CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,851 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,851
Show in the list
Critical, last 7 days
323
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2251 to 2300PreviousPage 46 of 91Next
CVESeverityTitlePublished
CVE-2026-31630High 7.8rxrpc: proc: size address buffers for %pISpc output
Assigned by Linux
Apr 24, 2026
CVE-2026-31631High 8.2rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
Assigned by Linux
Apr 24, 2026
CVE-2026-31633Critical 9.8rxrpc: Fix integer overflow in rxgk_verify_response()
Assigned by Linux
Apr 24, 2026
CVE-2026-31634Medium 5.5rxrpc: fix reference count leak in rxrpc_server_keyring()
Assigned by Linux
Apr 24, 2026
CVE-2026-31637Critical 9.8rxrpc: reject undecryptable rxkad response tickets
Assigned by Linux
Apr 24, 2026
CVE-2026-31638High 7.5rxrpc: Only put the call ref if one was acquired
Assigned by Linux
Apr 24, 2026
CVE-2026-31642Medium 5.5rxrpc: Fix call removal to use RCU safe deletion
Assigned by Linux
Apr 24, 2026
CVE-2026-31648High 7.8mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()
Assigned by Linux
Apr 24, 2026
CVE-2026-31649Critical 9.8net: stmmac: fix integer underflow in chain mode
Assigned by Linux
Apr 24, 2026
CVE-2026-31651Medium 5.5mmc: vub300: fix NULL-deref on disconnect
Assigned by Linux
Apr 24, 2026
CVE-2026-31656High 7.8drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
Assigned by Linux
Apr 24, 2026
CVE-2026-31657Critical 9.8batman-adv: hold claim backbone gateways by reference
Assigned by Linux
Apr 24, 2026
CVE-2026-31658Medium 5.5net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
Assigned by Linux
Apr 24, 2026
CVE-2026-31659Critical 9.8batman-adv: reject oversized global TT response buffers
Assigned by Linux
Apr 24, 2026
CVE-2026-31662High 7.5tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
Assigned by Linux
Apr 24, 2026
CVE-2026-31663High 7.8xfrm: hold dev ref until after transport_finish NF_HOOK
Assigned by Linux
Apr 24, 2026
CVE-2026-31664Medium 5.5xfrm: clear trailing padding in build_polexpire()
Assigned by Linux
Apr 24, 2026
CVE-2026-31665High 7.8netfilter: nft_ct: fix use-after-free in timeout object destroy
Assigned by Linux
Apr 24, 2026
CVE-2026-31666High 7.8btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()
Assigned by Linux
Apr 24, 2026
CVE-2026-31667High 7.8Input: uinput - fix circular locking dependency with ff-core
Assigned by Linux
Apr 24, 2026
CVE-2026-31668Critical 9.8seg6: separate dst_cache for input and output paths in seg6 lwtunnel
Assigned by Linux
Apr 24, 2026
CVE-2026-31669Critical 9.8mptcp: fix slab-use-after-free in __inet_lookup_established
Assigned by Linux
Apr 24, 2026
CVE-2026-31670Medium 5.5net: rfkill: prevent unlimited numbers of rfkill events from being created
Assigned by Linux
Apr 24, 2026
CVE-2026-31671Medium 5.5xfrm_user: fix info leak in build_report()
Assigned by Linux
Apr 24, 2026
CVE-2026-31535Medium 4.7In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_io…Apr 24, 2026
CVE-2026-31536Critical 9.8In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch processing we likely have request…Apr 24, 2026
CVE-2026-31537Medium 5.5In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.send_io.bcredits It turns out that our code will corrupt the stream of reassabled data tr…Apr 24, 2026
CVE-2026-31538High 7.5In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_io…Apr 24, 2026
CVE-2026-31540Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check set_default_submission() before deferencing When the i915 driver firmware binaries are not present, the set_defa…Apr 24, 2026
CVE-2026-31541High 7.8In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates When the "copy_trace_marker" option is enabled for an instance, anything written i…Apr 24, 2026
CVE-2026-31542Medium 5.5In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When a socket is deconfigured, it's mapped to SOCK_EMPTY (0xffff).Apr 24, 2026
CVE-2026-31543Medium 5.5In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying When debug logging is enabled, read_key_from_user_keying() lo…Apr 24, 2026
CVE-2026-31544Medium 5.5In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix NULL dereference on notify error path Since commit b5daf93b809d1 ("firmware: arm_scmi: Avoid notifier regis…Apr 24, 2026
CVE-2026-31545Medium 5.5In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep.Apr 24, 2026
CVE-2026-31547Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing runtime PM reference in ccs_mode_store ccs_mode_store() calls xe_gt_reset() which internally invokes xe_pm_runt…Apr 24, 2026
CVE-2026-31549Medium 5.5In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe The cp2615 driver uses the USB device serial string as the i2c adapter name but…Apr 24, 2026
CVE-2026-31550Medium 5.5In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control timeout The bcm2835_asb_control() function uses a tight polling loop to wait for…Apr 24, 2026
CVE-2026-31551Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.Apr 24, 2026
CVE-2026-31552High 7.5In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Since upstream commit e75665dd0968 ("wifi: wlcore:…Apr 24, 2026
CVE-2026-31553High 8.8In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Using "(u64 __user *)hva + offset" to get the virtual addresses of S…Apr 24, 2026
CVE-2026-31556Medium 5.5In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchk_quota_item can return early after calling xchk_fblock_process_erro…Apr 24, 2026
CVE-2026-31558High 8.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust kvm_get_vcpu_by_cpuid() takes a cpuid parameter whose type is int, so cpui…Apr 24, 2026
CVE-2026-31559Medium 5.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing NULL checks for kstrdup() 1.Apr 24, 2026
CVE-2026-31560Medium 5.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print error log when wait finish transaction If an error occurs, the device may not have a current message.Apr 24, 2026
CVE-2026-31561Medium 5.5In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Commit in Fixes added the FRED CR4 bit to the CR4 pinned bits mask so th…Apr 24, 2026
CVE-2026-31562Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register The call to mipi_dsi_host_register triggers a callback…Apr 24, 2026
CVE-2026-31564Medium 5.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access() In function kvm_eiointc_regs_access(), the register base…Apr 24, 2026
CVE-2026-31567Medium 5.5In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask() Commit 35e4a69b2003f ("PM: sleep: Allow pm_restrict_gfp_mask() stacki…Apr 24, 2026
CVE-2026-31568High 7.1In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage access fixups for donated memory There are special cases where secure storage access exceptions…Apr 24, 2026
CVE-2026-31569High 7.3In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Handle the case that EIOINTC's coremap is empty EIOINTC's coremap in eiointc_update_sw_coremap() can be empty, curr…Apr 24, 2026
PreviousPage 46 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.