CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 00:30 UTC )
This week: 4,490 CVEs published, 335 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,490 Show in the list Critical, last 7 days 335 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72472 Critical 9.8 nfs: use nfsi->rwsem to protect traversal of the file lock list Assigned by Linux
Aug 15, 2026 CVE-2026-72471 High 7.1 fs/ntfs3: prevent potential lcn remains uninitialized Assigned by Linux
Aug 15, 2026 CVE-2026-72470 High 7.8 fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Assigned by Linux
Aug 15, 2026 CVE-2026-72469 High 8.8 xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Assigned by Linux
Aug 15, 2026 CVE-2026-72468 Not yet scored xprtrdma: Initialize re_id before removal registration Assigned by Linux
Aug 15, 2026 CVE-2026-72467 Not yet scored xprtrdma: Check frwr_wp_create() during connect Assigned by Linux
Aug 15, 2026 CVE-2026-72466 Critical 9.8 xprtrdma: Fix bcall rep leak and unbounded peek Assigned by Linux
Aug 15, 2026 CVE-2026-72465 High 7.5 xprtrdma: Sanitize the reply credit grant after parsing Assigned by Linux
Aug 15, 2026 CVE-2026-72464 High 7.5 xprtrdma: Repost Receive buffers for malformed replies Assigned by Linux
Aug 15, 2026 CVE-2026-72463 Critical 9.8 xfrm: Fix dev use-after-free in xfrm async resumption Assigned by Linux
Aug 15, 2026 CVE-2026-72462 High 8.8 apparmor: fix race in unix socket mediation when peer_path is used Assigned by Linux
Aug 15, 2026 CVE-2026-72461 High 7.8 apparmor: fix refcount leak when updating the sk_ctx Assigned by Linux
Aug 15, 2026 CVE-2026-72460 High 7.1 apparmor: check label build before no_new_privs test Assigned by Linux
Aug 15, 2026 CVE-2026-72459 High 7.8 apparmor: aa_label_alloc use aa_label_free on alloc failure Assigned by Linux
Aug 15, 2026 CVE-2026-72458 Not yet scored apparmor: fix NULL pointer dereference in unpack_pdb Assigned by Linux
Aug 15, 2026 CVE-2026-72457 Not yet scored apparmor: fail policy unpack on accept2 allocation failure Assigned by Linux
Aug 15, 2026 CVE-2026-72456 Not yet scored apparmor: release exe file resources on path failure Assigned by Linux
Aug 15, 2026 CVE-2026-72455 High 7.1 apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Assigned by Linux
Aug 15, 2026 CVE-2026-72454 High 7.8 i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Assigned by Linux
Aug 15, 2026 CVE-2026-72453 Not yet scored regcache: Do not overwrite error code when finalizing cache after error Assigned by Linux
Aug 15, 2026 CVE-2026-72452 High 7.8 drm/i915: clear CRTC color blob pointers after dropping refs Assigned by Linux
Aug 15, 2026 CVE-2026-72451 Critical 9.8 xfrm: Fix xfrm state cache insertion race Assigned by Linux
Aug 15, 2026 CVE-2026-72450 High 7.8 xfrm: validate selector family and prefixlen during match Assigned by Linux
Aug 15, 2026 CVE-2026-72449 High 7.8 drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Assigned by Linux
Aug 15, 2026 CVE-2026-72448 Not yet scored octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Assigned by Linux
Aug 15, 2026 CVE-2026-72447 Not yet scored sctp: hold socket lock when dumping endpoints in sctp_diag Assigned by Linux
Aug 15, 2026 CVE-2026-72446 High 7.8 ALSA: usb-audio: qcom: reject stream disable with no active interface Assigned by Linux
Aug 15, 2026 CVE-2026-72445 Not yet scored ALSA: usb-audio: qcom: clear opened when stream enable fails Assigned by Linux
Aug 15, 2026 CVE-2026-72444 High 7.8 flow_dissector: check device type before reading ETH_ADDRS Assigned by Linux
Aug 15, 2026 CVE-2026-72443 Not yet scored ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Assigned by Linux
Aug 15, 2026 CVE-2026-72442 Critical 9.8 netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Assigned by Linux
Aug 15, 2026 CVE-2026-72441 Not yet scored ieee802154: fix kernel-infoleak in dgram_recvmsg() Assigned by Linux
Aug 15, 2026 CVE-2026-72440 High 7.1 md/raid1: fix writes_pending and barrier reference leaks on write failures Assigned by Linux
Aug 15, 2026 CVE-2026-72439 Not yet scored md/raid10: fix writes_pending leak on write request failures Assigned by Linux
Aug 15, 2026 CVE-2026-72438 High 7.5 md/raid10: fix writes_pending and barrier reference leaks on discard failures Assigned by Linux
Aug 15, 2026 CVE-2026-72437 Not yet scored md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Assigned by Linux
Aug 15, 2026 CVE-2026-72436 Critical 9.8 netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Assigned by Linux
Aug 15, 2026 CVE-2026-72435 High 7.8 netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Assigned by Linux
Aug 15, 2026 CVE-2026-72434 High 7.8 netfilter: ipset: make sure gc is properly stopped Assigned by Linux
Aug 15, 2026 CVE-2026-72433 Not yet scored netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Assigned by Linux
Aug 15, 2026 CVE-2026-72432 Not yet scored tpm_crb: Check ACPI_COMPANION() against NULL during probe Assigned by Linux
Aug 15, 2026 CVE-2026-72431 Not yet scored alloc_tag: fix use-after-free in /proc/allocinfo after module unload Assigned by Linux
Aug 15, 2026 CVE-2026-72430 Not yet scored net/sched: act_ct: fix nf_connlabels leak on two error paths Assigned by Linux
Aug 15, 2026 CVE-2026-72429 Critical 9.8 ipv6: ioam: fix type confusion of dst_entry Assigned by Linux
Aug 15, 2026 CVE-2026-72428 Not yet scored bpf: Fix stack slot index in nospec checks Assigned by Linux
Aug 15, 2026 CVE-2026-72427 High 7.8 bpf: Fix effective prog array index with BPF_F_PREORDER Assigned by Linux
Aug 15, 2026 CVE-2026-72426 High 8.4 bpf: Preserve pointer spill metadata during half-slot cleanup Assigned by Linux
Aug 15, 2026 CVE-2026-72425 High 7.1 ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Assigned by Linux
Aug 15, 2026 CVE-2026-72424 Not yet scored rtc: msc313: fix NULL deref in shared IRQ handler at probe Assigned by Linux
Aug 15, 2026 CVE-2026-72423 High 8.8 bpf: Guard conntrack opts error writes Assigned by Linux
Aug 15, 2026
Previous Page 72 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
