CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,214 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,214
Show in the list
Critical, last 7 days
334
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,418 CVEs, showing 1101 to 1150PreviousPage 23 of 149Next
CVESeverityTitlePublished
CVE-2025-40307High 7.8exfat: validate cluster allocation bits of the allocation bitmap
Assigned by Linux
Dec 8, 2025
CVE-2025-40309High 8.0Bluetooth: SCO: Fix UAF on sco_conn_free
Assigned by Linux
Dec 8, 2025
CVE-2025-40318High 8.8Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
Assigned by Linux
Dec 8, 2025
CVE-2025-40319High 7.8bpf: Sync pending IRQ work before freeing ring buffer
Assigned by Linux
Dec 8, 2025
CVE-2025-40320Critical 9.8smb: client: fix potential cfid UAF in smb2_query_info_compound
Assigned by Linux
Dec 8, 2025
CVE-2025-40323High 7.8fbcon: Set fb_display[i]->mode to NULL when the mode is released
Assigned by Linux
Dec 8, 2025
CVE-2025-40324High 7.5NFSD: Fix crash in nfsd4_read_release()
Assigned by Linux
Dec 8, 2025
CVE-2022-50630High 7.8mm: hugetlb: fix UAF in hugetlb_handle_userfault
Assigned by Linux
Dec 8, 2025
CVE-2023-53747High 7.8vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
Assigned by Linux
Dec 8, 2025
CVE-2023-53753High 7.8drm/amd/display: fix mapping to non-allocated address
Assigned by Linux
Dec 8, 2025
CVE-2023-53764High 8.8wifi: ath12k: Handle lock during peer_id find
Assigned by Linux
Dec 8, 2025
CVE-2022-50650High 7.8bpf: Fix reference state management for synchronous callbacks
Assigned by Linux
Dec 9, 2025
CVE-2023-53781High 7.8smc: Fix use-after-free in tcp_write_timer_handler().
Assigned by Linux
Dec 9, 2025
CVE-2023-53785High 8.8mt76: mt7921: don't assume adequate headroom for SDIO headers
Assigned by Linux
Dec 9, 2025
CVE-2023-53790High 7.8bpf: Zeroing allocated object from slab in bpf memory allocator
Assigned by Linux
Dec 9, 2025
CVE-2023-53794Critical 9.8cifs: fix session state check in reconnect to avoid use-after-free issue
Assigned by Linux
Dec 9, 2025
CVE-2023-53800High 7.8ubi: Fix use-after-free when volume resizing failed
Assigned by Linux
Dec 9, 2025
CVE-2023-53803High 8.1scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
Assigned by Linux
Dec 9, 2025
CVE-2023-53816High 7.8drm/amdkfd: fix potential kgd_mem UAFs
Assigned by Linux
Dec 9, 2025
CVE-2022-50665High 7.1wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected
Assigned by Linux
Dec 9, 2025
CVE-2022-50666Critical 9.8RDMA/siw: Fix QP destroy to wait for all references dropped.
Assigned by Linux
Dec 9, 2025
CVE-2022-50671High 7.5RDMA/rxe: Fix "kernel NULL pointer dereference" error
Assigned by Linux
Dec 9, 2025
CVE-2022-50677High 7.0ipmi: fix use after free in _ipmi_destroy_user()
Assigned by Linux
Dec 9, 2025
CVE-2023-53822High 8.8wifi: ath11k: Ignore frags from uninitialized peer in dp.
Assigned by Linux
Dec 9, 2025
CVE-2023-53824High 7.8netlink: annotate lockless accesses to nlk->max_recvmsg_len
Assigned by Linux
Dec 9, 2025
CVE-2023-53827High 8.8Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
Assigned by Linux
Dec 9, 2025
CVE-2023-53828High 7.8Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()
Assigned by Linux
Dec 9, 2025
CVE-2023-53836High 7.8bpf, sockmap: Fix skb refcnt race after locking changes
Assigned by Linux
Dec 9, 2025
CVE-2023-53866High 7.8ASoC: soc-compress: Reposition and add pcm_mutex
Assigned by Linux
Dec 9, 2025
CVE-2025-40328High 8.8smb: client: fix potential UAF in smb2_close_cached_fid()
Assigned by Linux
Dec 9, 2025
CVE-2025-40336High 8.8drm/gpusvm: fix hmm_pfn_to_map_order() usage
Assigned by Linux
Dec 9, 2025
CVE-2025-40343Critical 9.8nvmet-fc: avoid scheduling association deletion twice
Assigned by Linux
Dec 9, 2025
CVE-2025-40344High 7.8ASoC: Intel: avs: Disable periods-elapsed work when closing PCM
Assigned by Linux
Dec 9, 2025
CVE-2025-40362High 8.8ceph: fix multifs mds auth caps issue
Assigned by Linux
Dec 16, 2025
CVE-2025-68170High 7.8drm/radeon: Do not kfree() devres managed rdev
Assigned by Linux
Dec 16, 2025
CVE-2025-68171High 7.8x86/fpu: Ensure XFD state on signal delivery
Assigned by Linux
Dec 16, 2025
CVE-2025-68181High 7.8drm/radeon: Remove calls to drm_put_dev()
Assigned by Linux
Dec 16, 2025
CVE-2025-68182High 7.5wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()
Assigned by Linux
Dec 16, 2025
CVE-2025-68183High 7.8ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
Assigned by Linux
Dec 16, 2025
CVE-2025-68192Critical 9.8net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
Assigned by Linux
Dec 16, 2025
CVE-2025-68206High 7.5netfilter: nft_ct: add seqadj extension for natted connections
Assigned by Linux
Dec 16, 2025
CVE-2025-68207High 7.8drm/xe/guc: Synchronize Dead CT worker with unbind
Assigned by Linux
Dec 16, 2025
CVE-2025-68208High 7.8bpf: account for current allocated stack depth in widen_imprecise_scalars()
Assigned by Linux
Dec 16, 2025
CVE-2025-68215High 7.0ice: fix PTP cleanup on driver removal in error path
Assigned by Linux
Dec 16, 2025
CVE-2025-68218High 7.5nvme-multipath: fix lockdep WARN due to partition scan work
Assigned by Linux
Dec 16, 2025
CVE-2025-68226High 8.8smb: client: fix incomplete backport in cfids_invalidation_worker()
Assigned by Linux
Dec 16, 2025
CVE-2025-68239Not yet scoredbinfmt_misc: restore write access before closing files opened by open_exec()
Assigned by Linux
Dec 16, 2025
CVE-2025-68261High 7.5ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
Assigned by Linux
Dec 16, 2025
CVE-2025-68263Critical 9.8ksmbd: ipc: fix use-after-free in ipc_msg_send_request
Assigned by Linux
Dec 16, 2025
CVE-2025-68264Not yet scoredext4: refresh inline data size before write operations
Assigned by Linux
Dec 16, 2025
PreviousPage 23 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.