CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,202 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,202
Show in the list
Critical, last 7 days
334
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,421 CVEs, showing 1401 to 1450PreviousPage 29 of 149Next
CVESeverityTitlePublished
CVE-2026-23209High 7.8macvlan: fix error recovery in macvlan_common_newlink()
Assigned by Linux
Feb 14, 2026
CVE-2026-23210Medium 4.7ice: Fix PTP NULL pointer dereference during VSI rebuild
Assigned by Linux
Feb 14, 2026
CVE-2026-23212Medium 4.7bonding: annotate data-races around slave->last_rx
Assigned by Linux
Feb 18, 2026
CVE-2025-71225Medium 5.3md: suspend array while updating raid_disks via sysfs
Assigned by Linux
Feb 18, 2026
CVE-2026-23216High 7.8scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
Assigned by Linux
Feb 18, 2026
CVE-2025-71232Medium 5.5scsi: qla2xxx: Free sp in error path to fix system crash
Assigned by Linux
Feb 18, 2026
CVE-2025-71234High 8.8wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add
Assigned by Linux
Feb 18, 2026
CVE-2025-71235Medium 5.5scsi: qla2xxx: Delay module unload while fabric scan in progress
Assigned by Linux
Feb 18, 2026
CVE-2025-71236High 7.5scsi: qla2xxx: Validate sp before freeing associated memory
Assigned by Linux
Feb 18, 2026
CVE-2026-23230High 8.8smb: client: split cached_fid bitfields to avoid shared-byte RMW races
Assigned by Linux
Feb 18, 2026
CVE-2026-23231High 7.8netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
Assigned by Linux
Mar 4, 2026
CVE-2025-71238High 7.8scsi: qla2xxx: Fix bsg_done() causing double free
Assigned by Linux
Mar 4, 2026
CVE-2026-23239High 7.8espintcp: Fix race condition in espintcp_close()
Assigned by Linux
Mar 10, 2026
CVE-2026-23240Critical 9.8tls: Fix race condition in tls_sw_cancel_work_tx()
Assigned by Linux
Mar 10, 2026
CVE-2025-71265Medium 5.5fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
Assigned by Linux
Mar 18, 2026
CVE-2025-71266Medium 5.5fs: ntfs3: check return value of indx_find to avoid infinite loop
Assigned by Linux
Mar 18, 2026
CVE-2025-71267Medium 5.5fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
Assigned by Linux
Mar 18, 2026
CVE-2026-23242High 7.5RDMA/siw: Fix potential NULL pointer dereference in header processing
Assigned by Linux
Mar 18, 2026
CVE-2026-23243High 7.8RDMA/umad: Reject negative data_len in ib_umad_write
Assigned by Linux
Mar 18, 2026
CVE-2026-23245High 7.8net/sched: act_gate: snapshot parameters with RCU on replace
Assigned by Linux
Mar 18, 2026
CVE-2026-23248High 7.8perf/core: Fix refcount bug and potential UAF in perf_mmap
Assigned by Linux
Mar 18, 2026
CVE-2026-23253High 7.8media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
Assigned by Linux
Mar 18, 2026
CVE-2025-71268High 7.5btrfs: fix reservation leak in some error paths when inserting inline extent
Assigned by Linux
Mar 18, 2026
CVE-2025-71269High 7.5btrfs: do not free data reservation in fallback from inline due to -ENOSPC
Assigned by Linux
Mar 18, 2026
CVE-2026-23255Medium 5.5net: add proper RCU protection to /proc/net/ptype
Assigned by Linux
Mar 18, 2026
CVE-2026-23270High 7.8net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
Assigned by Linux
Mar 18, 2026
CVE-2026-23271High 7.8perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
Assigned by Linux
Mar 20, 2026
CVE-2026-23272High 7.8netfilter: nf_tables: unconditionally bump set->nelems before insertion
Assigned by Linux
Mar 20, 2026
CVE-2026-23273High 7.8macvlan: observe an RCU grace period in macvlan_common_newlink() error path
Assigned by Linux
Mar 20, 2026
CVE-2026-23274High 7.8netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
Assigned by Linux
Mar 20, 2026
CVE-2026-23275High 7.8io_uring: ensure ctx->rings is stable for task work flags manipulation
Assigned by Linux
Mar 20, 2026
CVE-2026-23277Medium 5.5net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
Assigned by Linux
Mar 20, 2026
CVE-2026-23278High 7.8netfilter: nf_tables: always walk all pending catchall elements
Assigned by Linux
Mar 20, 2026
CVE-2026-31788High 8.2xen/privcmd: restrict usage in unprivileged domU
Assigned by Linux
Mar 25, 2026
CVE-2026-23279Medium 5.5wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
Assigned by Linux
Mar 25, 2026
CVE-2026-23281High 7.8wifi: libertas: fix use-after-free in lbs_free_adapter()
Assigned by Linux
Mar 25, 2026
CVE-2026-23284Medium 5.5net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
Assigned by Linux
Mar 25, 2026
CVE-2026-23287Medium 5.5irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
Assigned by Linux
Mar 25, 2026
CVE-2026-23290Medium 5.5net: usb: pegasus: validate USB endpoints
Assigned by Linux
Mar 25, 2026
CVE-2026-23291Medium 5.5nfc: pn533: properly drop the usb interface reference on disconnect
Assigned by Linux
Mar 25, 2026
CVE-2026-23292Medium 5.5scsi: target: Fix recursive locking in __configfs_open_file()
Assigned by Linux
Mar 25, 2026
CVE-2026-23293Medium 5.5net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
Assigned by Linux
Mar 25, 2026
CVE-2026-23295Medium 5.5accel/amdxdna: Fix dead lock for suspend and resume
Assigned by Linux
Mar 25, 2026
CVE-2026-23296Medium 5.5scsi: core: Fix refcount leak for tagset_refcnt
Assigned by Linux
Mar 25, 2026
CVE-2026-23300Medium 5.5net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
Assigned by Linux
Mar 25, 2026
CVE-2026-23302Medium 4.7net: annotate data-races around sk->sk_{data_ready,write_space}
Assigned by Linux
Mar 25, 2026
CVE-2026-23303Medium 5.5smb: client: Don't log plaintext credentials in cifs_set_cifscreds
Assigned by Linux
Mar 25, 2026
CVE-2026-23304Medium 5.5ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
Assigned by Linux
Mar 25, 2026
CVE-2026-23310Medium 5.5bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
Assigned by Linux
Mar 25, 2026
CVE-2026-23312Medium 5.5net: usb: kaweth: validate USB endpoints
Assigned by Linux
Mar 25, 2026
PreviousPage 29 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.