CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 23:40 UTC )
This week: 4,502 CVEs published, 337 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,502 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-74275 High 8.4 cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() Assigned by Linux
Aug 15, 2026 CVE-2026-74274 Not yet scored cxl/region: Fill first free targets[] slot during auto-discovery Assigned by Linux
Aug 15, 2026 CVE-2026-74273 Not yet scored cxl/region: Block region delete during region creation Assigned by Linux
Aug 15, 2026 CVE-2026-74272 Not yet scored cxl/region: Resolve region deletion races Assigned by Linux
Aug 15, 2026 CVE-2026-74271 Not yet scored power: supply: core: fix supplied_from allocations Assigned by Linux
Aug 15, 2026 CVE-2026-74270 High 7.8 handshake: Require admin permission for DONE command Assigned by Linux
Aug 15, 2026 CVE-2026-74269 Critical 9.8 bnxt: fix head underflow on XDP head-grow Assigned by Linux
Aug 15, 2026 CVE-2026-74268 Critical 9.8 tcp: clear sock_ops cb flags before force-closing a child socket Assigned by Linux
Aug 15, 2026 CVE-2026-74267 Critical 9.8 net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Assigned by Linux
Aug 15, 2026 CVE-2026-74266 Not yet scored net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Assigned by Linux
Aug 15, 2026 CVE-2026-74265 Not yet scored net: mana: initialize gdma queue id to INVALID_QUEUE_ID Assigned by Linux
Aug 15, 2026 CVE-2026-74264 High 7.8 net: watchdog: fix refcount tracking races Assigned by Linux
Aug 15, 2026 CVE-2026-74263 Not yet scored net: wwan: t7xx: check skb_clone in control TX Assigned by Linux
Aug 15, 2026 CVE-2026-74262 High 7.8 kcm: use WRITE_ONCE() when changing lower socket callbacks Assigned by Linux
Aug 15, 2026 CVE-2026-74261 Not yet scored ALSA: seq: avoid stale FIFO cells during resize Assigned by Linux
Aug 15, 2026 CVE-2026-74260 High 7.8 netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Assigned by Linux
Aug 15, 2026 CVE-2026-74258 High 7.8 bpf: Guard __get_user acesss with access_ok for uprobe_multi data Assigned by Linux
Aug 15, 2026 CVE-2026-74257 High 7.8 sockmap: Fix use-after-free in udp_bpf_recvmsg() Assigned by Linux
Aug 15, 2026 CVE-2026-74256 High 8.4 bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Assigned by Linux
Aug 15, 2026 CVE-2026-74255 Critical 9.8 tipc: fix UAF in tipc_l2_send_msg() Assigned by Linux
Aug 15, 2026 CVE-2026-72502 High 7.5 tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Assigned by Linux
Aug 15, 2026 CVE-2026-72501 Not yet scored RDMA/bnxt_re: Initialize dpi variable to zero Assigned by Linux
Aug 15, 2026 CVE-2026-72500 High 8.8 RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Assigned by Linux
Aug 15, 2026 CVE-2026-72499 High 8.8 RDMA/bnxt_re: Free CQ toggle page after firmware teardown Assigned by Linux
Aug 15, 2026 CVE-2026-72498 Not yet scored RDMA/bnxt_re: Avoid displaying the kernel pointer Assigned by Linux
Aug 15, 2026 CVE-2026-72497 High 8.8 RDMA/bnxt_re: Add a max slot check for SQ Assigned by Linux
Aug 15, 2026 CVE-2026-72496 Critical 9.2 RDMA/bnxt_re: Proper rollback if the ioremap fails Assigned by Linux
Aug 15, 2026 CVE-2026-72495 Critical 9.3 RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Assigned by Linux
Aug 15, 2026 CVE-2026-72494 Critical 9.8 RDMA/irdma: Replace waitqueue and flag with completion Assigned by Linux
Aug 15, 2026 CVE-2026-72493 Critical 9.9 net: serialize netif_running() check in enqueue_to_backlog() Assigned by Linux
Aug 15, 2026 CVE-2026-72492 High 8.8 ksmbd: fix use-after-free in same_client_has_lease() Assigned by Linux
Aug 15, 2026 CVE-2026-72491 Critical 9.8 net/9p: fix race condition on rdma->state in trans_rdma.c Assigned by Linux
Aug 15, 2026 CVE-2026-72490 Not yet scored staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt Assigned by Linux
Aug 15, 2026 CVE-2026-72489 High 8.4 staging: nvec: fix use-after-free in nvec_rx_completed() Assigned by Linux
Aug 15, 2026 CVE-2026-72488 High 7.8 soundwire: fix bug in sdw_add_element_group_count found by syzkaller Assigned by Linux
Aug 15, 2026 CVE-2026-72487 High 7.7 PCI: Check ROM header and data structure addr before accessing Assigned by Linux
Aug 15, 2026 CVE-2026-72486 Not yet scored mailbox: mtk-adsp: fix UAF during device teardown Assigned by Linux
Aug 15, 2026 CVE-2026-72485 High 7.8 coresight: platform: defer connection counter increment until alloc succeeds Assigned by Linux
Aug 15, 2026 CVE-2026-72484 Not yet scored staging: most: video: avoid double free on video register failure Assigned by Linux
Aug 15, 2026 CVE-2026-72483 High 7.8 usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Assigned by Linux
Aug 15, 2026 CVE-2026-72482 High 7.8 gpib: fix double decrement of descriptor_busy in command_ioctl() Assigned by Linux
Aug 15, 2026 CVE-2026-72481 Not yet scored iio: magnetometer: ak8975: fix potential kernel stack memory leak Assigned by Linux
Aug 15, 2026 CVE-2026-72480 High 7.8 iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Assigned by Linux
Aug 15, 2026 CVE-2026-72479 Not yet scored iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Assigned by Linux
Aug 15, 2026 CVE-2026-72478 High 8.4 fs/ntfs3: add bounds check to run_get_highest_vcn() Assigned by Linux
Aug 15, 2026 CVE-2026-72477 Critical 9.8 fs/ntfs3: call _ntfs_bad_inode() when failing to rename Assigned by Linux
Aug 15, 2026 CVE-2026-72476 High 7.8 dmaengine: Fix possible use after free Assigned by Linux
Aug 15, 2026 CVE-2026-72475 Not yet scored dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Assigned by Linux
Aug 15, 2026 CVE-2026-72474 Not yet scored dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Assigned by Linux
Aug 15, 2026 CVE-2026-72473 Critical 9.8 xprtrdma: Decouple req recycling from RPC completion Assigned by Linux
Aug 15, 2026
Previous Page 71 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
