CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 02:00 UTC )
What this means for you
This week: 4,477 CVEs published, 336 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,477 Show in the list Critical, last 7 days 336 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72372 High 7.8 afs: Fix lack of locking around modifications of net->cells_dyn_ino Assigned by Linux
Aug 15, 2026 CVE-2026-72371 High 7.8 afs: Fix the volume AFS_VOLUME_RM_TREE is set on Assigned by Linux
Aug 15, 2026 CVE-2026-72370 Not yet scored iomap: release pages on atomic dio size mismatch Assigned by Linux
Aug 15, 2026 CVE-2026-72369 High 7.8 minix: avoid overflow in bitmap block count calculation Assigned by Linux
Aug 15, 2026 CVE-2026-72368 High 7.8 cachefiles: Fix double unlock in nomem_d_alloc error path Assigned by Linux
Aug 15, 2026 CVE-2026-72367 High 8.8 iomap: guard io_size EOF trim against concurrent truncate underflow Assigned by Linux
Aug 15, 2026 CVE-2026-72366 Critical 9.8 netfs: Fix netfs_create_write_req() to handle async cache object creation Assigned by Linux
Aug 15, 2026 CVE-2026-72365 Not yet scored netfs: Fix writethrough to use collection offload Assigned by Linux
Aug 15, 2026 CVE-2026-72364 High 7.1 netfs: Fix writeback error handling Assigned by Linux
Aug 15, 2026 CVE-2026-72363 Not yet scored netfs: Fix folio state after ENOMEM whilst under writeback iteration Assigned by Linux
Aug 15, 2026 CVE-2026-72362 Not yet scored drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() Assigned by Linux
Aug 15, 2026 CVE-2026-72361 Not yet scored drm/xe/hw_engine: Fix double-free of managed BO in error path Assigned by Linux
Aug 15, 2026 CVE-2026-72360 High 8.4 drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Assigned by Linux
Aug 15, 2026 CVE-2026-72359 Not yet scored drm/xe: fix NPD in bo_meminfo() Assigned by Linux
Aug 15, 2026 CVE-2026-72358 High 7.8 drm/xe/pt: prevent invalid cursor access for purged BOs Assigned by Linux
Aug 15, 2026 CVE-2026-72357 High 7.8 uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline Assigned by Linux
Aug 15, 2026 CVE-2026-72356 High 7.5 cifs: Fix missing credit release on failure in cifs_issue_read() Assigned by Linux
Aug 15, 2026 CVE-2026-72355 Critical 9.8 netfs: Fix barriering when walking subrequest list Assigned by Linux
Aug 15, 2026 CVE-2026-72354 High 8.8 ntfs: avoid stale runlist element dereference in MFT writeback Assigned by Linux
Aug 15, 2026 CVE-2026-72353 High 8.8 ntfs: avoid stale runlist element dereference in fallocate Assigned by Linux
Aug 15, 2026 CVE-2026-72352 High 7.8 HID: bpf: Fix hid_bpf_get_data() range check Assigned by Linux
Aug 15, 2026 CVE-2026-72351 Critical 9.8 gue: validate REMCSUM private option length Assigned by Linux
Aug 15, 2026 CVE-2026-72350 High 7.8 netfilter: xt_u32: reject invalid shift counts Assigned by Linux
Aug 15, 2026 CVE-2026-72349 Not yet scored netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Assigned by Linux
Aug 15, 2026 CVE-2026-72348 Critical 9.1 netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Assigned by Linux
Aug 15, 2026 CVE-2026-72347 High 7.3 netfilter: xt_connmark: reject invalid shift parameters Assigned by Linux
Aug 15, 2026 CVE-2026-72346 Not yet scored platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume Assigned by Linux
Aug 15, 2026 CVE-2026-72345 High 7.8 net/mlx5: LAG, Fix off-by-one in single-FDB error rollback Assigned by Linux
Aug 15, 2026 CVE-2026-72344 High 7.8 net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable Assigned by Linux
Aug 15, 2026 CVE-2026-72343 High 8.4 net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Assigned by Linux
Aug 15, 2026 CVE-2026-72342 High 8.4 net/mlx5e: Fix HV VHCA stats agent registration race Assigned by Linux
Aug 15, 2026 CVE-2026-72341 Not yet scored net/mlx5e: Fix publication race for priv->channel_stats[] Assigned by Linux
Aug 15, 2026 CVE-2026-72340 High 7.8 net: microchip: vcap: fix races on the shared Super VCAP block Assigned by Linux
Aug 15, 2026 CVE-2026-72339 Critical 9.8 qede: fix off-by-one in BD ring consumption on build_skb failure Assigned by Linux
Aug 15, 2026 CVE-2026-72338 High 7.8 net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Assigned by Linux
Aug 15, 2026 CVE-2026-72337 Not yet scored Bluetooth: 6lowpan: avoid untracked enable work Assigned by Linux
Aug 15, 2026 CVE-2026-72336 Not yet scored Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Assigned by Linux
Aug 15, 2026 CVE-2026-72335 High 7.8 Bluetooth: MGMT: Fix adv monitor add failure cleanup Assigned by Linux
Aug 15, 2026 CVE-2026-72334 High 8.8 Bluetooth: ISO: fix malformed ISO_END/CONT handling Assigned by Linux
Aug 15, 2026 CVE-2026-72333 Not yet scored Bluetooth: L2CAP: fix tx ident leak for commands without a response Assigned by Linux
Aug 15, 2026 CVE-2026-72332 Not yet scored accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() Assigned by Linux
Aug 15, 2026 CVE-2026-72331 High 7.8 accel/amdxdna: Fix VMA access race Assigned by Linux
Aug 15, 2026 CVE-2026-72330 High 7.5 net/tls: Consume empty data records in tls_sw_read_sock() Assigned by Linux
Aug 15, 2026 CVE-2026-72329 Critical 9.3 net/liquidio: drop cached VF pci_dev LUT Assigned by Linux
Aug 15, 2026 CVE-2026-72328 High 7.8 accel/amdxdna: Fix potential amdxdna_umap lifetime race Assigned by Linux
Aug 15, 2026 CVE-2026-72327 Not yet scored drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Assigned by Linux
Aug 15, 2026 CVE-2026-72326 Not yet scored net/sched: cake: reject overhead values that underflow length Assigned by Linux
Aug 15, 2026 CVE-2026-72325 Not yet scored perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Assigned by Linux
Aug 15, 2026 CVE-2026-72324 Not yet scored gpio: mvebu: free generic chips on unbind Assigned by Linux
Aug 15, 2026 CVE-2026-72323 Critical 9.8 ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Assigned by Linux
Aug 15, 2026
Previous Page 74 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.