CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 10:30 UTC)

What this means for you

This week: 5,476 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,476; Show in the list
Critical, last 7 days: 358; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,237 CVEs, showing 51 to 100PreviousPage 2 of 85Next

CVE	Severity	Title	Published
CVE-2021-38206	Medium 5.5	The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser)… Assigned by mitre	Aug 8, 2021
CVE-2021-38202	High 7.5	fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is bei… Assigned by mitre	Aug 8, 2021
CVE-2021-38199	Medium 6.5	fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arran… Assigned by mitre	Aug 8, 2021
CVE-2021-38198	Medium 5.5	arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault. Assigned by mitre	Aug 8, 2021
CVE-2021-43975	Medium 6.7	In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-… Assigned by mitre	Nov 17, 2021
CVE-2021-0920 Known exploited	Medium 6.4	In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. Assigned by google_android	Dec 15, 2021
CVE-2021-4001	Medium 4.1	A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. Assigned by redhat	Jan 21, 2022
CVE-2021-34866	High 8.8	This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. Assigned by zdi	Jan 25, 2022
CVE-2021-22600 Known exploited	Medium 6.6	Double Free in net/packet/af_packet.c leading to priviledge escalation Assigned by Google	Jan 26, 2022
CVE-2022-0264	Medium 5.5	A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Assigned by redhat	Feb 4, 2022
CVE-2021-45402	Medium 5.5	The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain pote… Assigned by mitre	Feb 11, 2022
CVE-2022-0185 Known exploited	High 8.4	A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. Assigned by redhat	Feb 11, 2022
CVE-2021-44879	Medium 5.5	In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. Assigned by mitre	Feb 13, 2022
CVE-2021-4090	High 7.1	An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Assigned by redhat	Feb 18, 2022
CVE-2021-20320	Medium 5.5	A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. Assigned by redhat	Feb 18, 2022
CVE-2022-0492 Known exploited	High 7.8	A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Assigned by redhat	Mar 3, 2022
CVE-2022-0847 Known exploited	High 7.8	A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus… Assigned by redhat	Mar 7, 2022
CVE-2022-26878	Medium 5.5	drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed). Assigned by mitre	Mar 11, 2022
CVE-2022-0500	High 7.8	A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. Assigned by redhat	Mar 25, 2022
CVE-2022-0995 Known exploited	High 7.8	An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. Assigned by redhat	Mar 25, 2022
CVE-2020-35501	Low 3.4	A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem	Mar 30, 2022
CVE-2022-1015	Medium 6.6	A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. Assigned by redhat	Apr 29, 2022
CVE-2022-1679	High 7.8	A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. Assigned by redhat	May 16, 2022
CVE-2022-1882	High 7.8	A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. Assigned by redhat	May 26, 2022
CVE-2022-1462	Medium 6.3	An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. Assigned by redhat	May 31, 2022
CVE-2022-32250	High 7.8	net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check l… Assigned by mitre	Jun 2, 2022
CVE-2022-32296	Low 3.3	The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. Assigned by mitre	Jun 5, 2022
CVE-2022-2078	Medium 5.5	A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of s… Assigned by redhat	Jun 30, 2022
CVE-2022-1852	Medium 5.5	A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. Assigned by redhat	Jun 30, 2022
CVE-2022-34918	High 7.8	An issue was discovered in the Linux kernel through 5.18.9. Assigned by mitre	Jul 4, 2022
CVE-2021-4135	Medium 5.5	A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. Assigned by redhat	Jul 14, 2022
CVE-2021-33656	Medium 6.8	When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. Assigned by openEuler	Jul 18, 2022
CVE-2021-33655	Medium 6.7	When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. Assigned by openEuler	Jul 18, 2022
CVE-2020-36558	Medium 5.1	A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. Assigned by mitre	Jul 21, 2022
CVE-2022-2327	High 7.5	Use-after-free in io_uring ad work_flags in Linux Kernel Assigned by Google	Jul 22, 2022
CVE-2022-36946	High 7.5	nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one… Assigned by mitre	Jul 27, 2022
CVE-2022-36879	Medium 5.5	An issue was discovered in the Linux kernel through 5.18.14. Assigned by mitre	Jul 27, 2022
CVE-2022-36123	High 7.8	The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). Assigned by mitre	Jul 29, 2022
CVE-2022-1012	High 8.2	A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. Assigned by redhat	Aug 5, 2022
CVE-2022-2503	Medium 6.9	Linux Kernel LoadPin bypass via dm-verity table reload Assigned by Google	Aug 12, 2022
CVE-2021-3759	Medium 5.5	A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. Assigned by redhat	Aug 23, 2022
CVE-2022-2978	High 7.8	A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. Assigned by redhat	Aug 24, 2022
CVE-2021-4037	Medium 4.4	Kernel: security regression for cve-2018-13405 Assigned by redhat	Aug 24, 2022
CVE-2022-2959	High 7.0	A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). Assigned by redhat	Aug 25, 2022
CVE-2022-0171	Medium 5.5	A flaw was found in the Linux kernel. Assigned by redhat	Aug 26, 2022
CVE-2022-1184	Medium 5.5	A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. Assigned by redhat	Aug 29, 2022
CVE-2022-3028	High 7.0	A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. Assigned by redhat	Aug 31, 2022
CVE-2022-2153	Medium 5.5	A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. Assigned by redhat	Aug 31, 2022
CVE-2022-2663	Medium 5.3	An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. Assigned by redhat	Sep 1, 2022
CVE-2022-39188	Medium 4.7	An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Assigned by mitre	Sep 2, 2022

PreviousPage 2 of 85Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.