CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 10:10 UTC )
This week: 4,406 CVEs published, 337 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,406 Show in the list Critical, last 7 days 337 Show in the list Healthcare-tagged, last 7 days 12 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68347 Not yet scored iommu/amd: Fix IRQ unsafe locking in gdom allocation Assigned by Linux
Aug 10, 2026 CVE-2026-68346 Not yet scored ALSA: hda: cs35l41: validate and free ACPI mute object Assigned by Linux
Aug 10, 2026 CVE-2026-68345 Not yet scored arm_mpam: guard MBWU state before adding it to garbage Assigned by Linux
Aug 10, 2026 CVE-2026-68344 Not yet scored usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68343 Critical 9.1 smb: client: validate DFS referral PathConsumed Assigned by Linux
Aug 10, 2026 CVE-2026-68342 Not yet scored ovpn: avoid putting unrelated P2P peer on socket release Assigned by Linux
Aug 10, 2026 CVE-2026-68341 High 8.8 ovpn: fix use after free in unlock_ovpn() Assigned by Linux
Aug 10, 2026 CVE-2026-68340 High 7.7 hwmon: occ: validate poll response sensor blocks Assigned by Linux
Aug 10, 2026 CVE-2026-68339 Not yet scored Bluetooth: btusb: validate Realtek vendor event length Assigned by Linux
Aug 10, 2026 CVE-2026-68338 High 7.8 net/packet: avoid fanout hook re-registration after unregister Assigned by Linux
Aug 10, 2026 CVE-2026-68337 Not yet scored bpf: Reject redirect helpers without a bpf_net_context Assigned by Linux
Aug 10, 2026 CVE-2026-68336 Not yet scored bonding: fix devconf_all NULL dereference when IPv6 is disabled Assigned by Linux
Aug 10, 2026 CVE-2026-68335 High 7.8 rds: drop incoming messages that cross network namespace boundaries Assigned by Linux
Aug 10, 2026 CVE-2026-68334 Not yet scored rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() Assigned by Linux
Aug 10, 2026 CVE-2026-68333 Not yet scored dpaa2-switch: put MAC endpoint device on disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68332 Not yet scored net: airoha: Fix potential use-after-free in airoha_ppe_deinit() Assigned by Linux
Aug 10, 2026 CVE-2026-68331 Not yet scored dpaa2-eth: put MAC endpoint device on disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68330 High 7.8 net: airoha: Fix DMA direction for NPU mailbox buffer Assigned by Linux
Aug 10, 2026 CVE-2026-68329 High 8.8 iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Assigned by Linux
Aug 10, 2026 CVE-2026-68328 Not yet scored nfp: Check resource mutex allocation Assigned by Linux
Aug 10, 2026 CVE-2026-68327 Not yet scored wan: wanxl: Only reset hardware after BAR mapping Assigned by Linux
Aug 10, 2026 CVE-2026-68326 High 8.8 wifi: mwifiex: bound uAP association event IEs to the event buffer Assigned by Linux
Aug 10, 2026 CVE-2026-68325 Not yet scored iommu/amd: Bound the early ACPI HID map Assigned by Linux
Aug 10, 2026 CVE-2026-68324 Not yet scored iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Assigned by Linux
Aug 10, 2026 CVE-2026-68323 High 7.8 tipc: serialize udp bearer replicast list updates Assigned by Linux
Aug 10, 2026 CVE-2026-68322 Not yet scored rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Assigned by Linux
Aug 10, 2026 CVE-2026-68321 Not yet scored net: txgbe: fix FDIR filter leak on remove Assigned by Linux
Aug 10, 2026 CVE-2026-68320 High 7.3 sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Assigned by Linux
Aug 10, 2026 CVE-2026-68319 Not yet scored pds_core: fix deadlock between reset thread and remove Assigned by Linux
Aug 10, 2026 CVE-2026-68318 Not yet scored pds_core: fix use-after-free on workqueue during remove Assigned by Linux
Aug 10, 2026 CVE-2026-68317 Not yet scored pds_core: fix auxiliary device add/del races Assigned by Linux
Aug 10, 2026 CVE-2026-68316 High 7.8 accel: ethosu: Fix element size accounting for cmd stream validation Assigned by Linux
Aug 10, 2026 CVE-2026-68315 High 7.5 sctp: validate stream count in sctp_process_strreset_inreq() Assigned by Linux
Aug 10, 2026 CVE-2026-68314 High 7.8 net: mctp i3c: clean up notifier and buses if driver register fails Assigned by Linux
Aug 10, 2026 CVE-2026-68313 Not yet scored tipc: fix infinite loop in __tipc_nl_compat_dumpit Assigned by Linux
Aug 10, 2026 CVE-2026-68312 Not yet scored cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Assigned by Linux
Aug 10, 2026 CVE-2026-68311 Not yet scored wifi: mt76: mt7925: guard link STA in decap offload Assigned by Linux
Aug 10, 2026 CVE-2026-68310 Not yet scored wifi: mt76: mt7915: guard HE capability lookups Assigned by Linux
Aug 10, 2026 CVE-2026-68309 Not yet scored wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Assigned by Linux
Aug 10, 2026 CVE-2026-68308 Not yet scored wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Assigned by Linux
Aug 10, 2026 CVE-2026-68307 Not yet scored wifi: mt76: mt7925: fix crash in reset link replay Assigned by Linux
Aug 10, 2026 CVE-2026-68306 Not yet scored wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Assigned by Linux
Aug 10, 2026 CVE-2026-68305 High 7.8 drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers Assigned by Linux
Aug 10, 2026 CVE-2026-68304 Not yet scored wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Assigned by Linux
Aug 10, 2026 CVE-2026-68303 Not yet scored drm/vc4: hvs/v3d: Fix null dereference in unbind Assigned by Linux
Aug 10, 2026 CVE-2026-68302 Critical 9.8 amt: re-read skb header pointers after every pull Assigned by Linux
Aug 10, 2026 CVE-2026-68301 Not yet scored net: hsr: fix memory leak on slave unregistration by removing synced VLANs Assigned by Linux
Aug 10, 2026 CVE-2026-68300 Critical 9.8 sctp: auth: verify auth requirement when auth_chunk is NULL Assigned by Linux
Aug 10, 2026 CVE-2026-68299 High 7.5 vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Assigned by Linux
Aug 10, 2026 CVE-2026-68298 High 7.8 drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() Assigned by Linux
Aug 10, 2026
Previous Page 84 of 182 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
