CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,387 CVEs published, 349 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,387
Show in the list
Critical, last 7 days
349
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,154 CVEs, showing 651 to 700PreviousPage 14 of 144Next
CVESeverityTitlePublished
CVE-2025-39688High 7.5nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
Assigned by Linux
Apr 18, 2025
CVE-2025-23141High 7.8KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
Assigned by Linux
May 1, 2025
CVE-2025-23142High 7.8sctp: detect and prevent references to a freed transport in sendmsg
Assigned by Linux
May 1, 2025
CVE-2025-23143Medium 5.5net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
Assigned by Linux
May 1, 2025
CVE-2025-23145High 7.5mptcp: fix NULL pointer in can_accept_new_subflow
Assigned by Linux
May 1, 2025
CVE-2025-23151High 7.8bus: mhi: host: Fix race between unprepare and queue_buf
Assigned by Linux
May 1, 2025
CVE-2025-37738High 7.8ext4: ignore xattrs past end
Assigned by Linux
May 1, 2025
CVE-2025-37756High 7.8net: tls: explicitly disallow disconnect
Assigned by Linux
May 1, 2025
CVE-2025-37757High 7.5tipc: fix memory leak in tipc_link_xmit
Assigned by Linux
May 1, 2025
CVE-2025-37761High 7.8drm/xe: Fix an out-of-bounds shift when invalidating TLB
Assigned by Linux
May 1, 2025
CVE-2025-37778Critical 9.8ksmbd: Fix dangling pointer in krb_authenticate
Assigned by Linux
May 1, 2025
CVE-2025-37791High 7.8ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
Assigned by Linux
May 1, 2025
CVE-2022-49858High 7.8octeontx2-pf: Fix SQE threshold checking
Assigned by Linux
May 1, 2025
CVE-2022-49882High 7.8KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
Assigned by Linux
May 1, 2025
CVE-2022-49883High 7.1KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format
Assigned by Linux
May 1, 2025
CVE-2022-49892High 7.8ftrace: Fix use-after-free for dynamic ftrace_ops
Assigned by Linux
May 1, 2025
CVE-2022-49905High 7.8net/smc: Fix possible leaked pernet namespace in smc_init()
Assigned by Linux
May 1, 2025
CVE-2025-37798High 7.8codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Assigned by Linux
May 2, 2025
CVE-2023-53039High 7.8HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
Assigned by Linux
May 2, 2025
CVE-2023-53065High 7.8perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
Assigned by Linux
May 2, 2025
CVE-2023-53072High 7.8mptcp: use the workqueue to destroy unaccepted sockets
Assigned by Linux
May 2, 2025
CVE-2023-53080High 7.8xsk: Add missing overflow check in xdp_umem_reg
Assigned by Linux
May 2, 2025
CVE-2023-53084High 7.8drm/shmem-helper: Remove another errant put in error path
Assigned by Linux
May 2, 2025
CVE-2023-53086High 8.8wifi: mt76: connac: do not check WED status for non-mmio devices
Assigned by Linux
May 2, 2025
CVE-2023-53087High 7.8drm/i915/active: Fix misuse of non-idle barriers as fence trackers
Assigned by Linux
May 2, 2025
CVE-2023-53088High 7.8mptcp: fix UaF in listener shutdown
Assigned by Linux
May 2, 2025
CVE-2023-53090High 7.8drm/amdkfd: Fix an illegal memory access
Assigned by Linux
May 2, 2025
CVE-2023-53100High 7.8ext4: fix WARNING in ext4_update_inline_data
Assigned by Linux
May 2, 2025
CVE-2023-53102High 7.8ice: xsk: disable txq irq before flushing hw
Assigned by Linux
May 2, 2025
CVE-2023-53107High 7.8veth: Fix use after free in XDP_REDIRECT
Assigned by Linux
May 2, 2025
CVE-2023-53110High 7.5net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
Assigned by Linux
May 2, 2025
CVE-2023-53111High 7.8loop: Fix use-after-free issues
Assigned by Linux
May 2, 2025
CVE-2023-53116Critical 9.8nvmet: avoid potential UAF in nvmet_req_complete()
Assigned by Linux
May 2, 2025
CVE-2024-58098High 7.8bpf: track changes_pkt_data property for global functions
Assigned by Linux
May 5, 2025
CVE-2024-58100High 7.8bpf: check changes_pkt_data property for extension programs
Assigned by Linux
May 5, 2025
CVE-2024-58237High 7.8bpf: consider that tail calls invalidate packet pointers
Assigned by Linux
May 5, 2025
CVE-2025-37800High 7.1driver core: fix potential NULL pointer dereference in dev_uevent()
Assigned by Linux
May 8, 2025
CVE-2025-37801High 7.8spi: spi-imx: Add check for spi_imx_setupxfer()
Assigned by Linux
May 8, 2025
CVE-2025-37813High 7.8usb: xhci: Fix invalid pointer dereference in Etron workaround
Assigned by Linux
May 8, 2025
CVE-2025-37820High 7.5xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
Assigned by Linux
May 8, 2025
CVE-2025-37822High 7.8riscv: uprobes: Add missing fence.i after building the XOL buffer
Assigned by Linux
May 8, 2025
CVE-2025-37823High 7.8net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
Assigned by Linux
May 8, 2025
CVE-2025-37861High 7.8scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
Assigned by Linux
May 9, 2025
CVE-2025-37869High 7.8drm/xe: Use local fence in error path of xe_migrate_clear
Assigned by Linux
May 9, 2025
CVE-2025-37873High 7.8eth: bnxt: fix missing ring index trim on error path
Assigned by Linux
May 9, 2025
CVE-2025-37876High 7.0netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
Assigned by Linux
May 9, 2025
CVE-2025-37882High 7.8usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
Assigned by Linux
May 9, 2025
CVE-2025-37885High 8.8KVM: x86: Reset IRTE to host control if *new* route isn't postable
Assigned by Linux
May 9, 2025
CVE-2025-37891High 7.8ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
Assigned by Linux
May 19, 2025
CVE-2025-37909Medium 5.5net: lan743x: Fix memleak issue when GSO enabled
Assigned by Linux
May 20, 2025
PreviousPage 14 of 144Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.