CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 12:50 PM ET )
This week: 4,671 CVEs published, 341 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,671 Show in the list Critical, last 7 days 341 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,754 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-68215 Not yet scored media: radio-si476x: Unregister v4l2_device on probe failure Assigned by Linux
Aug 10, 2026 CVE-2026-68214 Not yet scored media: rtl2832: fix use-after-free in rtl2832_remove() Assigned by Linux
Aug 10, 2026 CVE-2026-68213 High 7.8 media: rtl2832_sdr: Return queued buffers on start_streaming() failure Assigned by Linux
Aug 10, 2026 CVE-2026-68212 Not yet scored media: saa7134: Fix a possible memory leak in saa7134_video_init1 Assigned by Linux
Aug 10, 2026 CVE-2026-68211 Not yet scored media: stm32-dcmipp: Return queued buffers on start_streaming() failure Assigned by Linux
Aug 10, 2026 CVE-2026-68210 High 7.8 media: stm32: dcmi: unregister notifier on probe failure Assigned by Linux
Aug 10, 2026 CVE-2026-68209 High 7.8 media: sun4i-csi: Return queued buffers on start_streaming() failure Assigned by Linux
Aug 10, 2026 CVE-2026-68208 Not yet scored media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() Assigned by Linux
Aug 10, 2026 CVE-2026-68207 Not yet scored media: ti: vpe: unwind v4l2 device registration on probe error Assigned by Linux
Aug 10, 2026 CVE-2026-68206 High 7.8 media: v4l2-ctrls: validate HEVC active reference counts Assigned by Linux
Aug 10, 2026 CVE-2026-68205 Not yet scored media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Assigned by Linux
Aug 10, 2026 CVE-2026-68204 High 7.8 media: vivid: check for vb2_is_busy() when toggling caps Assigned by Linux
Aug 10, 2026 CVE-2026-68203 Not yet scored media: vivid: fix cleanup bugs in vivid_init() Assigned by Linux
Aug 10, 2026 CVE-2026-68202 High 7.8 ALSA: seq: close a re-opened queue timer in the destructor Assigned by Linux
Aug 10, 2026 CVE-2026-68201 High 7.8 ALSA: timer: drain a slave's callback before its master detaches it Assigned by Linux
Aug 10, 2026 CVE-2026-68200 High 7.8 ALSA: timer: don't re-enter an instance callback that is still running Assigned by Linux
Aug 10, 2026 CVE-2026-68199 High 8.8 wifi: ath6kl: fix OOB access from firmware ADDBA window size Assigned by Linux
Aug 10, 2026 CVE-2026-68198 High 8.8 wifi: ath6kl: fix use-after-free in aggr_reset_state() Assigned by Linux
Aug 10, 2026 CVE-2026-68197 Not yet scored wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Assigned by Linux
Aug 10, 2026 CVE-2026-68196 High 8.3 wifi: wilc1000: validate assoc response length before subtracting header Assigned by Linux
Aug 10, 2026 CVE-2026-68195 Not yet scored wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses Assigned by Linux
Aug 10, 2026 CVE-2026-68194 Not yet scored wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses Assigned by Linux
Aug 10, 2026 CVE-2026-68193 Not yet scored wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses Assigned by Linux
Aug 10, 2026 CVE-2026-68192 High 8.8 wifi: brcmfmac: make release_scratchbuffers idempotent Assigned by Linux
Aug 10, 2026 CVE-2026-68191 Not yet scored wifi: ath12k: fix NULL pointer dereference in rhash table destroy Assigned by Linux
Aug 10, 2026 CVE-2026-68190 Not yet scored staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() Assigned by Linux
Aug 10, 2026 CVE-2026-68189 High 7.8 Bluetooth: hci_sync: Protect UUID list traversal Assigned by Linux
Aug 10, 2026 CVE-2026-68188 Not yet scored Bluetooth: RFCOMM: Fix session UAF in set_termios Assigned by Linux
Aug 10, 2026 CVE-2026-68187 Not yet scored exec: fix unsigned loop counter wrap in transfer_args_to_stack() Assigned by Linux
Aug 10, 2026 CVE-2026-68186 Not yet scored binfmt_misc: set have_execfd only once the interpreter is opened Assigned by Linux
Aug 10, 2026 CVE-2026-68185 Not yet scored LoongArch: Move jump_label_init() before parse_early_param() Assigned by Linux
Aug 10, 2026 CVE-2026-68184 Not yet scored cdrom: fix stack out-of-bounds read in CDROMVOLCTRL Assigned by Linux
Aug 10, 2026 CVE-2026-68183 Not yet scored firmware: stratix10-svc: fix memory leaks and list corruption bugs Assigned by Linux
Aug 10, 2026 CVE-2026-68182 Not yet scored comedi: comedi_parport: deal with premature interrupt Assigned by Linux
Aug 10, 2026 CVE-2026-68181 Not yet scored mei: bus: access mei_device under device_lock on cleanup Assigned by Linux
Aug 10, 2026 CVE-2026-68180 Not yet scored intel_th: fix MSC output device reference leak Assigned by Linux
Aug 10, 2026 CVE-2026-68179 High 8.4 misc: nsm: only unlock nsm_dev on post-lock error paths Assigned by Linux
Aug 10, 2026 CVE-2026-68178 High 7.8 misc: nsm: pin the module while the device is open Assigned by Linux
Aug 10, 2026 CVE-2026-68177 High 7.8 tracing: Delay module ref count for "enable_event" trigger Assigned by Linux
Aug 10, 2026 CVE-2026-68176 Not yet scored tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Assigned by Linux
Aug 10, 2026 CVE-2026-68175 Not yet scored tracing: Fix resource leak on mmiotrace trace_pipe close Assigned by Linux
Aug 10, 2026 CVE-2026-68174 Not yet scored tracing: Fix union collision of module and refcnt for dynamic events Assigned by Linux
Aug 10, 2026 CVE-2026-68173 High 7.1 ublk: wait on ublk_dev_ready() instead of ub->completion Assigned by Linux
Aug 10, 2026 CVE-2026-68172 High 7.1 arm64: make huge_ptep_get handled unaligned addresses Assigned by Linux
Aug 10, 2026 CVE-2026-68170 Critical 9.8 mptcp: fix stale skb->sk reference on subflow close Assigned by Linux
Aug 10, 2026 CVE-2026-68169 Not yet scored mptcp: pm: userspace: fix use-after-free in get_local_id Assigned by Linux
Aug 10, 2026 CVE-2026-68168 Not yet scored afs: Fix afs_edit_dir_remove() to get, not find, block 0 Assigned by Linux
Aug 10, 2026 CVE-2026-68167 Not yet scored btrfs: do not try compression for data reloc inodes Assigned by Linux
Aug 10, 2026 CVE-2026-68166 Not yet scored userfaultfd: prevent registration of special VMAs Assigned by Linux
Aug 10, 2026 CVE-2026-68165 Not yet scored mm/damon/core: validate ranges in damon_set_regions() Assigned by Linux
Aug 10, 2026
Previous Page 91 of 189 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
