CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,207 CVEs published, 335 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,207
Show in the list
Critical, last 7 days
335
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,421 CVEs, showing 1351 to 1400PreviousPage 28 of 149Next
CVESeverityTitlePublished
CVE-2026-23074High 7.8net/sched: Enforce that teql can only be used as root qdisc
Assigned by Linux
Feb 4, 2026
CVE-2026-23076High 7.1ALSA: ctxfi: Fix potential OOB access in audio mixer handling
Assigned by Linux
Feb 4, 2026
CVE-2026-23083High 7.8fou: Don't allow 0 for FOU_ATTR_IPPROTO.
Assigned by Linux
Feb 4, 2026
CVE-2026-23084Medium 5.5be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
Assigned by Linux
Feb 4, 2026
CVE-2026-23085Medium 5.5irqchip/gic-v3-its: Avoid truncating memory addresses
Assigned by Linux
Feb 4, 2026
CVE-2026-23086Medium 5.5vsock/virtio: cap TX credit to local buffer size
Assigned by Linux
Feb 4, 2026
CVE-2026-23087Medium 5.5scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
Assigned by Linux
Feb 4, 2026
CVE-2026-23089High 7.8ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
Assigned by Linux
Feb 4, 2026
CVE-2026-23091Medium 5.5intel_th: fix device leak on output open()
Assigned by Linux
Feb 4, 2026
CVE-2026-23095High 7.5gue: Fix skb memleak with inner IP protocol 0.
Assigned by Linux
Feb 4, 2026
CVE-2026-23097Medium 5.5migrate: correct lock ordering for hugetlb file folios
Assigned by Linux
Feb 4, 2026
CVE-2026-23099High 7.1bonding: limit BOND_MODE_8023AD to Ethernet devices
Assigned by Linux
Feb 4, 2026
CVE-2026-23100Medium 5.5mm/hugetlb: fix hugetlb_pmd_shared()
Assigned by Linux
Feb 4, 2026
CVE-2026-23101Medium 4.7leds: led-class: Only Add LED to leds_list when it is fully ready
Assigned by Linux
Feb 4, 2026
CVE-2026-23103High 7.8ipvlan: Make the addrs_lock be per port
Assigned by Linux
Feb 4, 2026
CVE-2026-23105High 7.8net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
Assigned by Linux
Feb 4, 2026
CVE-2026-23108Medium 5.5can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
Assigned by Linux
Feb 4, 2026
CVE-2026-23110Medium 4.7scsi: core: Wake up the error handler when final completions race against each other
Assigned by Linux
Feb 4, 2026
CVE-2026-23111High 7.8netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
Assigned by Linux
Feb 13, 2026
CVE-2026-23112Critical 9.8nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
Assigned by Linux
Feb 13, 2026
CVE-2026-23113Medium 5.5io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
Assigned by Linux
Feb 14, 2026
CVE-2026-23119Medium 5.5bonding: provide a net pointer to __skb_flow_dissect()
Assigned by Linux
Feb 14, 2026
CVE-2026-23120Medium 5.5l2tp: avoid one data-race in l2tp_tunnel_del_work()
Assigned by Linux
Feb 14, 2026
CVE-2026-23121Medium 5.5mISDN: annotate data-race around dev->work
Assigned by Linux
Feb 14, 2026
CVE-2026-23124Medium 5.5ipv6: annotate data-race in ndisc_router_discovery()
Assigned by Linux
Feb 14, 2026
CVE-2026-23125Medium 5.5sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
Assigned by Linux
Feb 14, 2026
CVE-2026-23126Medium 4.7netdevsim: fix a race issue related to the operation on bpf_bound_progs list
Assigned by Linux
Feb 14, 2026
CVE-2026-23128Medium 5.5arm64: Set __nocfi on swsusp_arch_resume()
Assigned by Linux
Feb 14, 2026
CVE-2026-23133Medium 5.5wifi: ath10k: fix dma_free_coherent() pointer
Assigned by Linux
Feb 14, 2026
CVE-2026-23136High 7.5libceph: reset sparse-read state in osd_fault()
Assigned by Linux
Feb 14, 2026
CVE-2025-71202High 8.8iommu/sva: invalidate stale IOTLB entries for kernel address space
Assigned by Linux
Feb 14, 2026
CVE-2026-23141Medium 5.5btrfs: send: check for inline extents in range_is_hole_in_parent()
Assigned by Linux
Feb 14, 2026
CVE-2026-23144Medium 5.5mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
Assigned by Linux
Feb 14, 2026
CVE-2026-23145Medium 5.5ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
Assigned by Linux
Feb 14, 2026
CVE-2026-23146Medium 5.5Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
Assigned by Linux
Feb 14, 2026
CVE-2026-23148High 7.5nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
Assigned by Linux
Feb 14, 2026
CVE-2026-23154Medium 5.5net: fix segmentation of forwarding fraglist GRO
Assigned by Linux
Feb 14, 2026
CVE-2026-23157Medium 5.5btrfs: do not strictly require dirty metadata threshold for metadata writepages
Assigned by Linux
Feb 14, 2026
CVE-2026-23164Medium 5.5rocker: fix memory leak in rocker_world_port_post_fini()
Assigned by Linux
Feb 14, 2026
CVE-2026-23171High 7.8bonding: fix use-after-free due to enslave fail after slave array update
Assigned by Linux
Feb 14, 2026
CVE-2026-23172High 8.4net: wwan: t7xx: fix potential skb->frags overflow in RX path
Assigned by Linux
Feb 14, 2026
CVE-2025-71221High 7.8dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
Assigned by Linux
Feb 14, 2026
CVE-2026-23178High 7.8HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
Assigned by Linux
Feb 14, 2026
CVE-2026-23180High 7.0dpaa2-switch: add bounds check for if_id in IRQ handler
Assigned by Linux
Feb 14, 2026
CVE-2026-23185High 7.8wifi: iwlwifi: mld: cancel mlo_scan_start_wk
Assigned by Linux
Feb 14, 2026
CVE-2026-23191High 7.8ALSA: aloop: Fix racy access at PCM trigger
Assigned by Linux
Feb 14, 2026
CVE-2026-23193High 8.8scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
Assigned by Linux
Feb 14, 2026
CVE-2026-23198High 7.8KVM: Don't clobber irqfd routing type when deassigning irqfd
Assigned by Linux
Feb 14, 2026
CVE-2026-23202Medium 5.5spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
Assigned by Linux
Feb 14, 2026
CVE-2026-23204High 7.1net/sched: cls_u32: use skb_header_pointer_careful()
Assigned by Linux
Feb 14, 2026
PreviousPage 28 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.