CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 06:40 UTC )
This week: 4,406 CVEs published, 331 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,406 Show in the list Critical, last 7 days 331 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72071 High 7.8 tracing/user_events: Fix use-after-free in user_event_mm_dup() Assigned by Linux
Aug 15, 2026 CVE-2026-72070 Not yet scored wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Assigned by Linux
Aug 15, 2026 CVE-2026-72069 Critical 9.8 locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Assigned by Linux
Aug 15, 2026 CVE-2026-72068 Not yet scored posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Assigned by Linux
Aug 15, 2026 CVE-2026-72067 High 7.8 cpu: hotplug: Preserve per instance callback errors Assigned by Linux
Aug 15, 2026 CVE-2026-72066 High 7.8 cpu: hotplug: Bound hotplug states sysfs output Assigned by Linux
Aug 15, 2026 CVE-2026-72065 Critical 9.8 net: mana: Validate the packet length reported by the NIC Assigned by Linux
Aug 15, 2026 CVE-2026-72064 Critical 9.8 net: mana: Sync page pool RX frags for CPU Assigned by Linux
Aug 15, 2026 CVE-2026-72063 Not yet scored gpio: tegra: do not call pinctrl for GPIO direction Assigned by Linux
Aug 15, 2026 CVE-2026-72062 Not yet scored gpio: mt7621: avoid corruption of shared interrupt trigger state Assigned by Linux
Aug 15, 2026 CVE-2026-72061 High 8.8 net: sit: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 15, 2026 CVE-2026-72060 Not yet scored net: ethernet: ti: icssg: guard PA stat lookups Assigned by Linux
Aug 15, 2026 CVE-2026-72059 Not yet scored net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Assigned by Linux
Aug 15, 2026 CVE-2026-72058 Not yet scored net: ixp4xx_hss: fix duplicate HDLC netdev allocation Assigned by Linux
Aug 15, 2026 CVE-2026-72057 High 8.2 net/sched: act_ct: preserve tc_skb_cb across defragmentation Assigned by Linux
Aug 15, 2026 CVE-2026-72056 Not yet scored net: ena: clean up XDP TX queues when regular TX setup fails Assigned by Linux
Aug 15, 2026 CVE-2026-72055 High 8.8 net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 15, 2026 CVE-2026-72054 High 8.8 net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 15, 2026 CVE-2026-72053 High 8.8 net: ipip: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 15, 2026 CVE-2026-72052 High 8.8 net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 15, 2026 CVE-2026-72051 High 8.8 net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Assigned by Linux
Aug 15, 2026 CVE-2026-72050 Not yet scored octeontx2-af: Free BPID bitmap on setup failure Assigned by Linux
Aug 15, 2026 CVE-2026-72049 High 7.1 ieee802154: admin-gate legacy LLSEC dump operations Assigned by Linux
Aug 15, 2026 CVE-2026-72048 Not yet scored ieee802154: ca8210: fix cas_ctl leak on spi_async failure Assigned by Linux
Aug 15, 2026 CVE-2026-72047 Not yet scored ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Assigned by Linux
Aug 15, 2026 CVE-2026-72046 Critical 9.8 gve: fix header buffer corruption with header-split and HW-GRO Assigned by Linux
Aug 15, 2026 CVE-2026-72045 High 8.8 octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF Assigned by Linux
Aug 15, 2026 CVE-2026-72043 High 7.1 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Assigned by Linux
Aug 15, 2026 CVE-2026-72042 High 7.8 ipmi: Fix user refcount underflow in event delivery Assigned by Linux
Aug 15, 2026 CVE-2026-72041 Critical 9.8 espintcp: use sk_msg_free_partial to fix partial send Assigned by Linux
Aug 15, 2026 CVE-2026-72040 Not yet scored ipmi: fix refcount leak in i_ipmi_request() Assigned by Linux
Aug 15, 2026 CVE-2026-72039 Not yet scored bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Assigned by Linux
Aug 15, 2026 CVE-2026-72038 Not yet scored net: liquidio: fix BAR resource leak on PF number failure Assigned by Linux
Aug 15, 2026 CVE-2026-72037 Not yet scored net: lan743x: Initialize eth_syslock spinlock before use Assigned by Linux
Aug 15, 2026 CVE-2026-72036 High 7.8 net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Assigned by Linux
Aug 15, 2026 CVE-2026-72035 High 8.2 net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Assigned by Linux
Aug 15, 2026 CVE-2026-72034 High 7.8 fhandle: reject detached mounts in capable_wrt_mount() Assigned by Linux
Aug 15, 2026 CVE-2026-72033 Critical 9.8 orangefs: keep the readdir entry size 64-bit in fill_from_part() Assigned by Linux
Aug 15, 2026 CVE-2026-72032 Not yet scored net/mlx5: HWS, fix matcher leak on resize target setup failure Assigned by Linux
Aug 15, 2026 CVE-2026-72031 Not yet scored ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD Assigned by Linux
Aug 15, 2026 CVE-2026-72030 Not yet scored ata: libata-core: Reject an invalid concurrent positioning ranges count Assigned by Linux
Aug 15, 2026 CVE-2026-72029 High 8.8 net: wwan: iosm: bound device offsets in the MUX downlink decoder Assigned by Linux
Aug 15, 2026 CVE-2026-72028 Not yet scored riscv: probes: save original sp in rethook trampoline Assigned by Linux
Aug 15, 2026 CVE-2026-72027 High 7.8 mm/compaction: handle free_pages_prepare() properly in compaction_free() Assigned by Linux
Aug 15, 2026 CVE-2026-72026 Not yet scored irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure Assigned by Linux
Aug 15, 2026 CVE-2026-72025 Not yet scored s390/monwriter: Reject buffer reuse with different data length Assigned by Linux
Aug 15, 2026 CVE-2026-72024 High 7.8 mac802154: remove interfaces with RCU list deletion Assigned by Linux
Aug 15, 2026 CVE-2026-72023 Not yet scored octeontx2-pf: fix SQB pointer leak on init failure Assigned by Linux
Aug 15, 2026 CVE-2026-72022 Not yet scored llc: fix SAP refcount leak in llc_ui_autobind() Assigned by Linux
Aug 15, 2026 CVE-2026-72021 High 8.2 ipvs: use parsed transport offset in SCTP state lookup Assigned by Linux
Aug 15, 2026
Previous Page 80 of 180 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
