CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 05:10 UTC )
This week: 4,449 CVEs published, 334 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,449 Show in the list Critical, last 7 days 334 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72171 High 7.8 mtd: slram: remove failed entries from the device list Assigned by Linux
Aug 15, 2026 CVE-2026-72170 High 7.8 9p: skip nlink update in cacheless mode to fix WARN_ON Assigned by Linux
Aug 15, 2026 CVE-2026-72169 Not yet scored kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES Assigned by Linux
Aug 15, 2026 CVE-2026-72168 Not yet scored mtd: maps: vmu-flash: fix fault in unaligned fixup Assigned by Linux
Aug 15, 2026 CVE-2026-72167 Not yet scored mtd: rawnand: pl353: fix probe resource allocation Assigned by Linux
Aug 15, 2026 CVE-2026-72166 Not yet scored net/9p: fix infinite loop in p9_client_rpc on fatal signal Assigned by Linux
Aug 15, 2026 CVE-2026-72165 High 7.8 mtd: rawnand: fix condition in 'nand_select_target()' Assigned by Linux
Aug 15, 2026 CVE-2026-72164 High 7.8 ocfs2: avoid moving extents to occupied clusters Assigned by Linux
Aug 15, 2026 CVE-2026-72163 Not yet scored ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Assigned by Linux
Aug 15, 2026 CVE-2026-72162 High 7.8 ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec Assigned by Linux
Aug 15, 2026 CVE-2026-72161 Not yet scored ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Assigned by Linux
Aug 15, 2026 CVE-2026-72160 High 8.8 ocfs2: reject dinodes with non-canonical i_mode type Assigned by Linux
Aug 15, 2026 CVE-2026-72159 Not yet scored ocfs2: reject non-inline dinodes with i_size and zero i_clusters Assigned by Linux
Aug 15, 2026 CVE-2026-72158 Not yet scored fpga: dfl: add bounds check in dfh_get_param_size() Assigned by Linux
Aug 15, 2026 CVE-2026-72157 High 8.8 net: thunderbolt: Fix frags[] overflow by bounding frame_count Assigned by Linux
Aug 15, 2026 CVE-2026-72156 Not yet scored fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Assigned by Linux
Aug 15, 2026 CVE-2026-72155 Not yet scored mtd: spi-nor: swp: Improve locking user experience Assigned by Linux
Aug 15, 2026 CVE-2026-72154 High 7.8 openrisc: Fix jump_label smp syncing Assigned by Linux
Aug 15, 2026 CVE-2026-72153 Not yet scored irqchip/crossbar: Use correct index in crossbar_domain_free() Assigned by Linux
Aug 15, 2026 CVE-2026-72152 Not yet scored tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Assigned by Linux
Aug 15, 2026 CVE-2026-72151 High 8.4 tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt Assigned by Linux
Aug 15, 2026 CVE-2026-72150 Not yet scored sunrpc: fix uninitialized xprt_create_args structure Assigned by Linux
Aug 15, 2026 CVE-2026-72149 High 7.5 dmaengine: tegra: Fix burst size calculation Assigned by Linux
Aug 15, 2026 CVE-2026-72148 High 8.8 dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Assigned by Linux
Aug 15, 2026 CVE-2026-72147 Not yet scored dmaengine: dw-edma-pcie: Reject devices without driver data Assigned by Linux
Aug 15, 2026 CVE-2026-72146 High 8.4 dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Assigned by Linux
Aug 15, 2026 CVE-2026-72145 Not yet scored platform/x86/intel/tpmi: use cleanup helpers in mem_write() Assigned by Linux
Aug 15, 2026 CVE-2026-72144 High 7.8 platform/x86: dell-laptop: fix missing cleanups in init error path Assigned by Linux
Aug 15, 2026 CVE-2026-72143 High 7.1 platform/x86: ISST: Restore SST-PP control to all domains Assigned by Linux
Aug 15, 2026 CVE-2026-72142 Not yet scored i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Assigned by Linux
Aug 15, 2026 CVE-2026-72141 High 7.5 i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) Assigned by Linux
Aug 15, 2026 CVE-2026-72140 Not yet scored i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Assigned by Linux
Aug 15, 2026 CVE-2026-72139 Critical 9.8 tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Assigned by Linux
Aug 15, 2026 CVE-2026-72138 Not yet scored xen/gntdev: fix error handling in ioctl Assigned by Linux
Aug 15, 2026 CVE-2026-72137 Critical 9.8 xfrm: nat_keepalive: avoid double free on send error Assigned by Linux
Aug 15, 2026 CVE-2026-72136 High 8.8 xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 15, 2026 CVE-2026-72135 High 7.8 tpm: Make the TPM character devices non-seekable Assigned by Linux
Aug 15, 2026 CVE-2026-72134 High 7.8 spi: imx: reconfigure for PIO when DMA cannot be started Assigned by Linux
Aug 15, 2026 CVE-2026-72133 High 8.4 spi: uniphier: Fix completion initialization order before devm_request_irq() Assigned by Linux
Aug 15, 2026 CVE-2026-72132 Not yet scored NFS: Charge unstable writes by request size, not folio size Assigned by Linux
Aug 15, 2026 CVE-2026-72131 Not yet scored nvme-apple: Prevent shared tags across queues on Apple A11 Assigned by Linux
Aug 15, 2026 CVE-2026-72130 Critical 9.8 nvmet-auth: reject short AUTH_RECEIVE buffers Assigned by Linux
Aug 15, 2026 CVE-2026-72129 Critical 9.8 nvmet-rdma: handle inline data with a nonzero offset Assigned by Linux
Aug 15, 2026 CVE-2026-72128 Not yet scored nvmet: fix refcount leak in nvmet_sq_create() Assigned by Linux
Aug 15, 2026 CVE-2026-72127 Not yet scored netdev-genl: report NAPI thread PID in the caller's pid namespace Assigned by Linux
Aug 15, 2026 CVE-2026-72126 High 7.8 can: isotp: use unconditional synchronize_rcu() in isotp_release() Assigned by Linux
Aug 15, 2026 CVE-2026-72125 High 7.8 can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Assigned by Linux
Aug 15, 2026 CVE-2026-72124 High 8.8 can: isotp: serialize TX state transitions under so->rx_lock Assigned by Linux
Aug 15, 2026 CVE-2026-72123 High 7.8 can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Assigned by Linux
Aug 15, 2026 CVE-2026-72122 High 7.3 can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Assigned by Linux
Aug 15, 2026
Previous Page 78 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
