CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,224 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,224
Show in the list
Critical, last 7 days
344
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,418 CVEs, showing 901 to 950PreviousPage 19 of 149Next
CVESeverityTitlePublished
CVE-2025-39673Critical 9.8ppp: fix race conditions in ppp_fill_forward_path
Assigned by Linux
Sep 5, 2025
CVE-2025-39677High 7.8net/sched: Fix backlog accounting in qdisc_dequeue_internal
Assigned by Linux
Sep 5, 2025
CVE-2025-39681Medium 5.5x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Assigned by Linux
Sep 5, 2025
CVE-2025-39682
Known exploited
Critical 9.8tls: fix handling of zero-length records on the rx_list
Assigned by Linux
Sep 5, 2025
CVE-2025-39683High 7.8tracing: Limit access to parser->buffer when trace_get_user failed
Assigned by Linux
Sep 5, 2025
CVE-2025-39689High 7.8ftrace: Also allocate and copy hash for reading of filter files
Assigned by Linux
Sep 5, 2025
CVE-2025-39691High 7.8fs/buffer: fix use-after-free when call bh_read() helper
Assigned by Linux
Sep 5, 2025
CVE-2025-39697High 7.8NFS: Fix a race when updating an existing write
Assigned by Linux
Sep 5, 2025
CVE-2025-39702Critical 9.8ipv6: sr: Fix MAC comparison to be constant-time
Assigned by Linux
Sep 5, 2025
CVE-2025-39703Critical 9.8net, hsr: reject HSR frame if skb can't hold tag
Assigned by Linux
Sep 5, 2025
CVE-2025-39718High 8.4vsock/virtio: Validate length in packet header before skb_put()
Assigned by Linux
Sep 5, 2025
CVE-2025-39721Medium 5.5crypto: qat - flush misc workqueue during device shutdown
Assigned by Linux
Sep 5, 2025
CVE-2025-39724Medium 5.5serial: 8250: fix panic due to PSLVERR
Assigned by Linux
Sep 5, 2025
CVE-2025-39726Critical 9.8s390/ism: fix concurrency management in ism_cmd()
Assigned by Linux
Sep 5, 2025
CVE-2025-39732High 7.8wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
Assigned by Linux
Sep 7, 2025
CVE-2025-40300Medium 5.5x86/vmscape: Add conditional IBPB mitigation
Assigned by Linux
Sep 11, 2025
CVE-2025-39738High 7.3btrfs: do not allow relocation of partially dropped subvolumes
Assigned by Linux
Sep 11, 2025
CVE-2025-39748Medium 5.5bpf: Forget ranges when refining tnum after JSET
Assigned by Linux
Sep 11, 2025
CVE-2025-39750High 8.8wifi: ath12k: Correct tid cleanup when tid setup fails
Assigned by Linux
Sep 11, 2025
CVE-2025-39756Medium 5.5fs: Prevent file descriptor table allocations exceeding INT_MAX
Assigned by Linux
Sep 11, 2025
CVE-2025-39764Medium 5.5netfilter: ctnetlink: remove refcounting in expectation dumpers
Assigned by Linux
Sep 11, 2025
CVE-2025-39770High 7.5net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Assigned by Linux
Sep 11, 2025
CVE-2025-39773Medium 5.5net: bridge: fix soft lockup in br_multicast_query_expired()
Assigned by Linux
Sep 11, 2025
CVE-2025-39776High 7.0mm/debug_vm_pgtable: clear page table entries at destroy_args()
Assigned by Linux
Sep 11, 2025
CVE-2025-39782Medium 5.5jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Assigned by Linux
Sep 11, 2025
CVE-2025-39783High 7.8PCI: endpoint: Fix configfs group list head handling
Assigned by Linux
Sep 11, 2025
CVE-2025-39787High 7.8soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Assigned by Linux
Sep 11, 2025
CVE-2025-39790High 8.4bus: mhi: host: Detect events pointing to unexpected TREs
Assigned by Linux
Sep 11, 2025
CVE-2025-39791High 7.8dm: dm-crypt: Do not partially accept write BIOs with zoned targets
Assigned by Linux
Sep 11, 2025
CVE-2025-39792High 7.8dm: Always split write BIOs to zoned device limits
Assigned by Linux
Sep 12, 2025
CVE-2025-39795Medium 5.5block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Assigned by Linux
Sep 12, 2025
CVE-2025-39798High 7.3NFS: Fix the setting of capabilities when automounting a new filesystem
Assigned by Linux
Sep 12, 2025
CVE-2022-50241High 8.8NFSD: fix use-after-free on source server when doing inter-server copy
Assigned by Linux
Sep 15, 2025
CVE-2022-50252High 7.8igb: Do not free q_vector unless new one was allocated
Assigned by Linux
Sep 15, 2025
CVE-2022-50255High 7.8tracing: Fix reading strings from synthetic events
Assigned by Linux
Sep 15, 2025
CVE-2022-50259High 7.8bpf, sockmap: fix race in sock_map_free()
Assigned by Linux
Sep 15, 2025
CVE-2023-53176High 7.8serial: 8250: Reinit port->pm on port specific driver unbind
Assigned by Linux
Sep 15, 2025
CVE-2023-53179High 7.8netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
Assigned by Linux
Sep 15, 2025
CVE-2023-53184High 7.8arm64/sme: Set new vector length before reallocating
Assigned by Linux
Sep 15, 2025
CVE-2023-53186High 8.1skbuff: Fix a race between coalescing and releasing SKBs
Assigned by Linux
Sep 15, 2025
CVE-2023-53189High 7.8ipv6/addrconf: fix a potential refcount underflow for idev
Assigned by Linux
Sep 15, 2025
CVE-2023-53205High 7.3KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler
Assigned by Linux
Sep 15, 2025
CVE-2022-50303High 7.8drm/amdkfd: Fix double release compute pasid
Assigned by Linux
Sep 15, 2025
CVE-2022-50315High 7.8ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
Assigned by Linux
Sep 15, 2025
CVE-2022-50328High 7.8jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
Assigned by Linux
Sep 15, 2025
CVE-2022-50329High 7.8block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
Assigned by Linux
Sep 15, 2025
CVE-2023-53292Medium 5.5blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
Assigned by Linux
Sep 16, 2025
CVE-2025-39826High 8.8net: rose: convert 'use' field to refcount_t
Assigned by Linux
Sep 16, 2025
CVE-2025-39827High 8.8net: rose: include node references in rose_neigh refcount
Assigned by Linux
Sep 16, 2025
CVE-2025-39845Medium 5.5x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
Assigned by Linux
Sep 19, 2025
PreviousPage 19 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.