fix log flood after cmd_mbox failure Assigned by Linux
Aug 15, 2026 CVE-2026-74388 High 7.8 ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data Assigned by Linux
Aug 15, 2026 CVE-2026-74387 High 7.8 ALSA: seq: midi: Serialize output teardown with event_input Assigned by Linux
Aug 15, 2026 CVE-2026-74386 Not yet scored nvmet-tcp: fix page fragment cache leak in error path Assigned by Linux
Aug 15, 2026 CVE-2026-74385 High 7.5 nvmet-tcp: check return value of nvmet_tcp_set_queue_sock Assigned by Linux
Aug 15, 2026 CVE-2026-74384 Critical 9.8 nvme-multipath: fix flex array size in struct nvme_ns_head Assigned by Linux
Aug 15, 2026 CVE-2026-74383 High 8.4 nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools Assigned by Linux
Aug 15, 2026 CVE-2026-74382 Not yet scored net/sched: cls_bpf: prevent unbounded recursion in offload rollback Assigned by Linux
Aug 15, 2026 CVE-2026-74381 Not yet scored gpu: host1x: Allow entries in BO caches to be freed Assigned by Linux
Aug 15, 2026 CVE-2026-74380 High 8.8 gpu: host1x: Fix iommu_map_sgtable() return value check Assigned by Linux
Aug 15, 2026 CVE-2026-74379 Not yet scored dax/kmem: account for partial discontiguous resource upon removal Assigned by Linux
Aug 15, 2026 CVE-2026-74378 High 7.8 RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe Assigned by Linux
Aug 15, 2026 CVE-2026-74377 High 7.8 RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Assigned by Linux
Aug 15, 2026 CVE-2026-74376 Critical 9.8 md/raid10: reset read_slot when reusing r10bio for discard Assigned by Linux
Aug 15, 2026
Previous Page 68 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
