CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-23 13:50 UTC )
This week: 4,681 CVEs published, 348 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,681 Show in the list Critical, last 7 days 348 Show in the list Healthcare-tagged, last 7 days 12 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68365 Not yet scored USB: serial: io_edgeport: cap received transmit credits Assigned by Linux
Aug 10, 2026 CVE-2026-68364 Not yet scored drm/amd/display: Fix ISM dc_lock deadlock during suspend Assigned by Linux
Aug 10, 2026 CVE-2026-68363 Not yet scored wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request Assigned by Linux
Aug 10, 2026 CVE-2026-68362 Not yet scored wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin Assigned by Linux
Aug 10, 2026 CVE-2026-68361 Not yet scored hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop Assigned by Linux
Aug 10, 2026 CVE-2026-68360 Not yet scored hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Assigned by Linux
Aug 10, 2026 CVE-2026-68359 Not yet scored hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Assigned by Linux
Aug 10, 2026 CVE-2026-68358 Not yet scored hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Assigned by Linux
Aug 10, 2026 CVE-2026-68357 Not yet scored watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Assigned by Linux
Aug 10, 2026 CVE-2026-68356 Not yet scored watchdog: airoha: Prevent division by zero when clock frequency is zero Assigned by Linux
Aug 10, 2026 CVE-2026-68355 Not yet scored wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Assigned by Linux
Aug 10, 2026 CVE-2026-68354 High 8.8 firewire: net: Fix fragmented datagram reassembly Assigned by Linux
Aug 10, 2026 CVE-2026-68353 High 8.1 wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Assigned by Linux
Aug 10, 2026 CVE-2026-68352 High 8.3 wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Assigned by Linux
Aug 10, 2026 CVE-2026-68351 Not yet scored wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Assigned by Linux
Aug 10, 2026 CVE-2026-68350 Not yet scored wifi: carl9170: fix OOB read from off-by-two in TX status handler Assigned by Linux
Aug 10, 2026 CVE-2026-68349 Not yet scored wifi: carl9170: fix buffer overflow in rx_stream failover path Assigned by Linux
Aug 10, 2026 CVE-2026-68348 High 7.1 ASoC: tas2781: bound firmware description string parsing Assigned by Linux
Aug 10, 2026 CVE-2026-68347 Not yet scored iommu/amd: Fix IRQ unsafe locking in gdom allocation Assigned by Linux
Aug 10, 2026 CVE-2026-68346 Not yet scored ALSA: hda: cs35l41: validate and free ACPI mute object Assigned by Linux
Aug 10, 2026 CVE-2026-68345 Not yet scored arm_mpam: guard MBWU state before adding it to garbage Assigned by Linux
Aug 10, 2026 CVE-2026-68344 Not yet scored usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68343 Critical 9.1 smb: client: validate DFS referral PathConsumed Assigned by Linux
Aug 10, 2026 CVE-2026-68342 Not yet scored ovpn: avoid putting unrelated P2P peer on socket release Assigned by Linux
Aug 10, 2026 CVE-2026-68341 High 8.8 ovpn: fix use after free in unlock_ovpn() Assigned by Linux
Aug 10, 2026 CVE-2026-68340 High 7.7 hwmon: occ: validate poll response sensor blocks Assigned by Linux
Aug 10, 2026 CVE-2026-68339 Not yet scored Bluetooth: btusb: validate Realtek vendor event length Assigned by Linux
Aug 10, 2026 CVE-2026-68338 High 7.8 net/packet: avoid fanout hook re-registration after unregister Assigned by Linux
Aug 10, 2026 CVE-2026-68337 Not yet scored bpf: Reject redirect helpers without a bpf_net_context Assigned by Linux
Aug 10, 2026 CVE-2026-68336 Not yet scored bonding: fix devconf_all NULL dereference when IPv6 is disabled Assigned by Linux
Aug 10, 2026 CVE-2026-68335 High 7.8 rds: drop incoming messages that cross network namespace boundaries Assigned by Linux
Aug 10, 2026 CVE-2026-68334 Not yet scored rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() Assigned by Linux
Aug 10, 2026 CVE-2026-68333 Not yet scored dpaa2-switch: put MAC endpoint device on disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68332 Not yet scored net: airoha: Fix potential use-after-free in airoha_ppe_deinit() Assigned by Linux
Aug 10, 2026 CVE-2026-68331 Not yet scored dpaa2-eth: put MAC endpoint device on disconnect Assigned by Linux
Aug 10, 2026 CVE-2026-68330 High 7.8 net: airoha: Fix DMA direction for NPU mailbox buffer Assigned by Linux
Aug 10, 2026 CVE-2026-68329 High 8.8 iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Assigned by Linux
Aug 10, 2026 CVE-2026-68328 Not yet scored nfp: Check resource mutex allocation Assigned by Linux
Aug 10, 2026 CVE-2026-68327 Not yet scored wan: wanxl: Only reset hardware after BAR mapping Assigned by Linux
Aug 10, 2026 CVE-2026-68326 High 8.8 wifi: mwifiex: bound uAP association event IEs to the event buffer Assigned by Linux
Aug 10, 2026 CVE-2026-68325 Not yet scored iommu/amd: Bound the early ACPI HID map Assigned by Linux
Aug 10, 2026 CVE-2026-68324 Not yet scored iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Assigned by Linux
Aug 10, 2026 CVE-2026-68323 High 7.8 tipc: serialize udp bearer replicast list updates Assigned by Linux
Aug 10, 2026 CVE-2026-68322 Not yet scored rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Assigned by Linux
Aug 10, 2026 CVE-2026-68321 Not yet scored net: txgbe: fix FDIR filter leak on remove Assigned by Linux
Aug 10, 2026 CVE-2026-68320 High 7.3 sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Assigned by Linux
Aug 10, 2026 CVE-2026-68319 Not yet scored pds_core: fix deadlock between reset thread and remove Assigned by Linux
Aug 10, 2026 CVE-2026-68318 Not yet scored pds_core: fix use-after-free on workqueue during remove Assigned by Linux
Aug 10, 2026 CVE-2026-68317 Not yet scored pds_core: fix auxiliary device add/del races Assigned by Linux
Aug 10, 2026 CVE-2026-68316 High 7.8 accel: ethosu: Fix element size accounting for cmd stream validation Assigned by Linux
Aug 10, 2026
Previous Page 88 of 188 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
