CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,758 CVEs published, 257 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,758
Show in the list
Critical, last 7 days
257
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,688 CVEs, showing 2301 to 2350PreviousPage 47 of 154Next
CVESeverityTitlePublished
CVE-2026-53231Medium 5.5net: phy: don't try to setup PHY-driven SFP cages when using genphy
Assigned by Linux
Jun 25, 2026
CVE-2026-53232High 8.8net: phy: clean the sfp upstream if phy probing fails
Assigned by Linux
Jun 25, 2026
CVE-2026-53233High 7.8netdev: fix double-free in netdev_nl_bind_rx_doit()
Assigned by Linux
Jun 25, 2026
CVE-2026-53234High 7.8net: ibm: emac: Fix use-after-free during device removal
Assigned by Linux
Jun 25, 2026
CVE-2026-53235High 7.5net: add pskb_may_pull() to skb_gro_receive_list()
Assigned by Linux
Jun 25, 2026
CVE-2026-53236Medium 5.5tcp: restrict SO_ATTACH_FILTER to priv users
Assigned by Linux
Jun 25, 2026
CVE-2026-53237Medium 5.5gpio: mvebu: fix NULL pointer dereference in suspend/resume
Assigned by Linux
Jun 25, 2026
CVE-2026-53238Medium 5.5netlabel: validate unlabeled address and mask attribute lengths
Assigned by Linux
Jun 25, 2026
CVE-2026-53239High 7.8xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
Assigned by Linux
Jun 25, 2026
CVE-2026-53240High 8.8xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload
Assigned by Linux
Jun 25, 2026
CVE-2026-53241Medium 5.5ALSA: seq: dummy: fix UMP event stack overread
Assigned by Linux
Jun 25, 2026
CVE-2026-53242High 7.8ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
Assigned by Linux
Jun 25, 2026
CVE-2026-53243Medium 5.5rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
Assigned by Linux
Jun 25, 2026
CVE-2026-53244High 7.5VFS: fix possible failure to unlock in nfsd4_create_file()
Assigned by Linux
Jun 25, 2026
CVE-2026-53245Medium 5.5net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
Assigned by Linux
Jun 25, 2026
CVE-2026-53246Critical 9.8sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
Assigned by Linux
Jun 25, 2026
CVE-2026-53247Critical 9.8net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
Assigned by Linux
Jun 25, 2026
CVE-2026-53248High 8.8net: airoha: Fix use-after-free in metadata dst teardown
Assigned by Linux
Jun 25, 2026
CVE-2026-53249Medium 5.5ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
Assigned by Linux
Jun 25, 2026
CVE-2026-53250High 7.8xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()
Assigned by Linux
Jun 25, 2026
CVE-2026-53251Medium 5.5Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
Assigned by Linux
Jun 25, 2026
CVE-2026-53252Medium 5.5Bluetooth: fix memory leak in error path of hci_alloc_dev()
Assigned by Linux
Jun 25, 2026
CVE-2026-53253High 7.1Bluetooth: bnep: reject short frames before parsing
Assigned by Linux
Jun 25, 2026
CVE-2026-53254High 8.1Bluetooth: RFCOMM: validate skb length in MCC handlers
Assigned by Linux
Jun 25, 2026
CVE-2026-53255High 7.1Bluetooth: MGMT: validate advertising TLV before type checks
Assigned by Linux
Jun 25, 2026
CVE-2026-53256High 8.0Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
Assigned by Linux
Jun 25, 2026
CVE-2026-53257Medium 5.5wifi: cfg80211: enforce HE/EHT cap/oper consistency
Assigned by Linux
Jun 25, 2026
CVE-2026-53258Medium 5.5wifi: fix leak if split 6 GHz scanning fails
Assigned by Linux
Jun 25, 2026
CVE-2026-53259High 7.8ipv6: anycast: insert aca into global hash under idev->lock
Assigned by Linux
Jun 25, 2026
CVE-2026-53260Critical 9.8tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
Assigned by Linux
Jun 25, 2026
CVE-2026-53261Medium 5.5devlink: Release nested relation on devlink free
Assigned by Linux
Jun 25, 2026
CVE-2026-53262High 7.8l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
Assigned by Linux
Jun 25, 2026
CVE-2026-53263Medium 5.56lowpan: fix off-by-one in multicast context address compression
Assigned by Linux
Jun 25, 2026
CVE-2026-53264High 7.8net/sched: act_api: use RCU with deferred freeing for action lifecycle
Assigned by Linux
Jun 25, 2026
CVE-2026-53265High 7.8dm cache policy smq: check allocation under invalidate lock
Assigned by Linux
Jun 25, 2026
CVE-2026-53266
Known exploited
High 8.8netfilter: bridge: make ebt_snat ARP rewrite writable
Assigned by Linux
Jun 25, 2026
CVE-2026-53267High 7.8netfilter: nft_ct: bail out on template ct in get eval
Assigned by Linux
Jun 25, 2026
CVE-2026-53268High 8.2netfilter: conntrack_irc: fix possible out-of-bounds read
Assigned by Linux
Jun 25, 2026
CVE-2026-53269Medium 5.5netfilter: synproxy: add mutex to guard hook reference counting
Assigned by Linux
Jun 25, 2026
CVE-2026-53270High 7.8ipvs: clear the svc scheduler ptr early on edit
Assigned by Linux
Jun 25, 2026
CVE-2026-53271Medium 5.5ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
Assigned by Linux
Jun 25, 2026
CVE-2026-53272High 7.8erofs: fix use-after-free on sbi->sync_decompress
Assigned by Linux
Jun 25, 2026
CVE-2026-53273High 7.8tee: optee: prevent use-after-free when the client exits before the supplicant
Assigned by Linux
Jun 25, 2026
CVE-2026-53274Medium 5.5net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
Assigned by Linux
Jun 25, 2026
CVE-2026-53275High 8.8ipv6: mcast: Fix use-after-free when processing MLD queries
Assigned by Linux
Jun 25, 2026
CVE-2026-53276High 7.8Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer
Assigned by Linux
Jun 25, 2026
CVE-2026-53277High 8.8KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
Assigned by Linux
Jun 25, 2026
CVE-2026-53278Medium 5.5arm_mpam: Check whether the config array is allocated before destroying it
Assigned by Linux
Jun 26, 2026
CVE-2026-53279Medium 5.5drm/gma500/oaktrail_lvds: fix hang on init failure
Assigned by Linux
Jun 26, 2026
CVE-2026-53280Medium 5.5iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()
Assigned by Linux
Jun 26, 2026
PreviousPage 47 of 154Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.