CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,182 CVEs published, 330 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,182
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,445 CVEs, showing 1651 to 1700PreviousPage 34 of 149Next
CVESeverityTitlePublished
CVE-2026-31693High 7.8cifs: some missing initializations on replay
Assigned by Linux
Apr 30, 2026
CVE-2026-31694High 7.8fuse: reject oversized dirents in page cache
Assigned by Linux
May 1, 2026
CVE-2026-31696High 7.8rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
Assigned by Linux
May 1, 2026
CVE-2026-31697High 7.1crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
Assigned by Linux
May 1, 2026
CVE-2026-31698High 7.1crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
Assigned by Linux
May 1, 2026
CVE-2026-31699High 7.1crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
Assigned by Linux
May 1, 2026
CVE-2026-31700High 7.8net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
Assigned by Linux
May 1, 2026
CVE-2026-31704Medium 5.5ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
Assigned by Linux
May 1, 2026
CVE-2026-31705Critical 9.8ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
Assigned by Linux
May 1, 2026
CVE-2026-31708High 8.1smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
Assigned by Linux
May 1, 2026
CVE-2026-31709High 8.8smb: client: validate the whole DACL before rewriting it in cifsacl
Assigned by Linux
May 1, 2026
CVE-2026-31711High 7.5smb: server: fix active_num_conn leak on transport allocation failure
Assigned by Linux
May 1, 2026
CVE-2026-31712High 8.3ksmbd: require minimum ACE size in smb_check_perm_dacl()
Assigned by Linux
May 1, 2026
CVE-2026-31719High 7.5crypto: krb5enc - fix async decrypt skipping hash verification
Assigned by Linux
May 1, 2026
CVE-2026-31731High 7.8thermal: core: Address thermal zone removal races with resume
Assigned by Linux
May 1, 2026
CVE-2026-31737Medium 5.5net: ftgmac100: fix ring allocation unwind on open failure
Assigned by Linux
May 1, 2026
CVE-2026-31739High 8.8crypto: tegra - Add missing CRYPTO_ALG_ASYNC
Assigned by Linux
May 1, 2026
CVE-2026-31742High 7.8vt: discard stale unicode buffer on alt screen exit after resize
Assigned by Linux
May 1, 2026
CVE-2026-31752Medium 5.5bridge: br_nd_send: validate ND option lengths
Assigned by Linux
May 1, 2026
CVE-2026-31758High 7.8usb: usbtmc: Flush anchored URBs in usbtmc_release
Assigned by Linux
May 1, 2026
CVE-2026-31761High 7.8iio: gyro: mpu3050: Move iio_device_register() to correct location
Assigned by Linux
May 1, 2026
CVE-2026-31768High 7.8iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
Assigned by Linux
May 1, 2026
CVE-2026-31771High 8.1Bluetooth: hci_event: move wake reason storage into validated event handlers
Assigned by Linux
May 1, 2026
CVE-2026-31772High 7.8Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
Assigned by Linux
May 1, 2026
CVE-2026-31773High 8.8Bluetooth: SMP: derive legacy responder STK authentication from MITM state
Assigned by Linux
May 1, 2026
CVE-2026-31774High 7.1io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
Assigned by Linux
May 1, 2026
CVE-2026-31775Medium 5.5ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization
Assigned by Linux
May 1, 2026
CVE-2026-31777Medium 5.5ALSA: ctxfi: Check the error for index mapping
Assigned by Linux
May 1, 2026
CVE-2026-31779High 8.1wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
Assigned by Linux
May 1, 2026
CVE-2026-43009High 7.8bpf: Fix incorrect pruning due to atomic fetch precision tracking
Assigned by Linux
May 1, 2026
CVE-2026-43011Critical 9.8net/x25: Fix potential double free of skb
Assigned by Linux
May 1, 2026
CVE-2026-43016High 7.8bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
Assigned by Linux
May 1, 2026
CVE-2026-43018High 8.8Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
Assigned by Linux
May 1, 2026
CVE-2026-43019High 7.8Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
Assigned by Linux
May 1, 2026
CVE-2026-43022Medium 5.5Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
Assigned by Linux
May 1, 2026
CVE-2026-43023High 7.8Bluetooth: SCO: fix race conditions in sco_sock_connect()
Assigned by Linux
May 1, 2026
CVE-2026-43024Medium 5.5netfilter: nf_tables: reject immediate NF_QUEUE verdict
Assigned by Linux
May 1, 2026
CVE-2026-43025High 7.3netfilter: ctnetlink: ignore explicit helper on new expectations
Assigned by Linux
May 1, 2026
CVE-2026-43026Medium 5.5netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
Assigned by Linux
May 1, 2026
CVE-2026-43027High 7.8netfilter: nf_conntrack_helper: pass helper to expect cleanup
Assigned by Linux
May 1, 2026
CVE-2026-43028High 7.1netfilter: x_tables: ensure names are nul-terminated
Assigned by Linux
May 1, 2026
CVE-2026-43030High 7.8bpf: Fix regsafe() for pointers to packet
Assigned by Linux
May 1, 2026
CVE-2026-43033High 7.8crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
Assigned by Linux
May 1, 2026
CVE-2026-43035Medium 5.5net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
Assigned by Linux
May 1, 2026
CVE-2026-43037Critical 9.8ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Assigned by Linux
May 1, 2026
CVE-2026-43038Critical 9.8ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
Assigned by Linux
May 1, 2026
CVE-2026-43040High 7.1net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
Assigned by Linux
May 1, 2026
CVE-2026-43042High 7.1mpls: add seqcount to protect the platform_label{,s} pair
Assigned by Linux
May 1, 2026
CVE-2026-43045Medium 5.5mshv: Fix error handling in mshv_region_pin
Assigned by Linux
May 1, 2026
CVE-2026-43047High 7.8HID: multitouch: Check to ensure report responses match the request
Assigned by Linux
May 1, 2026
PreviousPage 34 of 149Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.