CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,166 CVEs published, 330 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,166
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,445 CVEs, showing 1601 to 1650PreviousPage 33 of 149Next
CVESeverityTitlePublished
CVE-2026-31586High 7.8mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
Assigned by Linux
Apr 24, 2026
CVE-2026-31588High 8.8KVM: x86: Use scratch field in MMIO fragment to hold small write values
Assigned by Linux
Apr 24, 2026
CVE-2026-31598High 7.5ocfs2: fix possible deadlock between unlink and dio_end_io_write
Assigned by Linux
Apr 24, 2026
CVE-2026-31600High 7.5arm64: mm: Handle invalid large leaf mappings correctly
Assigned by Linux
Apr 24, 2026
CVE-2026-31607Critical 9.8usbip: validate number_of_packets in usbip_pack_ret_submit()
Assigned by Linux
Apr 24, 2026
CVE-2026-31609Critical 9.8smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()
Assigned by Linux
Apr 24, 2026
CVE-2026-31611High 8.6ksmbd: require 3 sub-authorities before reading sub_auth[2]
Assigned by Linux
Apr 24, 2026
CVE-2026-31612High 7.5ksmbd: validate EaNameLength in smb2_get_ea()
Assigned by Linux
Apr 24, 2026
CVE-2026-31613High 8.1smb: client: fix OOB reads parsing symlink error response
Assigned by Linux
Apr 24, 2026
CVE-2026-31617Medium 5.5usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
Assigned by Linux
Apr 24, 2026
CVE-2026-31622High 8.8NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
Assigned by Linux
Apr 24, 2026
CVE-2026-31624Medium 5.5HID: core: clamp report_size in s32ton() to avoid undefined shift
Assigned by Linux
Apr 24, 2026
CVE-2026-31625Medium 5.5HID: alps: fix NULL pointer dereference in alps_raw_event()
Assigned by Linux
Apr 24, 2026
CVE-2026-31628Medium 5.5x86/CPU: Fix FPDSS on Zen1
Assigned by Linux
Apr 24, 2026
CVE-2026-31629High 8.8nfc: llcp: add missing return after LLCP_CLOSED checks
Assigned by Linux
Apr 24, 2026
CVE-2026-31630High 7.8rxrpc: proc: size address buffers for %pISpc output
Assigned by Linux
Apr 24, 2026
CVE-2026-31631High 8.2rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
Assigned by Linux
Apr 24, 2026
CVE-2026-31633Critical 9.8rxrpc: Fix integer overflow in rxgk_verify_response()
Assigned by Linux
Apr 24, 2026
CVE-2026-31634Medium 5.5rxrpc: fix reference count leak in rxrpc_server_keyring()
Assigned by Linux
Apr 24, 2026
CVE-2026-31637Critical 9.8rxrpc: reject undecryptable rxkad response tickets
Assigned by Linux
Apr 24, 2026
CVE-2026-31638High 7.5rxrpc: Only put the call ref if one was acquired
Assigned by Linux
Apr 24, 2026
CVE-2026-31642Medium 5.5rxrpc: Fix call removal to use RCU safe deletion
Assigned by Linux
Apr 24, 2026
CVE-2026-31648High 7.8mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()
Assigned by Linux
Apr 24, 2026
CVE-2026-31649Critical 9.8net: stmmac: fix integer underflow in chain mode
Assigned by Linux
Apr 24, 2026
CVE-2026-31651Medium 5.5mmc: vub300: fix NULL-deref on disconnect
Assigned by Linux
Apr 24, 2026
CVE-2026-31656High 7.8drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
Assigned by Linux
Apr 24, 2026
CVE-2026-31657Critical 9.8batman-adv: hold claim backbone gateways by reference
Assigned by Linux
Apr 24, 2026
CVE-2026-31658Medium 5.5net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
Assigned by Linux
Apr 24, 2026
CVE-2026-31659Critical 9.8batman-adv: reject oversized global TT response buffers
Assigned by Linux
Apr 24, 2026
CVE-2026-31662High 7.5tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
Assigned by Linux
Apr 24, 2026
CVE-2026-31663High 7.8xfrm: hold dev ref until after transport_finish NF_HOOK
Assigned by Linux
Apr 24, 2026
CVE-2026-31664Medium 5.5xfrm: clear trailing padding in build_polexpire()
Assigned by Linux
Apr 24, 2026
CVE-2026-31665High 7.8netfilter: nft_ct: fix use-after-free in timeout object destroy
Assigned by Linux
Apr 24, 2026
CVE-2026-31666High 7.8btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()
Assigned by Linux
Apr 24, 2026
CVE-2026-31667High 7.8Input: uinput - fix circular locking dependency with ff-core
Assigned by Linux
Apr 24, 2026
CVE-2026-31668Critical 9.8seg6: separate dst_cache for input and output paths in seg6 lwtunnel
Assigned by Linux
Apr 24, 2026
CVE-2026-31669Critical 9.8mptcp: fix slab-use-after-free in __inet_lookup_established
Assigned by Linux
Apr 24, 2026
CVE-2026-31670Medium 5.5net: rfkill: prevent unlimited numbers of rfkill events from being created
Assigned by Linux
Apr 24, 2026
CVE-2026-31671Medium 5.5xfrm_user: fix info leak in build_report()
Assigned by Linux
Apr 24, 2026
CVE-2026-31673High 7.8af_unix: read UNIX_DIAG_VFS data under unix_state_lock
Assigned by Linux
Apr 25, 2026
CVE-2026-31674High 7.1netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
Assigned by Linux
Apr 25, 2026
CVE-2026-31675High 7.8net/sched: sch_netem: fix out-of-bounds access in packet corruption
Assigned by Linux
Apr 25, 2026
CVE-2026-31676High 7.5rxrpc: only handle RESPONSE during service challenge
Assigned by Linux
Apr 25, 2026
CVE-2026-31678High 7.8openvswitch: defer tunnel netdev_put to RCU release
Assigned by Linux
Apr 25, 2026
CVE-2026-31679High 7.1openvswitch: validate MPLS set/set_masked payload length
Assigned by Linux
Apr 25, 2026
CVE-2026-31680High 7.8net: ipv6: flowlabel: defer exclusive option free until RCU teardown
Assigned by Linux
Apr 25, 2026
CVE-2026-31681Medium 5.5netfilter: xt_multiport: validate range encoding in checkentry
Assigned by Linux
Apr 25, 2026
CVE-2026-31682Critical 9.1bridge: br_nd_send: linearize skb before parsing ND options
Assigned by Linux
Apr 25, 2026
CVE-2026-31685Critical 9.4netfilter: ip6t_eui64: reject invalid MAC header for all packets
Assigned by Linux
Apr 25, 2026
CVE-2026-31786High 7.8Buffer overflow in drivers/xen/sys-hypervisor.c
Assigned by Linux
Apr 30, 2026
PreviousPage 33 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.