CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (Oct 23, 2026, 4:10 PM ET )
This week: 4,535 CVEs published, 327 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 4,535 Show in the list Critical, last 7 days 327 Show in the list Healthcare-tagged, last 7 days 9 Show in the list Known exploited (CISA KEV) 1,755 Show in the list Showing CVEs that name the product linux:linux . Show all products
CVE Severity Title Published CVE-2026-64587 High 7.0 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Assigned by Linux
Aug 6, 2026 CVE-2026-64586 High 8.8 wifi: brcmfmac: drain bus_reset work on device removal Assigned by Linux
Aug 6, 2026 CVE-2026-64585 High 7.8 can: esd_usb: kill anchored URBs before freeing netdevs Assigned by Linux
Aug 6, 2026 CVE-2026-64584 High 7.8 usb: gadget: f_midi: cancel pending IN work before freeing the midi object Assigned by Linux
Aug 6, 2026 CVE-2026-64583 High 7.8 usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown Assigned by Linux
Aug 6, 2026 CVE-2026-64582 High 7.8 RDMA/rxe: Fix a use-after-free problem in rxe_mmap Assigned by Linux
Aug 5, 2026 CVE-2026-64581 High 7.8 xfrm: fix sk_dst_cache double-free in xfrm_user_policy() Assigned by Linux
Aug 5, 2026 CVE-2026-64580 High 7.8 xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() Assigned by Linux
Aug 5, 2026 CVE-2026-64579 Not yet scored xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert Assigned by Linux
Aug 5, 2026 CVE-2026-64578 High 8.2 ksmbd: validate compound request size before reading StructureSize2 Assigned by Linux
Aug 5, 2026 CVE-2026-64577 High 7.5 gtp: check skb_pull_data() return in gtp1u_send_echo_resp() Assigned by Linux
Aug 5, 2026 CVE-2026-64576 High 7.1 nexthop: initialize extack in nh_res_bucket_migrate() Assigned by Linux
Aug 5, 2026 CVE-2026-64575 High 7.8 bpf: tcp: fix double sock release on batch realloc Assigned by Linux
Aug 5, 2026 CVE-2026-64574 High 7.8 wifi: mac80211: tear down new links on vif update error path Assigned by Linux
Aug 5, 2026 CVE-2026-64573 Not yet scored Bluetooth: qca: fix NVM tag length underflow in TLV parser Assigned by Linux
Aug 5, 2026 CVE-2026-64572 Not yet scored ipv4: fib: free fib_alias with kfree_rcu() on insert error path Assigned by Linux
Aug 5, 2026 CVE-2026-64571 Not yet scored wifi: p54: validate RX frame length in p54_rx_eeprom_readback() Assigned by Linux
Aug 5, 2026 CVE-2026-64570 High 7.8 wifi: mac80211: fix fils_discovery double free on alloc failure Assigned by Linux
Aug 5, 2026 CVE-2026-64569 Not yet scored mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n Assigned by Linux
Aug 5, 2026 CVE-2026-64568 High 7.8 wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure Assigned by Linux
Aug 5, 2026 CVE-2026-64567 High 7.8 btrfs: reject free space cache with more entries than pages Assigned by Linux
Aug 5, 2026 CVE-2026-64566 Critical 9.8 xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() Assigned by Linux
Aug 5, 2026 CVE-2026-64565 Not yet scored Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() Assigned by Linux
Aug 4, 2026 CVE-2026-64564 Critical 9.8 sctp: don't free the ASCONF's own transport in DEL-IP processing Assigned by Linux
Aug 4, 2026 CVE-2026-64563 High 7.8 rhashtable: clear stale iter->p on table restart Assigned by Linux
Aug 4, 2026 CVE-2026-64562 High 8.8 KVM: nVMX: Hide shadow VMCS right after VMCLEAR Assigned by Linux
Aug 4, 2026 CVE-2026-64561 High 8.8 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Assigned by Linux
Aug 4, 2026 CVE-2022-4994 Not yet scored KVM: x86: wean fast IN from emulator_pio_in Assigned by Linux
Jul 30, 2026 CVE-2026-64560 High 7.8 posix-cpu-timers: Prevent UAF caused by non-leader exec() race Assigned by Linux
Jul 29, 2026 CVE-2026-64559 High 7.8 s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Assigned by Linux
Jul 29, 2026 CVE-2026-64558 High 7.8 s390/pkey: Check length in pkey_pckmo handler implementation Assigned by Linux
Jul 29, 2026 CVE-2026-64557 High 8.8 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Assigned by Linux
Jul 29, 2026 CVE-2026-64556 High 7.8 perf/core: Detach event groups during remove_on_exec Assigned by Linux
Jul 29, 2026 CVE-2026-64555 High 8.8 KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Assigned by Linux
Jul 27, 2026 CVE-2026-64554 High 8.8 netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Assigned by Linux
Jul 27, 2026 CVE-2026-64553 Not yet scored net: psample: fix info leak in PSAMPLE_ATTR_DATA Assigned by Linux
Jul 27, 2026 CVE-2026-64552 High 8.4 virtio-net: fix len check in receive_big() Assigned by Linux
Jul 27, 2026 CVE-2026-64551 Critical 9.1 sctp: validate STALE_COOKIE cause length before reading staleness Assigned by Linux
Jul 27, 2026 CVE-2026-64550 High 7.3 net: qualcomm: rmnet: validate MAP frame length before ingress parsing Assigned by Linux
Jul 27, 2026 CVE-2026-64549 Not yet scored Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Assigned by Linux
Jul 27, 2026 CVE-2026-64548 High 8.4 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Assigned by Linux
Jul 27, 2026 CVE-2026-64547 High 8.1 net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Assigned by Linux
Jul 27, 2026 CVE-2026-64546 High 7.1 drm/edid: fix OOB read in drm_parse_tiled_block() Assigned by Linux
Jul 27, 2026 CVE-2026-64545 High 7.5 net, bpf: check master for NULL in xdp_master_redirect() Assigned by Linux
Jul 27, 2026 CVE-2026-64544 Not yet scored crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Assigned by Linux
Jul 27, 2026 CVE-2026-64543 High 7.8 tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Assigned by Linux
Jul 27, 2026 CVE-2026-64542 Not yet scored ipv6: ndisc: fix NULL deref in accept_untracked_na() Assigned by Linux
Jul 27, 2026 CVE-2026-64541 Critical 9.8 net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Assigned by Linux
Jul 27, 2026 CVE-2026-64540 High 8.1 usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Assigned by Linux
Jul 27, 2026 CVE-2026-64539 High 7.8 Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Assigned by Linux
Jul 27, 2026
Previous Page 94 of 189 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
