CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 06:00 UTC )
This week: 4,407 CVEs published, 332 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,407 Show in the list Critical, last 7 days 332 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72121 High 8.8 can: bcm: add locking when updating filter and timer values Assigned by Linux
Aug 15, 2026 CVE-2026-72120 High 7.8 can: bcm: add missing rcu list annotations and operations Assigned by Linux
Aug 15, 2026 CVE-2026-72119 High 7.8 can: bcm: extend bcm_tx_lock usage for data and timer updates Assigned by Linux
Aug 15, 2026 CVE-2026-72118 Not yet scored can: bcm: fix CAN frame rx/tx statistics Assigned by Linux
Aug 15, 2026 CVE-2026-72117 Not yet scored can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() Assigned by Linux
Aug 15, 2026 CVE-2026-72116 High 7.1 can: bcm: fix stale rx/tx ops after device removal Assigned by Linux
Aug 15, 2026 CVE-2026-72115 High 8.1 can: bcm: track a single source interface for ANYDEV timeout/throttle ops Assigned by Linux
Aug 15, 2026 CVE-2026-72114 High 7.8 can: bcm: validate frame length in bcm_rx_setup() for RTR replies Assigned by Linux
Aug 15, 2026 CVE-2026-72113 High 7.8 can: bcm: add missing device refcount for CAN filter removal Assigned by Linux
Aug 15, 2026 CVE-2026-72112 High 7.8 io_uring/bpf-ops: reject re-registration of an already-bound ops Assigned by Linux
Aug 15, 2026 CVE-2026-72111 High 8.8 bpf: Reset register bounds before narrowing retval range in check_mem_access() Assigned by Linux
Aug 15, 2026 CVE-2026-72110 High 7.8 bpf,fork: wipe ->bpf_storage before bailouts that access it Assigned by Linux
Aug 15, 2026 CVE-2026-72109 High 7.8 net: sparx5: unregister blocking notifier on init failure Assigned by Linux
Aug 15, 2026 CVE-2026-72108 High 7.8 dm thin metadata: fix metadata snapshot consistency on commit failure Assigned by Linux
Aug 15, 2026 CVE-2026-72107 High 8.8 dm era: fix out-of-bounds memory access for non-zero start sector Assigned by Linux
Aug 15, 2026 CVE-2026-72106 Not yet scored dm-ioctl: fix a possible overflow in list_version_get_info Assigned by Linux
Aug 15, 2026 CVE-2026-72105 High 7.8 dm-log: fix a bitset_size overflow on 32bit machines Assigned by Linux
Aug 15, 2026 CVE-2026-72104 Not yet scored dm-pcache: reject option groups without values Assigned by Linux
Aug 15, 2026 CVE-2026-72103 High 7.3 dm: avoid leaking the caller's thread keyring via the table device file Assigned by Linux
Aug 15, 2026 CVE-2026-72102 High 7.8 dm_early_create: fix freeing used table on dm_resume failure Assigned by Linux
Aug 15, 2026 CVE-2026-72101 Not yet scored dm-integrity: fix leaking uninitialized kernel memory Assigned by Linux
Aug 15, 2026 CVE-2026-72100 High 8.8 dm-integrity: fix a bug if the bio is out of limits Assigned by Linux
Aug 15, 2026 CVE-2026-72099 High 7.1 dm-integrity: don't increment hash_offset twice Assigned by Linux
Aug 15, 2026 CVE-2026-72098 Critical 9.8 dm-verity: fix buffer overflow in FEC calculation Assigned by Linux
Aug 15, 2026 CVE-2026-72097 Not yet scored dm-verity: fix a possible NULL pointer dereference Assigned by Linux
Aug 15, 2026 CVE-2026-72096 Not yet scored dm-verity: make error counter atomic Assigned by Linux
Aug 15, 2026 CVE-2026-72095 High 7.8 dma-fence: Make dma_fence_dedup_array() robust against 0-count input Assigned by Linux
Aug 15, 2026 CVE-2026-72094 Not yet scored dma-buf: dma-fence: Fix potential NULL pointer dereference Assigned by Linux
Aug 15, 2026 CVE-2026-72093 High 7.8 accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() Assigned by Linux
Aug 15, 2026 CVE-2026-72092 Not yet scored accel/amdxdna: reject command submission on devices without a submit op Assigned by Linux
Aug 15, 2026 CVE-2026-72091 Not yet scored accel/amdxdna: reject user command submission without a command BO Assigned by Linux
Aug 15, 2026 CVE-2026-72090 High 7.8 accel/amdxdna: Use caller client for debug BO sync Assigned by Linux
Aug 15, 2026 CVE-2026-72089 High 7.1 accel/ivpu: Reject firmware log with size smaller than header Assigned by Linux
Aug 15, 2026 CVE-2026-72088 Not yet scored scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Assigned by Linux
Aug 15, 2026 CVE-2026-72087 Not yet scored scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Assigned by Linux
Aug 15, 2026 CVE-2026-72086 Not yet scored scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Assigned by Linux
Aug 15, 2026 CVE-2026-72085 Critical 9.3 scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Assigned by Linux
Aug 15, 2026 CVE-2026-72084 Critical 9.8 scsi: target: Bound PR-OUT TransportID parsing to the received buffer Assigned by Linux
Aug 15, 2026 CVE-2026-72083 Critical 9.8 scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Assigned by Linux
Aug 15, 2026 CVE-2026-72082 Not yet scored scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Assigned by Linux
Aug 15, 2026 CVE-2026-72081 Not yet scored scsi: elx: efct: Fix I/O leak on unsupported additional CDB Assigned by Linux
Aug 15, 2026 CVE-2026-72080 High 7.8 fs/resctrl: Fix use-after-free during unmount Assigned by Linux
Aug 15, 2026 CVE-2026-72079 Not yet scored Input: ims-pcu - fix use-after-free and double-free in disconnect Assigned by Linux
Aug 15, 2026 CVE-2026-72078 Not yet scored Input: ims-pcu - validate control endpoint type Assigned by Linux
Aug 15, 2026 CVE-2026-72077 Not yet scored Input: ims-pcu - fix firmware leak in async update Assigned by Linux
Aug 15, 2026 CVE-2026-72076 Not yet scored Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Assigned by Linux
Aug 15, 2026 CVE-2026-72075 Not yet scored Input: ims-pcu - fix race condition in reset_device sysfs callback Assigned by Linux
Aug 15, 2026 CVE-2026-72074 Not yet scored Input: ims-pcu - fix type confusion in CDC union descriptor parsing Assigned by Linux
Aug 15, 2026 CVE-2026-72073 Not yet scored mmc: vub300: fix use-after-free on probe failure Assigned by Linux
Aug 15, 2026 CVE-2026-72072 High 7.8 net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Assigned by Linux
Aug 15, 2026
Previous Page 79 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
