CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 06:40 UTC )
This week: 4,637 CVEs published, 314 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,637 Show in the list Critical, last 7 days 314 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2024-56712 Low 3.3 udmabuf: fix memory leak on last export_udmabuf() error path Assigned by Linux
Dec 29, 2024 CVE-2024-56703 High 7.5 ipv6: Fix soft lockups in fib6_select_path under high next hop churn Assigned by Linux
Dec 28, 2024 CVE-2024-56702 Medium 5.5 bpf: Mark raw_tp arguments with PTR_MAYBE_NULL Assigned by Linux
Dec 28, 2024 CVE-2024-56681 High 7.8 crypto: bcm - add error check in the ahash_hmac_init function Assigned by Linux
Dec 28, 2024 CVE-2024-56672 High 7.8 blk-cgroup: Fix UAF in blkcg_unpin_online() Assigned by Linux
Dec 27, 2024 CVE-2024-56664 High 7.8 bpf, sockmap: Fix race between element replace and close() Assigned by Linux
Dec 27, 2024 CVE-2024-56657 Medium 5.5 ALSA: control: Avoid WARN() for symlink errors Assigned by Linux
Dec 27, 2024 CVE-2024-56650 High 7.1 netfilter: x_tables: fix LED ID check in led_tg_check() Assigned by Linux
Dec 27, 2024 CVE-2024-56647 Medium 5.5 net: Fix icmp host relookup triggering ip_rt_bug Assigned by Linux
Dec 27, 2024 CVE-2024-56644 High 7.5 net/ipv6: release expired exception dst cached in socket Assigned by Linux
Dec 27, 2024 CVE-2024-56641 High 7.5 net/smc: initialize close_work early to avoid warning Assigned by Linux
Dec 27, 2024 CVE-2024-56637 High 7.3 netfilter: ipset: Hold module reference while requesting a module Assigned by Linux
Dec 27, 2024 CVE-2024-56631 High 7.8 scsi: sg: Fix slab-use-after-free read in sg_release() Assigned by Linux
Dec 27, 2024 CVE-2024-56624 High 7.8 iommufd: Fix out_fput in iommufd_fault_alloc() Assigned by Linux
Dec 27, 2024 CVE-2024-56606 High 7.8 af_packet: avoid erroring out after sock_init_data() in packet_create() Assigned by Linux
Dec 27, 2024 CVE-2024-56601 High 7.8 net: inet: do not leave a dangling sk pointer in inet_create() Assigned by Linux
Dec 27, 2024 CVE-2024-56600 High 7.8 net: inet6: do not leave a dangling sk pointer in inet6_create() Assigned by Linux
Dec 27, 2024 CVE-2024-56570 High 7.8 ovl: Filter invalid inodes with missing lookup function Assigned by Linux
Dec 27, 2024 CVE-2024-56569 Medium 5.5 ftrace: Fix regression with module command in stack_trace_filter Assigned by Linux
Dec 27, 2024 CVE-2024-56549 High 7.8 cachefiles: Fix NULL pointer dereference in object->file Assigned by Linux
Dec 27, 2024 CVE-2024-56544 Medium 5.5 udmabuf: change folios array from kmalloc to kvmalloc Assigned by Linux
Dec 27, 2024 CVE-2024-53219 Medium 5.5 virtiofs: use pages instead of pointer for kernel direct IO Assigned by Linux
Dec 27, 2024 CVE-2024-53217 High 7.5 NFSD: Prevent NULL dereference in nfsd4_process_cb_update() Assigned by Linux
Dec 27, 2024 CVE-2024-53209 Critical 9.8 bnxt_en: Fix receive ring space parameters when XDP is active Assigned by Linux
Dec 27, 2024 CVE-2024-53201 Medium 5.5 drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe Assigned by Linux
Dec 27, 2024 CVE-2024-53197 Known exploited
High 7.8 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices Assigned by Linux
Dec 27, 2024 CVE-2024-53187 Medium 5.5 io_uring: check for overflows in io_pin_pages Assigned by Linux
Dec 27, 2024 CVE-2024-53170 High 7.8 block: fix uaf for flush rq while iterating tags Assigned by Linux
Dec 27, 2024 CVE-2024-53167 High 7.5 nfs/blocklayout: Don't attempt unregister for invalid block device Assigned by Linux
Dec 27, 2024 CVE-2024-53166 High 7.8 block, bfq: fix bfqq uaf in bfq_limit_depth() Assigned by Linux
Dec 27, 2024 CVE-2024-53165 High 7.4 sh: intc: Fix use-after-free bug in register_intc_controller() Assigned by Linux
Dec 27, 2024 CVE-2024-53164 High 7.8 net: sched: fix ordering of qlen adjustment Assigned by Linux
Dec 27, 2024 CVE-2024-53150 Known exploited
High 7.1 ALSA: usb-audio: Fix out of bounds reads when finding clock sources Assigned by Linux
Dec 24, 2024 CVE-2024-53147 High 7.8 exfat: fix out-of-bounds access of directory entries Assigned by Linux
Dec 24, 2024 CVE-2024-53144 High 8.8 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE Assigned by Linux
Dec 17, 2024 CVE-2024-53141 High 7.8 netfilter: ipset: add missing range check in bitmap_ip_uadt Assigned by Linux
Dec 6, 2024 CVE-2024-53140 High 7.8 netlink: terminate outstanding dump on socket close Assigned by Linux
Dec 4, 2024 CVE-2024-53138 Critical 9.8 net/mlx5e: kTLS, Fix incorrect page refcounting Assigned by Linux
Dec 4, 2024 CVE-2024-53135 High 8.8 KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Assigned by Linux
Dec 4, 2024 CVE-2024-53125 High 7.8 bpf: sync_linked_regs() must preserve subreg_def Assigned by Linux
Dec 4, 2024 CVE-2024-53124 High 7.5 net: fix data-races around sk->sk_forward_alloc Assigned by Linux
Dec 2, 2024 CVE-2024-53122 High 7.5 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Assigned by Linux
Dec 2, 2024 CVE-2024-53114 Medium 5.5 x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client Assigned by Linux
Dec 2, 2024 CVE-2024-53104 Known exploited
High 7.8 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format Assigned by Linux
Dec 2, 2024 CVE-2024-53101 Medium 5.5 fs: Fix uninitialized value issue in from_kuid and from_kgid Assigned by Linux
Nov 25, 2024 CVE-2024-53090 High 7.5 afs: Fix lock recursion Assigned by Linux
Nov 21, 2024 CVE-2024-53059 High 7.1 wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() Assigned by Linux
Nov 19, 2024 CVE-2024-53057 High 7.8 net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Assigned by Linux
Nov 19, 2024 CVE-2024-53051 Medium 5.5 drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability Assigned by Linux
Nov 19, 2024 CVE-2024-53042 Medium 5.5 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() Assigned by Linux
Nov 19, 2024
Previous Page 80 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
