CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,199 CVEs published, 331 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,199
Show in the list
Critical, last 7 days
331
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,422 CVEs, showing 1501 to 1550PreviousPage 31 of 149Next
CVESeverityTitlePublished
CVE-2026-23445High 7.8igc: fix page fault in XDP TX timestamps handling
Assigned by Linux
Apr 3, 2026
CVE-2026-23446Medium 5.5net: usb: aqc111: Do not perform PM inside suspend callback
Assigned by Linux
Apr 3, 2026
CVE-2026-23449High 7.8net/sched: teql: Fix double-free in teql_master_xmit
Assigned by Linux
Apr 3, 2026
CVE-2026-23450Critical 9.8net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
Assigned by Linux
Apr 3, 2026
CVE-2026-23452Medium 4.7PM: runtime: Fix a race condition related to device removal
Assigned by Linux
Apr 3, 2026
CVE-2026-23454High 7.0net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
Assigned by Linux
Apr 3, 2026
CVE-2026-23455Critical 9.1netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
Assigned by Linux
Apr 3, 2026
CVE-2026-23456High 8.2netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
Assigned by Linux
Apr 3, 2026
CVE-2026-23457High 8.6netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
Assigned by Linux
Apr 3, 2026
CVE-2026-23458High 7.8netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
Assigned by Linux
Apr 3, 2026
CVE-2026-23461High 8.8Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
Assigned by Linux
Apr 3, 2026
CVE-2026-23462High 8.8Bluetooth: HIDP: Fix possible UAF
Assigned by Linux
Apr 3, 2026
CVE-2026-23463Medium 4.7soc: fsl: qbman: fix race condition in qman_destroy_fq
Assigned by Linux
Apr 3, 2026
CVE-2026-23466High 7.8drm/xe: Open-code GGTT MMIO access protection
Assigned by Linux
Apr 3, 2026
CVE-2026-23474Medium 5.5mtd: Avoid boot crash in RedBoot partition table parser
Assigned by Linux
Apr 3, 2026
CVE-2026-23475Medium 5.5spi: fix statistics allocation
Assigned by Linux
Apr 3, 2026
CVE-2026-31389High 7.8spi: fix use-after-free on controller registration failure
Assigned by Linux
Apr 3, 2026
CVE-2026-31391Medium 5.5crypto: atmel-sha204a - Fix OOM ->tfm_count leak
Assigned by Linux
Apr 3, 2026
CVE-2026-31392High 8.1smb: client: fix krb5 mount with username option
Assigned by Linux
Apr 3, 2026
CVE-2026-31393High 8.1Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
Assigned by Linux
Apr 3, 2026
CVE-2026-31396High 7.8net: macb: fix use-after-free access to PTP clock
Assigned by Linux
Apr 3, 2026
CVE-2026-31401High 7.8HID: bpf: prevent buffer overflow in hid_hw_request
Assigned by Linux
Apr 3, 2026
CVE-2026-31402Critical 9.8nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
Assigned by Linux
Apr 3, 2026
CVE-2026-31403High 7.8NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
Assigned by Linux
Apr 3, 2026
CVE-2026-31407High 7.1netfilter: conntrack: add missing netlink policy validations
Assigned by Linux
Apr 6, 2026
CVE-2026-31408High 8.8Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
Assigned by Linux
Apr 6, 2026
CVE-2026-31411Medium 5.5net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
Assigned by Linux
Apr 8, 2026
CVE-2026-31414Critical 9.8netfilter: nf_conntrack_expect: use expect->helper
Assigned by Linux
Apr 13, 2026
CVE-2026-31415Medium 5.5ipv6: avoid overflows in ip6_datagram_send_ctl()
Assigned by Linux
Apr 13, 2026
CVE-2026-31416Medium 5.5netfilter: nfnetlink_log: account for netlink header size
Assigned by Linux
Apr 13, 2026
CVE-2026-31417High 7.5net/x25: Fix overflow when accumulating packets
Assigned by Linux
Apr 13, 2026
CVE-2026-31418Medium 5.5netfilter: ipset: drop logically empty buckets in mtype_del
Assigned by Linux
Apr 13, 2026
CVE-2026-31419High 7.8net: bonding: fix use-after-free in bond_xmit_broadcast()
Assigned by Linux
Apr 13, 2026
CVE-2026-31421Medium 5.5net/sched: cls_fw: fix NULL pointer dereference on shared blocks
Assigned by Linux
Apr 13, 2026
CVE-2026-31422Medium 5.5net/sched: cls_flow: fix NULL pointer dereference on shared blocks
Assigned by Linux
Apr 13, 2026
CVE-2026-31423Medium 5.5net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
Assigned by Linux
Apr 13, 2026
CVE-2026-31424Medium 5.5netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
Assigned by Linux
Apr 13, 2026
CVE-2026-31426High 7.0ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
Assigned by Linux
Apr 13, 2026
CVE-2026-31427Medium 5.5netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
Assigned by Linux
Apr 13, 2026
CVE-2026-31428Medium 5.5netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
Assigned by Linux
Apr 13, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2026-31435High 8.8netfs: Fix read abandonment during retry
Assigned by Linux
Apr 22, 2026
CVE-2026-31436Critical 9.8dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
Assigned by Linux
Apr 22, 2026
CVE-2026-31441Medium 5.5dmaengine: idxd: Fix memory leak when a wq is reset
Assigned by Linux
Apr 22, 2026
CVE-2026-31442High 7.8dmaengine: idxd: Fix possible invalid memory access after FLR
Assigned by Linux
Apr 22, 2026
CVE-2026-31446High 7.8ext4: fix use-after-free in update_super_work when racing with umount
Assigned by Linux
Apr 22, 2026
CVE-2026-31447High 7.8ext4: reject mount if bigalloc with s_first_data_block != 0
Assigned by Linux
Apr 22, 2026
CVE-2026-31448Critical 9.4ext4: avoid infinite loops caused by residual data
Assigned by Linux
Apr 22, 2026
CVE-2026-31449High 7.8ext4: validate p_idx bounds in ext4_ext_correct_indexes
Assigned by Linux
Apr 22, 2026
CVE-2026-31450High 8.8ext4: publish jinode after initialization
Assigned by Linux
Apr 22, 2026
PreviousPage 31 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.