CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 08:00 UTC )
What this means for you
This week: 4,629 CVEs published, 315 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,629 Show in the list Critical, last 7 days 315 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2024-49952 High 7.8 netfilter: nf_tables: prevent nf_skb_duplicated corruption Assigned by Linux
Oct 21, 2024 CVE-2024-49949 Medium 5.5 net: avoid potential underflow in qdisc_pkt_len_init() with UFO Assigned by Linux
Oct 21, 2024 CVE-2024-49948 Medium 5.5 net: add more sanity checks to qdisc_pkt_len_init() Assigned by Linux
Oct 21, 2024 CVE-2024-49945 Medium 5.5 net/ncsi: Disable the ncsi work before freeing the associated structure Assigned by Linux
Oct 21, 2024 CVE-2024-49944 Medium 5.5 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start Assigned by Linux
Oct 21, 2024 CVE-2024-49940 High 7.8 l2tp: prevent possible tunnel refcount underflow Assigned by Linux
Oct 21, 2024 CVE-2024-49938 Medium 5.5 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit Assigned by Linux
Oct 21, 2024 CVE-2024-49930 High 8.8 wifi: ath11k: fix array out-of-bound access in SoC stats Assigned by Linux
Oct 21, 2024 CVE-2024-49921 Medium 5.5 drm/amd/display: Check null pointers before used Assigned by Linux
Oct 21, 2024 CVE-2024-49920 Medium 5.5 drm/amd/display: Check null pointers before multiple uses Assigned by Linux
Oct 21, 2024 CVE-2024-49918 Medium 5.5 drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer Assigned by Linux
Oct 21, 2024 CVE-2024-49903 High 7.0 jfs: Fix uaf in dbFreeBits Assigned by Linux
Oct 21, 2024 CVE-2024-49902 High 7.8 jfs: check if leafidx greater than num leaves per dmap tree Assigned by Linux
Oct 21, 2024 CVE-2024-49900 High 7.1 jfs: Fix uninit-value access of new_ea in ea_buffer Assigned by Linux
Oct 21, 2024 CVE-2024-49894 High 7.1 drm/amd/display: Fix index out of bounds in degamma hardware format translation Assigned by Linux
Oct 21, 2024 CVE-2024-49892 Medium 5.5 drm/amd/display: Initialize get_bytes_per_element's default to 1 Assigned by Linux
Oct 21, 2024 CVE-2024-49890 Medium 5.5 drm/amd/pm: ensure the fw_info is not null before using it Assigned by Linux
Oct 21, 2024 CVE-2024-49889 High 7.8 ext4: avoid use-after-free in ext4_ext_show_leaf() Assigned by Linux
Oct 21, 2024 CVE-2024-49888 Medium 5.5 bpf: Fix a sdiv overflow issue Assigned by Linux
Oct 21, 2024 CVE-2024-49885 Medium 5.5 mm, slub: avoid zeroing kmalloc redzone Assigned by Linux
Oct 21, 2024 CVE-2024-49884 High 7.8 ext4: fix slab-use-after-free in ext4_split_extent_at() Assigned by Linux
Oct 21, 2024 CVE-2024-49881 Medium 5.5 ext4: update orig_path in ext4_find_extent() Assigned by Linux
Oct 21, 2024 CVE-2024-49851 Medium 5.5 tpm: Clean up TPM space after command failure Assigned by Linux
Oct 21, 2024 CVE-2024-47747 High 7.8 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition Assigned by Linux
Oct 21, 2024 CVE-2024-47737 Medium 5.5 nfsd: call cache_put if xdr_reserve_space returns NULL Assigned by Linux
Oct 21, 2024 CVE-2024-47736 Medium 5.5 erofs: handle overlapped pclusters out of crafted images properly Assigned by Linux
Oct 21, 2024 CVE-2024-47735 Medium 5.5 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Assigned by Linux
Oct 21, 2024 CVE-2024-47723 High 7.8 jfs: fix out-of-bounds in dbNextAG() and diAlloc() Assigned by Linux
Oct 21, 2024 CVE-2024-47718 High 7.8 wifi: rtw88: always wait for both firmware loading attempts Assigned by Linux
Oct 21, 2024 CVE-2024-47713 Medium 5.5 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() Assigned by Linux
Oct 21, 2024 CVE-2024-47710 Medium 5.5 sock_map: Add a cond_resched() in sock_hash_free() Assigned by Linux
Oct 21, 2024 CVE-2024-47709 Medium 5.5 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). Assigned by Linux
Oct 21, 2024 CVE-2024-47707 Medium 5.5 ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() Assigned by Linux
Oct 21, 2024 CVE-2024-47706 High 7.8 block, bfq: fix possible UAF for bfqq->bic with merge chain Assigned by Linux
Oct 21, 2024 CVE-2024-47705 Medium 5.5 block: fix potential invalid pointer dereference in blk_add_partition Assigned by Linux
Oct 21, 2024 CVE-2024-47701 High 7.8 ext4: avoid OOB when system.data xattr changes underneath the filesystem Assigned by Linux
Oct 21, 2024 CVE-2024-47699 Medium 5.5 nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() Assigned by Linux
Oct 21, 2024 CVE-2024-47697 High 7.8 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Assigned by Linux
Oct 21, 2024 CVE-2024-47696 High 7.5 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency Assigned by Linux
Oct 21, 2024 CVE-2024-47692 Medium 6.5 nfsd: return -EINVAL when namelen is 0 Assigned by Linux
Oct 21, 2024 CVE-2024-47685 Critical 9.1 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() Assigned by Linux
Oct 21, 2024 CVE-2024-47684 Medium 5.5 tcp: check skb is non-NULL in tcp_rto_delta_us() Assigned by Linux
Oct 21, 2024 CVE-2024-47661 Medium 5.5 drm/amd/display: Avoid overflow from uint32_t to uint8_t Assigned by Linux
Oct 9, 2024 CVE-2024-47660 Medium 4.7 fsnotify: clear PARENT_WATCHED flags lazily Assigned by Linux
Oct 9, 2024 CVE-2024-46865 Critical 9.8 fou: fix initialization of grc Assigned by Linux
Sep 27, 2024 CVE-2024-46854 High 7.1 net: dpaa: Pad packets to ETH_ZLEN Assigned by Linux
Sep 27, 2024 CVE-2024-46842 High 7.8 scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info Assigned by Linux
Sep 27, 2024 CVE-2024-46834 High 7.8 ethtool: fail closed if we can't get max channel used in indirection tables Assigned by Linux
Sep 27, 2024 CVE-2024-46808 Medium 5.5 drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range Assigned by Linux
Sep 27, 2024 CVE-2024-46786 High 7.8 fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF Assigned by Linux
Sep 18, 2024
Previous Page 82 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.