CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 10:50 AM ET )
This week: 4,691 CVEs published, 349 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,691 Show in the list Critical, last 7 days 349 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68315 High 7.5 sctp: validate stream count in sctp_process_strreset_inreq() Assigned by Linux
Aug 10, 2026 CVE-2026-68314 High 7.8 net: mctp i3c: clean up notifier and buses if driver register fails Assigned by Linux
Aug 10, 2026 CVE-2026-68313 Not yet scored tipc: fix infinite loop in __tipc_nl_compat_dumpit Assigned by Linux
Aug 10, 2026 CVE-2026-68312 Not yet scored cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Assigned by Linux
Aug 10, 2026 CVE-2026-68311 Not yet scored wifi: mt76: mt7925: guard link STA in decap offload Assigned by Linux
Aug 10, 2026 CVE-2026-68310 Not yet scored wifi: mt76: mt7915: guard HE capability lookups Assigned by Linux
Aug 10, 2026 CVE-2026-68309 Not yet scored wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Assigned by Linux
Aug 10, 2026 CVE-2026-68308 Not yet scored wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Assigned by Linux
Aug 10, 2026 CVE-2026-68307 Not yet scored wifi: mt76: mt7925: fix crash in reset link replay Assigned by Linux
Aug 10, 2026 CVE-2026-68306 Not yet scored wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Assigned by Linux
Aug 10, 2026 CVE-2026-68305 High 7.8 drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers Assigned by Linux
Aug 10, 2026 CVE-2026-68304 Not yet scored wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Assigned by Linux
Aug 10, 2026 CVE-2026-68303 Not yet scored drm/vc4: hvs/v3d: Fix null dereference in unbind Assigned by Linux
Aug 10, 2026 CVE-2026-68302 Critical 9.8 amt: re-read skb header pointers after every pull Assigned by Linux
Aug 10, 2026 CVE-2026-68301 Not yet scored net: hsr: fix memory leak on slave unregistration by removing synced VLANs Assigned by Linux
Aug 10, 2026 CVE-2026-68300 Critical 9.8 sctp: auth: verify auth requirement when auth_chunk is NULL Assigned by Linux
Aug 10, 2026 CVE-2026-68299 High 7.5 vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Assigned by Linux
Aug 10, 2026 CVE-2026-68298 High 7.8 drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() Assigned by Linux
Aug 10, 2026 CVE-2026-68297 High 7.8 tipc: fix u16 MTU truncation in media and bearer MTU validation Assigned by Linux
Aug 10, 2026 CVE-2026-68296 Not yet scored net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Assigned by Linux
Aug 10, 2026 CVE-2026-68295 High 7.8 LoongArch: BPF: Zero-extend signed ALU32 div/mod results Assigned by Linux
Aug 10, 2026 CVE-2026-68294 High 8.8 net: qrtr: restrict socket creation to the initial network namespace Assigned by Linux
Aug 10, 2026 CVE-2026-68293 High 7.1 net/mlx5: Fix MCIA register buffer overflow on 32 dword reads Assigned by Linux
Aug 10, 2026 CVE-2026-68292 Not yet scored ice: prevent tstamp ring allocation for non-PF VSI types Assigned by Linux
Aug 10, 2026 CVE-2026-68291 Not yet scored idpf: fix max_vport related crash on allocation error during init Assigned by Linux
Aug 10, 2026 CVE-2026-68290 High 7.8 rds: tcp: unregister sysctl before tearing down listen socket Assigned by Linux
Aug 10, 2026 CVE-2026-68289 Not yet scored tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() Assigned by Linux
Aug 10, 2026 CVE-2026-68288 Not yet scored net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD Assigned by Linux
Aug 10, 2026 CVE-2026-68287 High 7.5 drop_monitor: fix size calculations for 64-bit attributes Assigned by Linux
Aug 10, 2026 CVE-2026-68286 Not yet scored drop_monitor: perform u64_stats updates under IRQ-disabled section Assigned by Linux
Aug 10, 2026 CVE-2026-68285 Not yet scored LoongArch: BPF: Fix memory leak in bpf_jit_free() Assigned by Linux
Aug 10, 2026 CVE-2026-68284 High 7.8 bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() Assigned by Linux
Aug 10, 2026 CVE-2026-68283 High 8.8 tracing: Fix use-after-free freeing trigger private data Assigned by Linux
Aug 10, 2026 CVE-2026-68282 Not yet scored drm/rockchip: analogix_dp: Add missing error check for platform_get_resource() Assigned by Linux
Aug 10, 2026 CVE-2026-68281 Not yet scored drm/imagination: Count paired job fence as dependency in prepare_job() Assigned by Linux
Aug 10, 2026 CVE-2026-68280 Not yet scored drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() Assigned by Linux
Aug 10, 2026 CVE-2026-68279 Not yet scored drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers Assigned by Linux
Aug 10, 2026 CVE-2026-68278 Not yet scored drm/dp/mst: fix buffer overflows in sideband chunk accumulation Assigned by Linux
Aug 10, 2026 CVE-2026-68277 Not yet scored drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Assigned by Linux
Aug 10, 2026 CVE-2026-68276 Not yet scored drm/amdgpu/gfx: fix cleaner shader IB buffer overflow Assigned by Linux
Aug 10, 2026 CVE-2026-68275 Not yet scored drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO Assigned by Linux
Aug 10, 2026 CVE-2026-68274 High 7.8 drm/xe/guc: Fix buffer overflow in steered register list allocation Assigned by Linux
Aug 10, 2026 CVE-2026-68273 High 7.8 drm/amdgpu: Fix context pstate override handling Assigned by Linux
Aug 10, 2026 CVE-2026-68272 Not yet scored drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Assigned by Linux
Aug 10, 2026 CVE-2026-68271 Not yet scored drm/nouveau: fix reversed error cleanup order in ucopy functions Assigned by Linux
Aug 10, 2026 CVE-2026-68270 Not yet scored drm/sysfb: Avoid possible truncation with calculating visible size Assigned by Linux
Aug 10, 2026 CVE-2026-68269 Not yet scored drm/i915/gem: Add missing nospec on parallel submit slot Assigned by Linux
Aug 10, 2026 CVE-2026-68268 Not yet scored drm/xe: Return error on non-migratable faults requiring devmem Assigned by Linux
Aug 10, 2026 CVE-2026-68267 Not yet scored drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists Assigned by Linux
Aug 10, 2026 CVE-2026-68266 High 7.8 drm/xe: Hold a dma-buf reference for imported BOs Assigned by Linux
Aug 10, 2026
Previous Page 89 of 188 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
