CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,541 CVEs published, 246 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,541
Show in the list
Critical, last 7 days
246
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2101 to 2150PreviousPage 43 of 91Next
CVESeverityTitlePublished
CVE-2026-31412Medium 5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() The `check_command_size_in_blocks()`…Apr 10, 2026
CVE-2026-31413High 7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR maybe_fork_scalars() is called for both BPF_AND and BPF_OR when…Apr 12, 2026
CVE-2026-31414Critical 9.8netfilter: nf_conntrack_expect: use expect->helper
Assigned by Linux
Apr 13, 2026
CVE-2026-31415Medium 5.5ipv6: avoid overflows in ip6_datagram_send_ctl()
Assigned by Linux
Apr 13, 2026
CVE-2026-31416Medium 5.5netfilter: nfnetlink_log: account for netlink header size
Assigned by Linux
Apr 13, 2026
CVE-2026-31417High 7.5net/x25: Fix overflow when accumulating packets
Assigned by Linux
Apr 13, 2026
CVE-2026-31418Medium 5.5netfilter: ipset: drop logically empty buckets in mtype_del
Assigned by Linux
Apr 13, 2026
CVE-2026-31419High 7.8net: bonding: fix use-after-free in bond_xmit_broadcast()
Assigned by Linux
Apr 13, 2026
CVE-2026-31421Medium 5.5net/sched: cls_fw: fix NULL pointer dereference on shared blocks
Assigned by Linux
Apr 13, 2026
CVE-2026-31422Medium 5.5net/sched: cls_flow: fix NULL pointer dereference on shared blocks
Assigned by Linux
Apr 13, 2026
CVE-2026-31423Medium 5.5net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
Assigned by Linux
Apr 13, 2026
CVE-2026-31424Medium 5.5netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
Assigned by Linux
Apr 13, 2026
CVE-2026-31426High 7.0ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
Assigned by Linux
Apr 13, 2026
CVE-2026-31427Medium 5.5netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
Assigned by Linux
Apr 13, 2026
CVE-2026-31428Medium 5.5netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
Assigned by Linux
Apr 13, 2026
CVE-2026-31420Medium 5.5In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test() accept the user-supplied i…Apr 13, 2026
CVE-2026-31425Medium 5.5In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the rds_ib_connection from conn->c_t…Apr 13, 2026
CVE-2026-31429Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKB_SMALL_HEAD_CACHE_SIZE is intentionally set to a non-power-of-2 valu…Apr 20, 2026
CVE-2026-31430High 7.1In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extensions Leo reports an out-of-bounds access when parsing a certificate with empty B…Apr 20, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2026-31432High 8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound requests When a compound request such as READ + QUERY_INFO(Security) is received, a…Apr 22, 2026
CVE-2026-31433High 8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial OOB in get_file_all_info() for compound requests When a compound request consists of QUERY_DIRECTORY + QUERY_I…Apr 22, 2026
CVE-2026-31435High 8.8netfs: Fix read abandonment during retry
Assigned by Linux
Apr 22, 2026
CVE-2026-31436Critical 9.8dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
Assigned by Linux
Apr 22, 2026
CVE-2026-31441Medium 5.5dmaengine: idxd: Fix memory leak when a wq is reset
Assigned by Linux
Apr 22, 2026
CVE-2026-31442High 7.8dmaengine: idxd: Fix possible invalid memory access after FLR
Assigned by Linux
Apr 22, 2026
CVE-2026-31446High 7.8ext4: fix use-after-free in update_super_work when racing with umount
Assigned by Linux
Apr 22, 2026
CVE-2026-31447High 7.8ext4: reject mount if bigalloc with s_first_data_block != 0
Assigned by Linux
Apr 22, 2026
CVE-2026-31448Critical 9.4ext4: avoid infinite loops caused by residual data
Assigned by Linux
Apr 22, 2026
CVE-2026-31449High 7.8ext4: validate p_idx bounds in ext4_ext_correct_indexes
Assigned by Linux
Apr 22, 2026
CVE-2026-31450High 8.8ext4: publish jinode after initialization
Assigned by Linux
Apr 22, 2026
CVE-2026-31451Medium 5.5ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
Assigned by Linux
Apr 22, 2026
CVE-2026-31452High 7.8ext4: convert inline data to extents when truncate exceeds inline size
Assigned by Linux
Apr 22, 2026
CVE-2026-31453High 7.8xfs: avoid dereferencing log items after push callbacks
Assigned by Linux
Apr 22, 2026
CVE-2026-31454High 7.8xfs: save ailp before dropping the AIL lock in push callbacks
Assigned by Linux
Apr 22, 2026
CVE-2026-31464High 8.1scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
Assigned by Linux
Apr 22, 2026
CVE-2026-31466Medium 4.7mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
Assigned by Linux
Apr 22, 2026
CVE-2026-31468High 7.8vfio/pci: Fix double free in dma-buf feature
Assigned by Linux
Apr 22, 2026
CVE-2026-31469High 7.8virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
Assigned by Linux
Apr 22, 2026
CVE-2026-31470High 7.1virt: tdx-guest: Fix handling of host controlled 'quote' buffer length
Assigned by Linux
Apr 22, 2026
CVE-2026-31473High 7.8media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
Assigned by Linux
Apr 22, 2026
CVE-2026-31474High 7.8can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
Assigned by Linux
Apr 22, 2026
CVE-2026-31478Critical 9.8ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
Assigned by Linux
Apr 22, 2026
CVE-2026-31479High 7.8drm/xe: always keep track of remap prev/next
Assigned by Linux
Apr 22, 2026
CVE-2026-31485High 7.8spi: spi-fsl-lpspi: fix teardown order issue (UAF)
Assigned by Linux
Apr 22, 2026
CVE-2026-31486High 7.1hwmon: (pmbus/core) Protect regulator operations with mutex
Assigned by Linux
Apr 22, 2026
CVE-2026-31488High 7.8drm/amd/display: Do not skip unrelated mode changes in DSC validation
Assigned by Linux
Apr 22, 2026
CVE-2026-31494High 7.8net: macb: use the current queue number for stats
Assigned by Linux
Apr 22, 2026
CVE-2026-31495Medium 5.5netfilter: ctnetlink: use netlink policy range checks
Assigned by Linux
Apr 22, 2026
CVE-2026-31496Medium 5.5netfilter: nf_conntrack_expect: skip expectations in other netns via proc
Assigned by Linux
Apr 22, 2026
PreviousPage 43 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.