CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,202 CVEs published, 330 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,202
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,486 CVEs, showing 1751 to 1800PreviousPage 36 of 150Next
CVESeverityTitlePublished
CVE-2026-43204Medium 5.5ASoC: qcom: q6asm: drop DSP responses for closed data streams
Assigned by Linux
May 6, 2026
CVE-2026-43206High 7.8drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
Assigned by Linux
May 6, 2026
CVE-2026-43211High 7.8PCI: Fix pci_slot_trylock() error handling
Assigned by Linux
May 6, 2026
CVE-2026-43213High 7.5wifi: rtw89: pci: validate sequence number of TX release report
Assigned by Linux
May 6, 2026
CVE-2026-43214High 7.8KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
Assigned by Linux
May 6, 2026
CVE-2026-43215High 8.8cifs: Fix locking usage for tcon fields
Assigned by Linux
May 6, 2026
CVE-2026-43216Medium 5.5net: Drop the lock in skb_may_tx_timestamp()
Assigned by Linux
May 6, 2026
CVE-2026-43228Medium 5.5hfs: Replace BUG_ON with error handling for CNID count checks
Assigned by Linux
May 6, 2026
CVE-2026-43233High 8.2netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
Assigned by Linux
May 6, 2026
CVE-2026-43237High 7.8drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4
Assigned by Linux
May 6, 2026
CVE-2026-43239High 8.8smb: client: prevent races in ->query_interfaces()
Assigned by Linux
May 6, 2026
CVE-2026-43248High 7.8vhost: move vdpa group bound check to vhost_vdpa
Assigned by Linux
May 6, 2026
CVE-2026-43253High 7.5iommu/amd: move wait_on_sem() out of spinlock
Assigned by Linux
May 6, 2026
CVE-2026-43278High 7.8dm: clear cloned request bio pointer when last clone bio completes
Assigned by Linux
May 6, 2026
CVE-2026-43279High 7.8ALSA: usb-audio: Add sanity check for OOB writes at silencing
Assigned by Linux
May 6, 2026
CVE-2026-43280High 7.1drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise
Assigned by Linux
May 6, 2026
CVE-2025-71286High 7.8ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
Assigned by Linux
May 6, 2026
CVE-2026-43284High 8.8xfrm: esp: avoid in-place decrypt on shared skb frags
Assigned by Linux
May 8, 2026
CVE-2026-43299Medium 5.5btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()
Assigned by Linux
May 8, 2026
CVE-2026-43303High 7.8mm/page_alloc: clear page->private in free_pages_prepare()
Assigned by Linux
May 8, 2026
CVE-2026-43304Critical 9.8libceph: define and enforce CEPH_MAX_KEY_LEN
Assigned by Linux
May 8, 2026
CVE-2026-43308Medium 5.5btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()
Assigned by Linux
May 8, 2026
CVE-2026-43310Medium 5.5media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
Assigned by Linux
May 8, 2026
CVE-2026-43311Medium 5.5soc/tegra: pmc: Fix unsafe generic_handle_irq() call
Assigned by Linux
May 8, 2026
CVE-2026-43321High 7.8bpf: Properly mark live registers for indirect jumps
Assigned by Linux
May 8, 2026
CVE-2026-43329High 7.8netfilter: flowtable: strictly check for maximum number of actions
Assigned by Linux
May 8, 2026
CVE-2026-43332High 7.8thermal: core: Fix thermal zone device registration error path
Assigned by Linux
May 8, 2026
CVE-2026-43334High 8.8Bluetooth: SMP: force responder MITM requirements before building the pairing response
Assigned by Linux
May 8, 2026
CVE-2026-43339High 7.8ipv6: prevent possible UaF in addrconf_permanent_addr()
Assigned by Linux
May 8, 2026
CVE-2026-43341Critical 9.8net/ipv6: ioam6: prevent schema length wraparound in trace fill
Assigned by Linux
May 8, 2026
CVE-2026-43350High 7.6smb: client: require a full NFS mode SID before reading mode bits
Assigned by Linux
May 8, 2026
CVE-2026-43362High 8.1smb: client: fix in-place encryption corruption in SMB2_write()
Assigned by Linux
May 8, 2026
CVE-2026-43365High 8.2xfs: fix undersized l_iclog_roundoff values
Assigned by Linux
May 8, 2026
CVE-2026-43366High 7.8io_uring/kbuf: check if target buffer list is still legacy on recycle
Assigned by Linux
May 8, 2026
CVE-2026-43368High 7.8drm/i915: Fix potential overflow of shmem scatterlist length
Assigned by Linux
May 8, 2026
CVE-2026-43370High 7.8drm/amdgpu: Fix use-after-free race in VM acquire
Assigned by Linux
May 8, 2026
CVE-2026-43374High 7.8net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
Assigned by Linux
May 8, 2026
CVE-2026-43383Critical 9.4net/tcp-md5: Fix MAC comparison to be constant-time
Assigned by Linux
May 8, 2026
CVE-2026-43402Critical 9.8kthread: consolidate kthread exit paths to prevent use-after-free
Assigned by Linux
May 8, 2026
CVE-2026-43405High 7.5libceph: Use u32 for non-negative values in ceph_monmap_decode()
Assigned by Linux
May 8, 2026
CVE-2026-43406Critical 9.1libceph: prevent potential out-of-bounds reads in process_message_header()
Assigned by Linux
May 8, 2026
CVE-2026-43407Critical 9.1libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
Assigned by Linux
May 8, 2026
CVE-2026-43408High 7.8ceph: add a bunch of missing ceph_path_info initializers
Assigned by Linux
May 8, 2026
CVE-2026-43414Critical 9.8scsi: qla2xxx: Completely fix fcport double free
Assigned by Linux
May 8, 2026
CVE-2026-43421Medium 5.5usb: gadget: f_ncm: Fix net_device lifecycle with device_move
Assigned by Linux
May 8, 2026
CVE-2026-43437High 7.8ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
Assigned by Linux
May 8, 2026
CVE-2026-43441High 7.5net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
Assigned by Linux
May 8, 2026
CVE-2026-43443Medium 5.5ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
Assigned by Linux
May 8, 2026
CVE-2026-43446Medium 5.5accel/amdxdna: Fix runtime suspend deadlock when there is pending job
Assigned by Linux
May 8, 2026
CVE-2026-43452High 8.2netfilter: x_tables: guard option walkers against 1-byte tail reads
Assigned by Linux
May 8, 2026
PreviousPage 36 of 150Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.