CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-21 21:50 UTC )
This week: 4,572 CVEs published, 316 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,572 Show in the list Critical, last 7 days 316 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2025-38722 High 7.8 habanalabs: fix UAF in export_dmabuf() Assigned by Linux
Sep 4, 2025 CVE-2025-38721 Medium 5.5 netfilter: ctnetlink: fix refcount leak on table dump Assigned by Linux
Sep 4, 2025 CVE-2025-38710 High 7.8 gfs2: Validate i_depth for exhash directories Assigned by Linux
Sep 4, 2025 CVE-2025-38708 Critical 9.8 drbd: add missing kref_get in handle_write_conflicts Assigned by Linux
Sep 4, 2025 CVE-2025-38705 Medium 5.5 drm/amd/pm: fix null pointer access Assigned by Linux
Sep 4, 2025 CVE-2025-38704 High 7.8 rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Assigned by Linux
Sep 4, 2025 CVE-2025-38702 High 7.8 fbdev: fix potential buffer overflow in do_register_framebuffer() Assigned by Linux
Sep 4, 2025 CVE-2025-38701 Medium 5.5 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr Assigned by Linux
Sep 4, 2025 CVE-2025-38691 Medium 5.5 pNFS: Fix uninited ptr deref in block/scsi layout Assigned by Linux
Sep 4, 2025 CVE-2025-38688 High 8.8 iommufd: Prevent ALIGN() overflow Assigned by Linux
Sep 4, 2025 CVE-2025-38685 High 7.8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit Assigned by Linux
Sep 4, 2025 CVE-2025-38681 Medium 4.7 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Assigned by Linux
Sep 4, 2025 CVE-2025-38678 High 7.8 netfilter: nf_tables: reject duplicate device on updates Assigned by Linux
Sep 3, 2025 CVE-2025-38677 High 7.1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: <TASK> __dump_stack lib/dump_stack.c:94 [inline]… Aug 30, 2025 CVE-2024-58240 Critical 9.8 tls: separate no-async decryption request handling from async Assigned by Linux
Aug 28, 2025 CVE-2025-38660 Critical 9.8 [ceph] parse_longname(): strrchr() expects NUL-terminated string Assigned by Linux
Aug 22, 2025 CVE-2025-38659 High 7.8 gfs2: No more self recovery Assigned by Linux
Aug 22, 2025 CVE-2025-38656 High 7.8 wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Assigned by Linux
Aug 22, 2025 CVE-2025-38653 High 7.8 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Assigned by Linux
Aug 22, 2025 CVE-2025-38643 High 8.8 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() Assigned by Linux
Aug 22, 2025 CVE-2025-38640 High 7.8 bpf: Disable migration in nf_hook_run_bpf(). Assigned by Linux
Aug 22, 2025 CVE-2025-38639 High 7.1 netfilter: xt_nfacct: don't assume acct name is null-terminated Assigned by Linux
Aug 22, 2025 CVE-2025-38636 High 7.1 rv: Use strings in da monitors tracepoints Assigned by Linux
Aug 22, 2025 CVE-2025-38617 High 7.8 net/packet: fix a race in packet_set_ring() and packet_notifier() Assigned by Linux
Aug 22, 2025 CVE-2024-58239 High 8.2 tls: stop recv() if initial process_rx_list gave us non-DATA Assigned by Linux
Aug 22, 2025 CVE-2025-38614 High 7.8 eventpoll: Fix semi-unbounded recursion Assigned by Linux
Aug 19, 2025 CVE-2025-38608 High 8.6 bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls Assigned by Linux
Aug 19, 2025 CVE-2025-38605 Medium 5.5 wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() Assigned by Linux
Aug 19, 2025 CVE-2025-38601 High 8.8 wifi: ath11k: clear initialized flag for deinit-ed srng lists Assigned by Linux
Aug 19, 2025 CVE-2025-38597 Medium 5.5 drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port Assigned by Linux
Aug 19, 2025 CVE-2025-38595 High 7.8 xen: fix UAF in dmabuf_exp_from_pages() Assigned by Linux
Aug 19, 2025 CVE-2025-38593 High 7.8 Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' Assigned by Linux
Aug 19, 2025 CVE-2025-38591 Medium 5.5 bpf: Reject narrower access to pointer ctx fields Assigned by Linux
Aug 19, 2025 CVE-2025-38586 High 7.8 bpf, arm64: Fix fp initialization for exception boundary Assigned by Linux
Aug 19, 2025 CVE-2025-38584 High 7.0 padata: Fix pd UAF once and for all Assigned by Linux
Aug 19, 2025 CVE-2025-38582 High 7.8 RDMA/hns: Fix double destruction of rsv_qp Assigned by Linux
Aug 19, 2025 CVE-2025-38574 High 8.6 pptp: ensure minimal skb length in pptp_xmit() Assigned by Linux
Aug 19, 2025 CVE-2025-38571 High 8.2 sunrpc: fix client side handling of tls alerts Assigned by Linux
Aug 19, 2025 CVE-2025-38566 Critical 9.8 sunrpc: fix handling of server side tls alerts Assigned by Linux
Aug 19, 2025 CVE-2025-38560 Critical 9.3 x86/sev: Evict cache lines during SNP memory validation Assigned by Linux
Aug 19, 2025 CVE-2025-38552 Critical 9.4 mptcp: plug races between subflow fail and subflow creation Assigned by Linux
Aug 16, 2025 CVE-2025-38539 High 7.8 tracing: Add down_write(trace_event_sem) when adding trace event Assigned by Linux
Aug 16, 2025 CVE-2025-38528 High 7.1 bpf: Reject %p% format string in bprintf-like helpers Assigned by Linux
Aug 16, 2025 CVE-2025-38527 Critical 9.8 smb: client: fix use-after-free in cifs_oplock_break Assigned by Linux
Aug 16, 2025 CVE-2025-38526 High 7.5 ice: add NULL check in eswitch lag check Assigned by Linux
Aug 16, 2025 CVE-2025-38524 High 7.5 rxrpc: Fix recv-recv race of completed call Assigned by Linux
Aug 16, 2025 CVE-2025-38514 High 7.5 rxrpc: Fix oops due to non-existence of prealloc backlog struct Assigned by Linux
Aug 16, 2025 CVE-2025-38512 High 8.8 wifi: prevent A-MSDU attacks in mesh networks Assigned by Linux
Aug 16, 2025 CVE-2025-38511 High 8.8 drm/xe/pf: Clear all LMTT pages on alloc Assigned by Linux
Aug 16, 2025 CVE-2025-38507 Medium 5.5 HID: nintendo: avoid bluetooth suspend/resume stalls Assigned by Linux
Aug 16, 2025
Previous Page 70 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
