CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,200 CVEs published, 334 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,200
Show in the list
Critical, last 7 days
334
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,421 CVEs, showing 1451 to 1500PreviousPage 30 of 149Next
CVESeverityTitlePublished
CVE-2026-23315High 7.1wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
Assigned by Linux
Mar 25, 2026
CVE-2026-23317High 7.8drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
Assigned by Linux
Mar 25, 2026
CVE-2026-23318High 7.1ALSA: usb-audio: Use correct version for UAC3 header validation
Assigned by Linux
Mar 25, 2026
CVE-2026-23319High 7.8bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
Assigned by Linux
Mar 25, 2026
CVE-2026-23321Medium 5.5mptcp: pm: in-kernel: always mark signal+subflow endp as used
Assigned by Linux
Mar 25, 2026
CVE-2026-23328Medium 5.5accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
Assigned by Linux
Mar 25, 2026
CVE-2026-23335Medium 5.5RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
Assigned by Linux
Mar 25, 2026
CVE-2026-23336High 7.8wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
Assigned by Linux
Mar 25, 2026
CVE-2026-23339Medium 5.5nfc: nci: free skb on nci_transceive early error paths
Assigned by Linux
Mar 25, 2026
CVE-2026-23340High 7.8net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
Assigned by Linux
Mar 25, 2026
CVE-2026-23341Medium 5.5accel/amdxdna: Fix crash when destroying a suspended hardware context
Assigned by Linux
Mar 25, 2026
CVE-2026-23343High 7.8xdp: produce a warning when calculated tailroom is negative
Assigned by Linux
Mar 25, 2026
CVE-2026-23351High 7.8netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
Assigned by Linux
Mar 25, 2026
CVE-2026-23352Medium 5.5x86/efi: defer freeing of boot services memory
Assigned by Linux
Mar 25, 2026
CVE-2026-23356Medium 5.5drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
Assigned by Linux
Mar 25, 2026
CVE-2026-23357Medium 5.5can: mcp251x: fix deadlock in error path of mcp251x_open
Assigned by Linux
Mar 25, 2026
CVE-2026-23359High 7.8bpf: Fix stack-out-of-bounds write in devmap
Assigned by Linux
Mar 25, 2026
CVE-2026-23364High 7.4ksmbd: Compare MACs in constant time
Assigned by Linux
Mar 25, 2026
CVE-2026-23365Medium 5.5net: usb: kalmia: validate USB endpoints
Assigned by Linux
Mar 25, 2026
CVE-2026-23367Medium 5.5wifi: radiotap: reject radiotap with unknown bits
Assigned by Linux
Mar 25, 2026
CVE-2026-23368Medium 5.5net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
Assigned by Linux
Mar 25, 2026
CVE-2026-23370Medium 5.5platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
Assigned by Linux
Mar 25, 2026
CVE-2026-23372High 7.8nfc: rawsock: cancel tx_work before socket teardown
Assigned by Linux
Mar 25, 2026
CVE-2026-23374Medium 5.5blktrace: fix __this_cpu_read/write in preemptible context
Assigned by Linux
Mar 25, 2026
CVE-2026-23378High 7.8net/sched: act_ife: Fix metalist update behavior
Assigned by Linux
Mar 25, 2026
CVE-2026-23379Medium 5.5net/sched: ets: fix divide by zero in the offload path
Assigned by Linux
Mar 25, 2026
CVE-2026-23381Medium 5.5net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
Assigned by Linux
Mar 25, 2026
CVE-2026-23382Medium 5.5HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
Assigned by Linux
Mar 25, 2026
CVE-2026-23388High 7.1Squashfs: check metadata block offset is within range
Assigned by Linux
Mar 25, 2026
CVE-2026-23389Medium 5.5ice: Fix memory leak in ice_set_ringparam()
Assigned by Linux
Mar 25, 2026
CVE-2026-23391High 7.8netfilter: xt_CT: drop pending enqueued packets on template removal
Assigned by Linux
Mar 25, 2026
CVE-2026-23392High 7.8netfilter: nf_tables: release flowtable after rcu grace period on error
Assigned by Linux
Mar 25, 2026
CVE-2026-23395High 8.8Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
Assigned by Linux
Mar 25, 2026
CVE-2026-23396Medium 5.5wifi: mac80211: fix NULL deref in mesh_matches_local()
Assigned by Linux
Mar 26, 2026
CVE-2026-23397High 7.1nfnetlink_osf: validate individual option lengths in fingerprints
Assigned by Linux
Mar 26, 2026
CVE-2026-23398Medium 5.5icmp: fix NULL pointer dereference in icmp_tag_validation()
Assigned by Linux
Mar 26, 2026
CVE-2026-23399Medium 5.5nf_tables: nft_dynset: fix possible stateful expression memleak in error path
Assigned by Linux
Mar 28, 2026
CVE-2026-23412High 7.8netfilter: bpf: defer hook memory release until rcu readers are done
Assigned by Linux
Apr 2, 2026
CVE-2026-23413High 7.8clsact: Fix use-after-free in init/destroy rollback asymmetry
Assigned by Linux
Apr 2, 2026
CVE-2026-23414High 7.5tls: Purge async_hold in tls_decrypt_async_wait()
Assigned by Linux
Apr 2, 2026
CVE-2026-23415High 7.8futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()
Assigned by Linux
Apr 2, 2026
CVE-2026-23422High 7.8dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
Assigned by Linux
Apr 3, 2026
CVE-2026-23428Critical 9.8ksmbd: fix use-after-free of share_conf in compound request
Assigned by Linux
Apr 3, 2026
CVE-2026-23434High 7.1mtd: rawnand: serialize lock/unlock against other NAND operations
Assigned by Linux
Apr 3, 2026
CVE-2026-23437High 7.8net: shaper: protect late read accesses to the hierarchy
Assigned by Linux
Apr 3, 2026
CVE-2026-23438Medium 5.5net: mvpp2: guard flow control update with global_tx_fc in buffer switching
Assigned by Linux
Apr 3, 2026
CVE-2026-23439Medium 5.5udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
Assigned by Linux
Apr 3, 2026
CVE-2026-23440High 7.5net/mlx5e: Fix race condition during IPSec ESN update
Assigned by Linux
Apr 3, 2026
CVE-2026-23442Medium 5.5ipv6: add NULL checks for idev in SRv6 paths
Assigned by Linux
Apr 3, 2026
CVE-2026-23444High 7.8wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
Assigned by Linux
Apr 3, 2026
PreviousPage 30 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.