CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,388 CVEs published, 347 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,388
Show in the list
Critical, last 7 days
347
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,149 CVEs, showing 601 to 650PreviousPage 13 of 143Next
CVESeverityTitlePublished
CVE-2025-21890High 8.2idpf: fix checksums set in idpf_rx_rsc()
Assigned by Linux
Mar 27, 2025
CVE-2021-4454High 7.5can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
Assigned by Linux
Mar 27, 2025
CVE-2022-49743High 7.5ovl: Use "buf" flexible array for memcpy() destination
Assigned by Linux
Mar 27, 2025
CVE-2022-49760High 7.8mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()
Assigned by Linux
Mar 27, 2025
CVE-2023-52981High 7.8drm/i915: Fix request ref counting during error capture & debugfs dump
Assigned by Linux
Mar 27, 2025
CVE-2023-52987High 7.8ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
Assigned by Linux
Mar 27, 2025
CVE-2023-53006Critical 9.8cifs: Fix oops due to uncleared server->smbd_conn in reconnect
Assigned by Linux
Mar 27, 2025
CVE-2023-53009High 7.8drm/amdkfd: Add sync after creating vram bo
Assigned by Linux
Mar 27, 2025
CVE-2025-21899High 7.8tracing: Fix bad hist from corrupting named_triggers list
Assigned by Linux
Apr 1, 2025
CVE-2025-21906High 7.6wifi: iwlwifi: mvm: clean up ROC on failure
Assigned by Linux
Apr 1, 2025
CVE-2025-21913Medium 5.5x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
Assigned by Linux
Apr 1, 2025
CVE-2025-21919High 7.8sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
Assigned by Linux
Apr 1, 2025
CVE-2025-21924High 7.8net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
Assigned by Linux
Apr 1, 2025
CVE-2025-21925Medium 5.5llc: do not use skb_get() before dev_queue_xmit()
Assigned by Linux
Apr 1, 2025
CVE-2025-21926High 7.8net: gso: fix ownership in __udp_gso_segment
Assigned by Linux
Apr 1, 2025
CVE-2025-21938High 7.5mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
Assigned by Linux
Apr 1, 2025
CVE-2025-21939High 7.8drm/xe/hmm: Don't dereference struct page pointers without notifier lock
Assigned by Linux
Apr 1, 2025
CVE-2025-21959High 7.3netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
Assigned by Linux
Apr 1, 2025
CVE-2025-21970High 7.8net/mlx5: Bridge, fix the crash caused by LAG state check
Assigned by Linux
Apr 1, 2025
CVE-2025-21971High 7.8net_sched: Prevent creation of classes with TC_H_ROOT
Assigned by Linux
Apr 1, 2025
CVE-2025-21976High 7.8fbdev: hyperv_fb: Allow graceful removal of framebuffer
Assigned by Linux
Apr 1, 2025
CVE-2025-21999High 7.8proc: fix UAF in proc_get_inode()
Assigned by Linux
Apr 3, 2025
CVE-2025-22005Medium 5.5ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
Assigned by Linux
Apr 3, 2025
CVE-2025-22013High 7.3KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
Assigned by Linux
Apr 8, 2025
CVE-2025-22015High 7.8mm/migrate: fix shmem xarray update during migration
Assigned by Linux
Apr 8, 2025
CVE-2025-22021Critical 10.0netfilter: socket: Lookup orig tuple for IPv6 SNAT
Assigned by Linux
Apr 16, 2025
CVE-2024-58096High 8.8wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
Assigned by Linux
Apr 16, 2025
CVE-2025-22025High 7.5nfsd: put dl_stid if fail to queue dl_recall
Assigned by Linux
Apr 16, 2025
CVE-2025-22044High 7.1acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
Assigned by Linux
Apr 16, 2025
CVE-2025-22045High 7.8x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
Assigned by Linux
Apr 16, 2025
CVE-2025-22055High 7.1net: fix geneve_opt length integer overflow
Assigned by Linux
Apr 16, 2025
CVE-2025-22056High 7.8netfilter: nft_tunnel: fix geneve_opt type confusion addition
Assigned by Linux
Apr 16, 2025
CVE-2025-22057High 7.8net: decrease cached dst counters in dst_release
Assigned by Linux
Apr 16, 2025
CVE-2025-22060Medium 4.7net: mvpp2: Prevent parser TCAM memory corruption
Assigned by Linux
Apr 16, 2025
CVE-2025-22062High 7.8sctp: add mutual exclusion in proc_sctp_do_udp_port()
Assigned by Linux
Apr 16, 2025
CVE-2025-22077Critical 9.8Revert "smb: client: fix TCP timers deadlock after rmmod"
Assigned by Linux
Apr 16, 2025
CVE-2025-22083High 7.8vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
Assigned by Linux
Apr 16, 2025
CVE-2025-22090High 7.3x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
Assigned by Linux
Apr 16, 2025
CVE-2025-22095Medium 5.5PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
Assigned by Linux
Apr 16, 2025
CVE-2025-22105Medium 5.5bonding: check xdp prog when set bond mode
Assigned by Linux
Apr 16, 2025
CVE-2025-22107High 7.1net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
Assigned by Linux
Apr 16, 2025
CVE-2025-22111Medium 5.5net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
Assigned by Linux
Apr 16, 2025
CVE-2025-22117High 8.7ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()
Assigned by Linux
Apr 16, 2025
CVE-2025-22121High 8.4ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
Assigned by Linux
Apr 16, 2025
CVE-2025-22124High 7.8md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
Assigned by Linux
Apr 16, 2025
CVE-2025-23131Medium 5.5dlm: prevent NPD when writing a positive value to event_done
Assigned by Linux
Apr 16, 2025
CVE-2025-23132High 7.0f2fs: quota: fix to avoid warning in dquot_writeback_dquots()
Assigned by Linux
Apr 16, 2025
CVE-2025-23133High 8.8wifi: ath11k: update channel list in reg notifier instead reg worker
Assigned by Linux
Apr 16, 2025
CVE-2025-23136Medium 5.5thermal: int340x: Add NULL check for adev
Assigned by Linux
Apr 16, 2025
CVE-2025-37785High 7.8ext4: fix OOB read when checking dotdot dir
Assigned by Linux
Apr 18, 2025
PreviousPage 13 of 143Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.