InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,177 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,177
Show in the list
Critical, last 7 days
329
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list
Clear

Showing CVEs that name the product linux:linux. Show all products

7,418 CVEs, showing 1051 to 1100PreviousPage 22 of 149Next
CVESeverityTitlePublished
CVE-2025-40053High 7.5net: dlink: handle copy_thresh allocation failure
Assigned by Linux
Oct 28, 2025
CVE-2025-40061High 7.8RDMA/rxe: Fix race in do_task() when draining
Assigned by Linux
Oct 28, 2025
CVE-2025-40070Not yet scoredpps: fix warning in pps_register_cdev when register device fail
Assigned by Linux
Oct 28, 2025
CVE-2025-40075High 8.1tcp_metrics: use dst_dev_net_rcu()
Assigned by Linux
Oct 28, 2025
CVE-2025-40078Not yet scoredbpf: Explicitly check accesses to bpf_sock_addr
Assigned by Linux
Oct 28, 2025
CVE-2025-40080Not yet scorednbd: restrict sockets to TCP and UDP
Assigned by Linux
Oct 28, 2025
CVE-2025-40081High 7.8perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
Assigned by Linux
Oct 28, 2025
CVE-2025-40082High 7.1hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Assigned by Linux
Oct 28, 2025
CVE-2023-7324High 8.1scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
Assigned by Linux
Oct 29, 2025
CVE-2025-40099Critical 9.4cifs: parse_dfs_referrals: prevent oob on malformed input
Assigned by Linux
Oct 30, 2025
CVE-2025-40104High 7.8ixgbevf: fix mailbox API compatibility by negotiating supported features
Assigned by Linux
Oct 30, 2025
CVE-2025-40105High 7.8vfs: Don't leak disconnected dentries on umount
Assigned by Linux
Oct 30, 2025
CVE-2025-40111High 7.8drm/vmwgfx: Fix Use-after-free in validation
Assigned by Linux
Nov 12, 2025
CVE-2025-40123High 7.8bpf: Enforce expected_attach_type for tailcall compatibility
Assigned by Linux
Nov 12, 2025
CVE-2025-40129High 7.5sunrpc: fix null pointer dereference on zero-length checksum
Assigned by Linux
Nov 12, 2025
CVE-2025-40135High 8.1ipv6: use RCU in ip6_xmit()
Assigned by Linux
Nov 12, 2025
CVE-2025-40139High 7.8smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
Assigned by Linux
Nov 12, 2025
CVE-2025-40141High 8.0Bluetooth: ISO: Fix possible UAF on iso_conn_free
Assigned by Linux
Nov 12, 2025
CVE-2025-40149High 7.8tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
Assigned by Linux
Nov 12, 2025
CVE-2025-40158High 8.1ipv6: use RCU in ip6_output()
Assigned by Linux
Nov 12, 2025
CVE-2025-40159High 7.8xsk: Harden userspace-supplied xdp_desc validation
Assigned by Linux
Nov 12, 2025
CVE-2025-40167High 7.8ext4: detect invalid INLINE_DATA + EXTENTS flag combination
Assigned by Linux
Nov 12, 2025
CVE-2025-40169High 7.8bpf: Reject negative offsets for ALU ops
Assigned by Linux
Nov 12, 2025
CVE-2025-40171High 7.5nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
Assigned by Linux
Nov 12, 2025
CVE-2025-40173High 7.8net/ip6_tunnel: Prevent perpetual tunnel growth
Assigned by Linux
Nov 12, 2025
CVE-2025-40176Critical 9.8tls: wait for pending async decryptions if tls_strp_msg_hold fails
Assigned by Linux
Nov 12, 2025
CVE-2025-40183High 7.5bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
Assigned by Linux
Nov 12, 2025
CVE-2025-40186High 8.1tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
Assigned by Linux
Nov 12, 2025
CVE-2025-40187High 7.5net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
Assigned by Linux
Nov 12, 2025
CVE-2025-40196Not yet scoredfs: quota: create dedicated workqueue for quota_release_work
Assigned by Linux
Nov 12, 2025
CVE-2025-40198High 7.8ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
Assigned by Linux
Nov 12, 2025
CVE-2025-40199High 7.8page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches
Assigned by Linux
Nov 12, 2025
CVE-2025-40201High 7.8kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
Assigned by Linux
Nov 12, 2025
CVE-2025-40204High 8.1sctp: Fix MAC comparison to be constant-time
Assigned by Linux
Nov 12, 2025
CVE-2025-40205High 7.8btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
Assigned by Linux
Nov 12, 2025
CVE-2025-40206High 7.8netfilter: nft_objref: validate objref and objrefmap expressions
Assigned by Linux
Nov 12, 2025
CVE-2025-40216High 7.8io_uring/rsrc: don't rely on user vaddr alignment
Assigned by Linux
Dec 4, 2025
CVE-2025-40219Not yet scoredPCI/IOV: Fix race between SR-IOV enable/disable and hotplug
Assigned by Linux
Dec 4, 2025
CVE-2025-40242High 7.0gfs2: Fix unlikely race in gdlm_put_lock
Assigned by Linux
Dec 4, 2025
CVE-2025-40250High 7.8net/mlx5: Clean up only new IRQ glue on request_irq() failure
Assigned by Linux
Dec 4, 2025
CVE-2025-40252Critical 9.8net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
Assigned by Linux
Dec 4, 2025
CVE-2025-40253High 8.8s390/ctcm: Fix double-kfree
Assigned by Linux
Dec 4, 2025
CVE-2025-40261Critical 9.8nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
Assigned by Linux
Dec 4, 2025
CVE-2025-40272High 7.8mm/secretmem: fix use-after-free race in fault handler
Assigned by Linux
Dec 6, 2025
CVE-2025-40273High 8.8NFSD: free copynotify stateid in nfs4_free_ol_stateid()
Assigned by Linux
Dec 6, 2025
CVE-2025-40283High 7.8Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
Assigned by Linux
Dec 6, 2025
CVE-2025-40284High 7.8Bluetooth: MGMT: cancel mesh send timer when hdev removed
Assigned by Linux
Dec 6, 2025
CVE-2025-40292High 8.4virtio-net: fix received length check in big packets
Assigned by Linux
Dec 8, 2025
CVE-2025-40297High 7.8net: bridge: fix use-after-free due to MST port state bypass
Assigned by Linux
Dec 8, 2025
CVE-2025-40302High 7.8media: videobuf2: forbid remove_bufs when legacy fileio is active
Assigned by Linux
Dec 8, 2025
PreviousPage 22 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.