CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,330 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,330
Show in the list
Critical, last 7 days
344
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,513 CVEs, showing 751 to 800PreviousPage 16 of 91Next
CVESeverityTitlePublished
CVE-2025-21765High 8.1ipv6: use RCU protection in ip6_default_advmss()
Assigned by Linux
Feb 27, 2025
CVE-2025-21766High 8.1ipv4: use RCU protection in __ip_rt_update_pmtu()
Assigned by Linux
Feb 27, 2025
CVE-2025-21767Medium 5.5clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
Assigned by Linux
Feb 27, 2025
CVE-2025-21772High 7.8partitions: mac: fix handling of bogus partition table
Assigned by Linux
Feb 27, 2025
CVE-2025-21776Medium 5.5USB: hub: Ignore non-compliant devices with too many configs or interfaces
Assigned by Linux
Feb 27, 2025
CVE-2025-21779Medium 5.5KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
Assigned by Linux
Feb 27, 2025
CVE-2025-21780High 7.8drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
Assigned by Linux
Feb 27, 2025
CVE-2025-21785High 7.8arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
Assigned by Linux
Feb 27, 2025
CVE-2025-21787Medium 5.5team: better TEAM_OPTION_TYPE_STRING validation
Assigned by Linux
Feb 27, 2025
CVE-2025-21790Medium 5.5vxlan: check vxlan_vnigroup_init() return value
Assigned by Linux
Feb 27, 2025
CVE-2025-21791High 7.8vrf: use RCU protection in l3mdev_l3_out()
Assigned by Linux
Feb 27, 2025
CVE-2025-21795High 7.5NFSD: fix hang in nfsd4_shutdown_callback
Assigned by Linux
Feb 27, 2025
CVE-2025-21796Critical 9.8nfsd: clear acl_access/acl_default after releasing them
Assigned by Linux
Feb 27, 2025
CVE-2025-21802Medium 5.5net: hns3: fix oops when unload drivers paralleling
Assigned by Linux
Feb 27, 2025
CVE-2025-21806Medium 5.5net: let net.core.dev_weight always be non-zero
Assigned by Linux
Feb 27, 2025
CVE-2025-21808High 7.8net: xdp: Disallow attaching device-bound programs in generic mode
Assigned by Linux
Feb 27, 2025
CVE-2025-21810High 7.8driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
Assigned by Linux
Feb 27, 2025
CVE-2025-21814Medium 5.5ptp: Ensure info->enable callback is always set
Assigned by Linux
Feb 27, 2025
CVE-2024-58051Medium 5.5ipmi: ipmb: Add check devm_kasprintf() returned value
Assigned by Linux
Mar 6, 2025
CVE-2024-58053High 7.5rxrpc: Fix handling of received connection abort
Assigned by Linux
Mar 6, 2025
CVE-2024-58056Medium 5.5remoteproc: core: Fix ida_free call while not allocated
Assigned by Linux
Mar 6, 2025
CVE-2024-58058Medium 5.5ubifs: skip dumping tnc tree when zroot is null
Assigned by Linux
Mar 6, 2025
CVE-2024-58061Medium 5.5wifi: mac80211: prohibit deactivating all links
Assigned by Linux
Mar 6, 2025
CVE-2024-58063Medium 5.5wifi: rtlwifi: fix memory leaks and invalid access at probe error path
Assigned by Linux
Mar 6, 2025
CVE-2024-58068Medium 5.5OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
Assigned by Linux
Mar 6, 2025
CVE-2024-58071Medium 5.5team: prevent adding a device which is already a team device lower
Assigned by Linux
Mar 6, 2025
CVE-2024-58072High 7.8wifi: rtlwifi: remove unused check_buddy_priv
Assigned by Linux
Mar 6, 2025
CVE-2025-21825High 7.8bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
Assigned by Linux
Mar 6, 2025
CVE-2025-21827High 7.8Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()
Assigned by Linux
Mar 6, 2025
CVE-2025-21830High 7.3landlock: Handle weird files
Assigned by Linux
Mar 6, 2025
CVE-2024-58077Medium 5.5ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
Assigned by Linux
Mar 6, 2025
CVE-2024-58079High 7.8media: uvcvideo: Fix crash during unbind if gpio unit is in use
Assigned by Linux
Mar 6, 2025
CVE-2024-58083High 7.8KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
Assigned by Linux
Mar 6, 2025
CVE-2024-58085Medium 5.5tomoyo: don't emit warning in tomoyo_write_control()
Assigned by Linux
Mar 6, 2025
CVE-2025-21832High 7.8block: don't revert iter for -EIOCBQUEUED
Assigned by Linux
Mar 6, 2025
CVE-2024-58086High 7.8drm/v3d: Stop active perfmon if it is being destroyed
Assigned by Linux
Mar 6, 2025
CVE-2025-21835Medium 5.5usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
Assigned by Linux
Mar 7, 2025
CVE-2025-21836High 7.8io_uring/kbuf: reallocate buf lists on upgrade
Assigned by Linux
Mar 7, 2025
CVE-2025-21838Medium 5.5usb: gadget: core: flush gadget workqueue after device removal
Assigned by Linux
Mar 7, 2025
CVE-2025-21839High 7.3KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
Assigned by Linux
Mar 7, 2025
CVE-2025-21844High 7.5smb: client: Add check for next_buffer in receive_encrypted_standard()
Assigned by Linux
Mar 12, 2025
CVE-2025-21846Medium 5.5acct: perform last write from workqueue
Assigned by Linux
Mar 12, 2025
CVE-2025-21853Medium 5.5bpf: avoid holding freeze_mutex during mmap operation
Assigned by Linux
Mar 12, 2025
CVE-2025-21858High 7.8geneve: Fix use-after-free in geneve_find_dev().
Assigned by Linux
Mar 12, 2025
CVE-2025-21859Medium 5.5USB: gadget: f_midi: f_midi_complete to call queue_work
Assigned by Linux
Mar 12, 2025
CVE-2025-21861Medium 5.5mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
Assigned by Linux
Mar 12, 2025
CVE-2025-21862Medium 5.5drop_monitor: fix incorrect initialization order
Assigned by Linux
Mar 12, 2025
CVE-2025-21863High 7.8io_uring: prevent opcode speculation
Assigned by Linux
Mar 12, 2025
CVE-2025-21864High 7.8tcp: drop secpath at the same time as we currently drop dst
Assigned by Linux
Mar 12, 2025
CVE-2025-21865Medium 5.5gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
Assigned by Linux
Mar 12, 2025
PreviousPage 16 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.