CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,327 CVEs published, 345 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,327
Show in the list
Critical, last 7 days
345
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,418 CVEs, showing 801 to 850PreviousPage 17 of 149Next
CVESeverityTitlePublished
CVE-2025-38262High 7.8tty: serial: uartlite: register uart driver in init
Assigned by Linux
Jul 9, 2025
CVE-2025-38270High 7.8net: drv: netdevsim: don't napi_complete() from netpoll
Assigned by Linux
Jul 10, 2025
CVE-2025-38278High 7.8octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
Assigned by Linux
Jul 10, 2025
CVE-2025-38280Not yet scoredbpf: Avoid __bpf_prog_ret0_warn when jit fails
Assigned by Linux
Jul 10, 2025
CVE-2025-38285Not yet scoredbpf: Fix WARN() in get_bpf_raw_tp_regs
Assigned by Linux
Jul 10, 2025
CVE-2025-38290High 8.8wifi: ath12k: fix node corruption in ar->arvifs list
Assigned by Linux
Jul 10, 2025
CVE-2025-38291High 8.8wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash
Assigned by Linux
Jul 10, 2025
CVE-2025-38293High 8.8wifi: ath11k: fix node corruption in ar->arvifs list
Assigned by Linux
Jul 10, 2025
CVE-2025-38303High 7.8Bluetooth: eir: Fix possible crashes on eir_create_adv_data
Assigned by Linux
Jul 10, 2025
CVE-2025-38312Not yet scoredfbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
Assigned by Linux
Jul 10, 2025
CVE-2025-38317High 7.8wifi: ath12k: Fix buffer overflow in debugfs
Assigned by Linux
Jul 10, 2025
CVE-2025-38321High 7.8smb: Log an error when close_all_cached_dirs fails
Assigned by Linux
Jul 10, 2025
CVE-2025-38322Medium 5.5perf/x86/intel: Fix crash in icl_update_topdown_event()
Assigned by Linux
Jul 10, 2025
CVE-2025-38342High 7.0software node: Correct a OOB check in software_node_get_reference_args()
Assigned by Linux
Jul 10, 2025
CVE-2025-38346High 7.8ftrace: Fix UAF when lookup kallsym after ftrace disabled
Assigned by Linux
Jul 10, 2025
CVE-2025-38350High 7.8net/sched: Always pass notifications when child class becomes empty
Assigned by Linux
Jul 19, 2025
CVE-2025-38352
Known exploited
High 7.8posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
Assigned by Linux
Jul 22, 2025
CVE-2025-38364Not yet scoredmaple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
Assigned by Linux
Jul 25, 2025
CVE-2025-38372High 7.8RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
Assigned by Linux
Jul 25, 2025
CVE-2025-38375High 8.4virtio-net: ensure the received length does not exceed allocated size
Assigned by Linux
Jul 25, 2025
CVE-2025-38386High 7.8ACPICA: Refuse to evaluate a method if arguments are missing
Assigned by Linux
Jul 25, 2025
CVE-2025-38393High 7.5NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
Assigned by Linux
Jul 25, 2025
CVE-2025-38399High 7.5scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
Assigned by Linux
Jul 25, 2025
CVE-2025-38400Not yet scorednfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
Assigned by Linux
Jul 25, 2025
CVE-2025-38405High 7.5nvmet: fix memory leak of bio integrity
Assigned by Linux
Jul 25, 2025
CVE-2025-38408High 7.8genirq/irq_sim: Initialize work context pointers properly
Assigned by Linux
Jul 25, 2025
CVE-2025-38412High 7.8platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
Assigned by Linux
Jul 25, 2025
CVE-2025-38424High 7.8perf: Fix sample vs do_exit()
Assigned by Linux
Jul 25, 2025
CVE-2025-38430Critical 9.8nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
Assigned by Linux
Jul 25, 2025
CVE-2025-38439Critical 9.8bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Assigned by Linux
Jul 25, 2025
CVE-2025-38440High 7.8net/mlx5e: Fix race between DIM disable and net_dim()
Assigned by Linux
Jul 25, 2025
CVE-2025-38449High 7.8drm/gem: Acquire references on GEM handles for framebuffers
Assigned by Linux
Jul 25, 2025
CVE-2025-38451Not yet scoredmd/md-bitmap: fix GPF in bitmap_get_stats()
Assigned by Linux
Jul 25, 2025
CVE-2025-38455High 7.8KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
Assigned by Linux
Jul 25, 2025
CVE-2025-38457Not yet scorednet/sched: Abort __tc_modify_qdisc if parent class does not exist
Assigned by Linux
Jul 25, 2025
CVE-2025-38460High 7.0atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Assigned by Linux
Jul 25, 2025
CVE-2025-38465Not yet scorednetlink: Fix wraparounds of sk->sk_rmem_alloc.
Assigned by Linux
Jul 25, 2025
CVE-2025-38466High 7.8perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Assigned by Linux
Jul 25, 2025
CVE-2025-38468Not yet scorednet/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
Assigned by Linux
Jul 28, 2025
CVE-2025-38470High 7.8net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Assigned by Linux
Jul 28, 2025
CVE-2025-38471Critical 9.8tls: always refresh the queue when reading sock
Assigned by Linux
Jul 28, 2025
CVE-2025-38472Critical 9.8netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
Assigned by Linux
Jul 28, 2025
CVE-2025-38477High 7.8net/sched: sch_qfq: Fix race condition on qfq_aggregate
Assigned by Linux
Jul 28, 2025
CVE-2025-38478High 7.8comedi: Fix initialization of data for instructions that write to subdevice
Assigned by Linux
Jul 28, 2025
CVE-2025-38491High 8.2mptcp: make fallback action and fallback decision atomic
Assigned by Linux
Jul 28, 2025
CVE-2025-38498High 7.8do_change_type(): refuse to operate on unmounted/not ours mounts
Assigned by Linux
Jul 30, 2025
CVE-2022-50233High 7.8Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
Assigned by Linux
Aug 9, 2025
CVE-2024-58238High 7.1Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
Assigned by Linux
Aug 9, 2025
CVE-2025-38499High 7.8clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
Assigned by Linux
Aug 11, 2025
CVE-2025-38502High 7.8bpf: Fix oob access in cgroup local storage
Assigned by Linux
Aug 16, 2025
PreviousPage 17 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.