CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 07:30 UTC )
This week: 4,391 CVEs published, 330 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,391 Show in the list Critical, last 7 days 330 Show in the list Healthcare-tagged, last 7 days 10 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-72020 Critical 9.8 ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Assigned by Linux
Aug 15, 2026 CVE-2026-72019 High 7.3 macsec: don't read an unset MAC header in macsec_encrypt() Assigned by Linux
Aug 15, 2026 CVE-2026-72018 High 7.8 dibs: loopback: validate offset and size in move_data() Assigned by Linux
Aug 15, 2026 CVE-2026-72017 Not yet scored net: macb: drop in-flight Tx SKBs on close Assigned by Linux
Aug 15, 2026 CVE-2026-72016 Not yet scored cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() Assigned by Linux
Aug 15, 2026 CVE-2026-72015 Not yet scored fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Assigned by Linux
Aug 15, 2026 CVE-2026-72014 Critical 9.8 drbd: reject data replies with an out-of-range payload size Assigned by Linux
Aug 15, 2026 CVE-2026-72013 Not yet scored riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Assigned by Linux
Aug 15, 2026 CVE-2026-72012 High 7.8 tracing/osnoise: Call synchronize_rcu() when unregistering Assigned by Linux
Aug 15, 2026 CVE-2026-72011 Not yet scored s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() Assigned by Linux
Aug 15, 2026 CVE-2026-72010 Not yet scored cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Assigned by Linux
Aug 15, 2026 CVE-2026-72009 High 7.8 pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI Assigned by Linux
Aug 15, 2026 CVE-2026-72008 Not yet scored pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Assigned by Linux
Aug 15, 2026 CVE-2026-72007 Not yet scored pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Assigned by Linux
Aug 15, 2026 CVE-2026-72006 Not yet scored net/mlx5: free mlx5_st_idx_data on final dealloc Assigned by Linux
Aug 15, 2026 CVE-2026-72005 High 7.8 wifi: rt2x00: avoid full teardown before work setup in probe Assigned by Linux
Aug 15, 2026 CVE-2026-72004 Not yet scored wifi: mac80211: fix memory leak in ieee80211_register_hw() Assigned by Linux
Aug 15, 2026 CVE-2026-72003 High 8.8 wifi: brcmfmac: cyw: fix heap overflow on a short auth frame Assigned by Linux
Aug 15, 2026 CVE-2026-68479 High 7.8 Bluetooth: btrtl: validate firmware patch bounds Assigned by Linux
Aug 15, 2026 CVE-2026-68478 Not yet scored memstick: ms_block: reject a card that reports too many blocks Assigned by Linux
Aug 15, 2026 CVE-2026-68477 Critical 9.8 ipvs: fix more places with wrong ipv6 transport offsets Assigned by Linux
Aug 15, 2026 CVE-2026-68476 Critical 9.8 ipvs: reload ip header after head reallocation Assigned by Linux
Aug 15, 2026 CVE-2026-68475 Not yet scored reset: sunxi: fix memory region leak on ioremap failure Assigned by Linux
Aug 15, 2026 CVE-2026-68474 High 7.8 powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Assigned by Linux
Aug 15, 2026 CVE-2026-68473 High 7.8 powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() Assigned by Linux
Aug 15, 2026 CVE-2026-68472 High 8.1 wifi: cfg80211: validate EHT MLE before MLD ID read Assigned by Linux
Aug 15, 2026 CVE-2026-68471 High 8.8 wifi: ieee80211: validate MLE common info length Assigned by Linux
Aug 15, 2026 CVE-2026-68470 High 8.8 wifi: mac80211: validate extension-frame layout before RX Assigned by Linux
Aug 15, 2026 CVE-2026-68469 Not yet scored wifi: mwifiex: fix permanently busy scans after multiple roam iterations Assigned by Linux
Aug 15, 2026 CVE-2026-68468 Not yet scored mtd: virt-concat: free duplicate generated name Assigned by Linux
Aug 15, 2026 CVE-2026-68467 High 7.8 mtd: mchp23k256: use SPI match data for chip caps Assigned by Linux
Aug 15, 2026 CVE-2026-68466 High 8.8 mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Assigned by Linux
Aug 15, 2026 CVE-2026-68465 Not yet scored mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore Assigned by Linux
Aug 15, 2026 CVE-2026-68464 Not yet scored mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt Assigned by Linux
Aug 15, 2026 CVE-2026-68463 Not yet scored mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Assigned by Linux
Aug 15, 2026 CVE-2026-68462 High 7.8 bpf: Reject negative const offsets for buffer pointers Assigned by Linux
Aug 15, 2026 CVE-2026-68461 High 7.8 device property: initialize the remaining fields of fwnode_handle in fwnode_init() Assigned by Linux
Aug 15, 2026 CVE-2026-68460 Not yet scored f2fs: fix potential deadlock in f2fs_balance_fs() Assigned by Linux
Aug 15, 2026 CVE-2026-68459 Not yet scored f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Assigned by Linux
Aug 15, 2026 CVE-2026-68458 High 7.8 binder: cache secctx size before release zeroes it Assigned by Linux
Aug 15, 2026 CVE-2026-68457 Critical 9.1 ksmbd: use opener credentials for FSCTL mutations Assigned by Linux
Aug 15, 2026 CVE-2026-68456 Not yet scored usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Assigned by Linux
Aug 15, 2026 CVE-2026-68455 Not yet scored liveupdate: validate session type before performing operation Assigned by Linux
Aug 15, 2026 CVE-2026-68454 High 8.8 KVM: s390: pci: Fix handling of AIF enable without AISB Assigned by Linux
Aug 13, 2026 CVE-2026-68453 High 7.1 s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Assigned by Linux
Aug 13, 2026 CVE-2026-68452 High 7.8 s390/zcrypt: Validate length for CCA AES cipher key requests Assigned by Linux
Aug 13, 2026 CVE-2026-68451 High 7.8 s390/zcrypt: Validate length for CCA ECC private key requests Assigned by Linux
Aug 13, 2026 CVE-2026-68450 Not yet scored btrfs: free mapping node on duplicate reloc root insert Assigned by Linux
Aug 12, 2026 CVE-2026-68449 Not yet scored ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning Assigned by Linux
Aug 12, 2026 CVE-2026-68448 Not yet scored ovl: check access to copy_file_range source with src mounter creds Assigned by Linux
Aug 12, 2026
Previous Page 81 of 181 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
