CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,207 CVEs published, 335 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,207
Show in the list
Critical, last 7 days
335
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,421 CVEs, showing 1301 to 1350PreviousPage 27 of 149Next
CVESeverityTitlePublished
CVE-2025-71128High 7.5erspan: Initialize options_len before referencing options.
Assigned by Linux
Jan 14, 2026
CVE-2025-71130High 7.8drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
Assigned by Linux
Jan 14, 2026
CVE-2025-71131High 7.5crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
Assigned by Linux
Jan 14, 2026
CVE-2025-71132High 7.5smc91x: fix broken irq-context in PREEMPT_RT
Assigned by Linux
Jan 14, 2026
CVE-2025-71133High 7.1RDMA/irdma: avoid invalid read in irdma_net_event
Assigned by Linux
Jan 14, 2026
CVE-2026-22976Medium 5.5net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
Assigned by Linux
Jan 21, 2026
CVE-2026-22977Medium 5.5net: sock: fix hardened usercopy panic in sock_recv_errqueue
Assigned by Linux
Jan 21, 2026
CVE-2025-71147Medium 5.5KEYS: trusted: Fix a memory leak in tpm2_load_cmd
Assigned by Linux
Jan 23, 2026
CVE-2025-71154Medium 5.5net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
Assigned by Linux
Jan 23, 2026
CVE-2025-71161High 7.5dm-verity: disable recursive forward error correction
Assigned by Linux
Jan 23, 2026
CVE-2026-22979Medium 5.5net: fix memory leak in skb_segment_list for GRO packets
Assigned by Linux
Jan 23, 2026
CVE-2026-22980High 7.8nfsd: provide locking for v4_end_grace
Assigned by Linux
Jan 23, 2026
CVE-2026-22982Medium 5.5net: mscc: ocelot: Fix crash when adding interface under a lag
Assigned by Linux
Jan 23, 2026
CVE-2026-22984Critical 9.8libceph: prevent potential out-of-bounds reads in handle_auth_done()
Assigned by Linux
Jan 23, 2026
CVE-2026-22990High 7.5libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
Assigned by Linux
Jan 23, 2026
CVE-2026-22991High 7.5libceph: make free_choose_arg_map() resilient to partial allocation
Assigned by Linux
Jan 23, 2026
CVE-2026-22992High 7.5libceph: return the handler error from mon_handle_auth_done()
Assigned by Linux
Jan 23, 2026
CVE-2026-22994Medium 5.5bpf: Fix reference count leak in bpf_prog_test_run_xdp()
Assigned by Linux
Jan 23, 2026
CVE-2025-71162High 7.8dmaengine: tegra-adma: Fix use-after-free
Assigned by Linux
Jan 25, 2026
CVE-2025-71163Medium 5.5dmaengine: idxd: fix device leaks on compat bind and unbind
Assigned by Linux
Jan 25, 2026
CVE-2026-22997High 7.5net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
Assigned by Linux
Jan 25, 2026
CVE-2026-22998High 7.5nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
Assigned by Linux
Jan 25, 2026
CVE-2026-22999High 7.8net/sched: sch_qfq: do not free existing class in qfq_change_class()
Assigned by Linux
Jan 25, 2026
CVE-2026-23001High 7.8macvlan: fix possible UAF in macvlan_forward_source()
Assigned by Linux
Jan 25, 2026
CVE-2026-23003High 7.5ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
Assigned by Linux
Jan 25, 2026
CVE-2026-23004High 7.8dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
Assigned by Linux
Jan 25, 2026
CVE-2026-23005Medium 5.5x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
Assigned by Linux
Jan 25, 2026
CVE-2026-23010High 7.8ipv6: Fix use-after-free in inet6_addr_del().
Assigned by Linux
Jan 25, 2026
CVE-2026-23011Medium 5.5ipv4: ip_gre: make ipgre_header() robust
Assigned by Linux
Jan 25, 2026
CVE-2026-23013High 7.0net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
Assigned by Linux
Jan 25, 2026
CVE-2025-71182Medium 5.5can: j1939: make j1939_session_activate() fail if device is no longer registered
Assigned by Linux
Jan 31, 2026
CVE-2025-71183Critical 9.1btrfs: always detect conflicting inodes when logging inode refs
Assigned by Linux
Jan 31, 2026
CVE-2026-23019Medium 5.5net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
Assigned by Linux
Jan 31, 2026
CVE-2026-23021Medium 5.5net: usb: pegasus: fix memory leak in update_eth_regs_async()
Assigned by Linux
Jan 31, 2026
CVE-2025-71185Medium 5.5dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
Assigned by Linux
Jan 31, 2026
CVE-2025-71186Medium 5.5dmaengine: stm32: dmamux: fix device leak on route allocation
Assigned by Linux
Jan 31, 2026
CVE-2025-71189Medium 5.5dmaengine: dw: dmamux: fix OF node leak on route allocation failure
Assigned by Linux
Jan 31, 2026
CVE-2025-71190Medium 5.5dmaengine: bcm-sba-raid: fix device leak on probe
Assigned by Linux
Jan 31, 2026
CVE-2025-71191Medium 5.5dmaengine: at_hdmac: fix device leak on of_dma_xlate()
Assigned by Linux
Jan 31, 2026
CVE-2026-23026Medium 5.5dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
Assigned by Linux
Jan 31, 2026
CVE-2026-23038Not yet scoredpnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
Assigned by Linux
Jan 31, 2026
CVE-2025-71194Not yet scoredbtrfs: fix deadlock in wait_current_trans() due to ignored transaction type
Assigned by Linux
Feb 4, 2026
CVE-2026-23054Not yet scorednet: hv_netvsc: reject RSS hash key programming without RX indirection table
Assigned by Linux
Feb 4, 2026
CVE-2025-71197Not yet scoredw1: therm: Fix off-by-one buffer overflow in alarms_store
Assigned by Linux
Feb 4, 2026
CVE-2026-23060Medium 5.5crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
Assigned by Linux
Feb 4, 2026
CVE-2026-23061Medium 5.5can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
Assigned by Linux
Feb 4, 2026
CVE-2026-23066High 7.8rxrpc: Fix recvmsg() unconditional requeue
Assigned by Linux
Feb 4, 2026
CVE-2026-23069Medium 5.5vsock/virtio: fix potential underflow in virtio_transport_get_credit()
Assigned by Linux
Feb 4, 2026
CVE-2026-23071Medium 4.7regmap: Fix race condition in hwspinlock irqsave routine
Assigned by Linux
Feb 4, 2026
CVE-2026-23073High 7.8wifi: rsi: Fix memory corruption due to not set vif driver data size
Assigned by Linux
Feb 4, 2026
PreviousPage 27 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.