CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,182 CVEs published, 330 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,182
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,514 CVEs, showing 1551 to 1600PreviousPage 32 of 91Next
CVESeverityTitlePublished
CVE-2025-71117Medium 5.5In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the request queue from inside sysfs store callbacks may ca…Jan 14, 2026
CVE-2025-71119Medium 5.5In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPUs If SMT is disabled or a partial SMT state is enabled, when a new kernel image…Jan 14, 2026
CVE-2025-71121Medium 5.5In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old variant of the GSP chip and is used e.g.Jan 14, 2026
CVE-2025-71122High 7.8In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED syzkaller found it could overflow math in the test infrastructur…Jan 14, 2026
CVE-2025-71124Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after error check Move the call to preempt_prepare_postamble() after verifying that pr…Jan 14, 2026
CVE-2025-71129Medium 5.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they should follow LoongArch calling conventio…Jan 14, 2026
CVE-2025-71134Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type on coalescing When a page is freed it coalesces with a buddy into a higher order…Jan 14, 2026
CVE-2025-71135Medium 5.5In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() The variable mddev->private is first assigned to…Jan 14, 2026
CVE-2025-71136High 7.1In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It's possible for cp_read() and hdmi_read()…Jan 14, 2026
CVE-2025-71137High 7.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size (rx_pending) is not set below the per…Jan 14, 2026
CVE-2025-71138Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost always in dpu_encoder_phys_wb_setup_ctl(),…Jan 14, 2026
CVE-2025-71139Medium 5.5In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CMA area *** Bug description *** When I tested kexec with the latest kernel, I ran…Jan 14, 2026
CVE-2025-71141Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drm_kms_helper_poll_fini() and drm_atomic_helper_shutdown() helpers sho…Jan 14, 2026
CVE-2025-71142Medium 5.5In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at rem…Jan 14, 2026
CVE-2025-71143High 7.8In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate struct clk_hw_onecell_data with…Jan 14, 2026
CVE-2025-71144Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on disconnect() After the blamed commit below, if the MPC subflow is already in TCP_CLOSE status or has…Jan 14, 2026
CVE-2026-22976Medium 5.5net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
Assigned by Linux
Jan 21, 2026
CVE-2026-22977Medium 5.5net: sock: fix hardened usercopy panic in sock_recv_errqueue
Assigned by Linux
Jan 21, 2026
CVE-2025-71147Medium 5.5KEYS: trusted: Fix a memory leak in tpm2_load_cmd
Assigned by Linux
Jan 23, 2026
CVE-2025-71145High 7.8In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced…Jan 23, 2026
CVE-2025-71154Medium 5.5net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
Assigned by Linux
Jan 23, 2026
CVE-2025-71146Medium 5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct might be leaked as error paths are skippin…Jan 23, 2026
CVE-2025-71148Low 3.3In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when subm…Jan 23, 2026
CVE-2025-71150Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a session is found but its state is not SMB2_SESSION_…Jan 23, 2026
CVE-2025-71151Medium 5.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure(), if smb3_sync_session_ctx_passwords() fails, the…Jan 23, 2026
CVE-2025-71152High 7.8In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem description ------------------- DSA has a mumbo-jumbo of reference handl…Jan 23, 2026
CVE-2025-71153Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), if vfs_getattr() fails, the function returns immediately with…Jan 23, 2026
CVE-2025-71155High 7.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_zap_one_page(), which can lead to memory c…Jan 23, 2026
CVE-2025-71156High 7.8In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatically enabled immediately upon request.Jan 23, 2026
CVE-2025-71157High 7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDM…Jan 23, 2026
CVE-2025-71161High 7.5dm-verity: disable recursive forward error correction
Assigned by Linux
Jan 23, 2026
CVE-2026-22979Medium 5.5net: fix memory leak in skb_segment_list for GRO packets
Assigned by Linux
Jan 23, 2026
CVE-2026-22980High 7.8nfsd: provide locking for v4_end_grace
Assigned by Linux
Jan 23, 2026
CVE-2026-22982Medium 5.5net: mscc: ocelot: Fix crash when adding interface under a lag
Assigned by Linux
Jan 23, 2026
CVE-2026-22984Critical 9.8libceph: prevent potential out-of-bounds reads in handle_auth_done()
Assigned by Linux
Jan 23, 2026
CVE-2026-22990High 7.5libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
Assigned by Linux
Jan 23, 2026
CVE-2026-22991High 7.5libceph: make free_choose_arg_map() resilient to partial allocation
Assigned by Linux
Jan 23, 2026
CVE-2026-22992High 7.5libceph: return the handler error from mon_handle_auth_done()
Assigned by Linux
Jan 23, 2026
CVE-2026-22994Medium 5.5bpf: Fix reference count leak in bpf_prog_test_run_xdp()
Assigned by Linux
Jan 23, 2026
CVE-2025-71158Medium 5.5In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the device would cause a crash.Jan 23, 2026
CVE-2025-71159High 7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs_get_or_create_delayed_node() set the dela…Jan 23, 2026
CVE-2025-71160Medium 5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: avoid chain re-validation if possible Hamza Mahfooz reports cpu soft lock-ups in nft_chain_validate(): watchd…Jan 23, 2026
CVE-2026-22978Low 3.3In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches.Jan 23, 2026
CVE-2026-22981Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdevs to detached stat…Jan 23, 2026
CVE-2026-22983Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: do not write to msg_get_inq in callee NULL pointer dereference fix.Jan 23, 2026
CVE-2026-22985Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causi…Jan 23, 2026
CVE-2026-22986Medium 4.7In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev->srcu If two drivers were calling gpiochip_add_data_with_key(), one may be traversing the srcu…Jan 23, 2026
CVE-2026-22987Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy syzbot reported a crash in tc_act_in_hw() during netns teard…Jan 23, 2026
CVE-2026-22988Medium 5.5In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not change skb->head arp_create() is the only dev_hard_header() caller making assumption…Jan 23, 2026
CVE-2026-22989Medium 5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlock_filesystem If we are trying to unlock the filesystem via an administrative interface a…Jan 23, 2026
PreviousPage 32 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.