CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-22 11:00 UTC )
This week: 4,585 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,585 Show in the list Critical, last 7 days 305 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux_kernel . Show all products
CVE Severity Title Published CVE-2024-39489 Medium 5.5 ipv6: sr: fix memleak in seg6_hmac_init_algo Assigned by Linux
Jul 10, 2024 CVE-2024-39487 High 7.1 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() Assigned by Linux
Jul 9, 2024 CVE-2024-39482 High 7.8 bcache: fix variable length array abuse in btree_iter Assigned by Linux
Jul 5, 2024 CVE-2024-39469 High 7.1 nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors Assigned by Linux
Jun 25, 2024 CVE-2024-39468 High 7.5 smb: client: fix deadlock in smb2_find_smb_tcon() Assigned by Linux
Jun 25, 2024 CVE-2024-34027 High 7.8 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock Assigned by Linux
Jun 24, 2024 CVE-2024-33847 High 7.1 f2fs: compress: don't allow unaligned truncation on released compress inode Assigned by Linux
Jun 24, 2024 CVE-2024-39292 High 7.8 um: Add winch to winch_handlers before registering winch IRQ Assigned by Linux
Jun 24, 2024 CVE-2024-36288 Critical 9.8 SUNRPC: Fix loop termination condition in gss_free_in_token_pages() Assigned by Linux
Jun 21, 2024 CVE-2024-38780 Medium 5.5 dma-buf/sw-sync: don't enable IRQ from sync_print_obj() Assigned by Linux
Jun 21, 2024 CVE-2024-38662 Medium 4.7 bpf: Allow delete from sockmap/sockhash only if update is allowed Assigned by Linux
Jun 21, 2024 CVE-2024-38659 High 7.3 enic: Validate length of nl attributes in enic_set_vf_port Assigned by Linux
Jun 21, 2024 CVE-2024-38635 High 7.8 soundwire: cadence: fix invalid PDI offset Assigned by Linux
Jun 21, 2024 CVE-2024-38621 High 7.1 media: stk1160: fix bounds checking in stk1160_copy_video() Assigned by Linux
Jun 21, 2024 CVE-2024-38381 High 8.8 nfc: nci: Fix uninit-value in nci_rx_work Assigned by Linux
Jun 21, 2024 CVE-2024-37356 Medium 5.5 tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). Assigned by Linux
Jun 21, 2024 CVE-2024-36489 Medium 5.5 tls: fix missing memory barrier in tls_init Assigned by Linux
Jun 21, 2024 CVE-2024-36484 Medium 5.5 net: relax socket state check at accept time. Assigned by Linux
Jun 21, 2024 CVE-2024-36286 High 7.8 netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() Assigned by Linux
Jun 21, 2024 CVE-2024-36270 Medium 5.5 netfilter: tproxy: bail out if IP has been disabled on the device Assigned by Linux
Jun 21, 2024 CVE-2024-33621 Medium 5.5 ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Assigned by Linux
Jun 21, 2024 CVE-2024-38619 Medium 5.5 usb-storage: alauda: Check whether the media is initialized Assigned by Linux
Jun 20, 2024 CVE-2024-38615 Medium 5.5 cpufreq: exit() callback is optional Assigned by Linux
Jun 19, 2024 CVE-2024-38612 High 7.0 ipv6: sr: fix invalid unregister error path Assigned by Linux
Jun 19, 2024 CVE-2024-38608 Medium 5.5 net/mlx5e: Fix netif state handling Assigned by Linux
Jun 19, 2024 CVE-2024-38599 High 7.8 jffs2: prevent xattr node from overflowing the eraseblock Assigned by Linux
Jun 19, 2024 CVE-2024-38598 Medium 5.5 md: fix resync softlockup when bitmap size is less than array size Assigned by Linux
Jun 19, 2024 CVE-2024-38596 Medium 4.7 af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg Assigned by Linux
Jun 19, 2024 CVE-2024-38589 Medium 5.5 netrom: fix possible dead-lock in nr_rt_ioctl() Assigned by Linux
Jun 19, 2024 CVE-2024-38587 High 7.8 speakup: Fix sizeof() vs ARRAY_SIZE() bug Assigned by Linux
Jun 19, 2024 CVE-2024-38579 Medium 5.5 crypto: bcm - Fix pointer arithmetic Assigned by Linux
Jun 19, 2024 CVE-2024-38578 High 7.8 ecryptfs: Fix buffer size for tag 66 packet Assigned by Linux
Jun 19, 2024 CVE-2024-38567 Medium 5.5 wifi: carl9170: add a proper sanity check for endpoints Assigned by Linux
Jun 19, 2024 CVE-2024-38565 Medium 6.5 wifi: ar5523: enable proper endpoint verification Assigned by Linux
Jun 19, 2024 CVE-2024-38560 High 7.1 scsi: bfa: Ensure the copied buf is NUL terminated Assigned by Linux
Jun 19, 2024 CVE-2024-38559 Medium 4.4 scsi: qedf: Ensure the copied buf is NUL terminated Assigned by Linux
Jun 19, 2024 CVE-2024-38558 Critical 10.0 net: openvswitch: fix overwriting ct original tuple for ICMPv6 Assigned by Linux
Jun 19, 2024 CVE-2024-38552 High 7.3 drm/amd/display: Fix potential index out of bounds in color transformation function Assigned by Linux
Jun 19, 2024 CVE-2024-38547 Medium 5.5 media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries Assigned by Linux
Jun 19, 2024 CVE-2024-36978 High 7.8 net: sched: sch_multiq: fix possible OOB write in multiq_tune() Assigned by Linux
Jun 19, 2024 CVE-2024-36974 High 7.8 net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP Assigned by Linux
Jun 18, 2024 CVE-2024-36971 Known exploited
High 7.8 net: fix __dst_negative_advice() race Assigned by Linux
Jun 10, 2024 CVE-2024-36959 Medium 5.5 pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() Assigned by Linux
May 30, 2024 CVE-2024-36940 High 7.8 pinctrl: core: delete incorrect free in pinctrl_enable() Assigned by Linux
May 30, 2024 CVE-2024-36939 Medium 5.5 nfs: Handle error of rpc_proc_register() in nfs_net_init(). Assigned by Linux
May 30, 2024 CVE-2024-36934 High 7.8 bna: ensure the copied buf is NUL terminated Assigned by Linux
May 30, 2024 CVE-2024-36929 High 7.5 net: core: reject skb_copy(_expand) for fraglist GSO skbs Assigned by Linux
May 30, 2024 CVE-2024-36927 Medium 4.7 ipv4: Fix uninit-value access in __ip_make_skb() Assigned by Linux
May 30, 2024 CVE-2024-36922 High 8.8 wifi: iwlwifi: read txq->read_ptr under lock Assigned by Linux
May 30, 2024 CVE-2024-36916 Medium 6.5 blk-iocost: avoid out of bounds shift Assigned by Linux
May 30, 2024
Previous Page 85 of 93 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
