CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,848 CVEs published, 323 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,848
Show in the list
Critical, last 7 days
323
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2351 to 2400PreviousPage 48 of 91Next
CVESeverityTitlePublished
CVE-2026-31646Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() page_pool_create() can return an ERR_PTR on failure.Apr 24, 2026
CVE-2026-31647Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling Switch from using the completion's raw spinlock to a local lock…Apr 24, 2026
CVE-2026-31650High 7.8In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on disconnect The vub300 driver maintains an explicit reference count for the controller and its dr…Apr 24, 2026
CVE-2026-31652High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: deallocate damon_call() failure leaking damon_ctx damon_stat_start() always allocates the module's damon_ctx object…Apr 24, 2026
CVE-2026-31653Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc repeat_call_control if damon_call() fails damon_call() for repeat_call_control of DAMON_SYSFS could fail if…Apr 24, 2026
CVE-2026-31654Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in __mmap_region() commit 605f6586ecf7 ("mm/vma: do not leak memory when .mmap_prepare swaps the file") han…Apr 24, 2026
CVE-2026-31655Medium 5.5In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled Keep the NOC_HDCP clock always enabled to fix the potential hang caused…Apr 24, 2026
CVE-2026-31660Medium 5.5In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: allocate rx skb before consuming bytes pn532_receive_buf() reports the number of accepted bytes to the serdev core.Apr 24, 2026
CVE-2026-31661Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dma_free_coherent() size dma_alloc_consistent() may change the size to align it.Apr 24, 2026
CVE-2026-31672Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime…Apr 24, 2026
CVE-2026-31673High 7.8af_unix: read UNIX_DIAG_VFS data under unix_state_lock
Assigned by Linux
Apr 25, 2026
CVE-2026-31674High 7.1netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
Assigned by Linux
Apr 25, 2026
CVE-2026-31675High 7.8net/sched: sch_netem: fix out-of-bounds access in packet corruption
Assigned by Linux
Apr 25, 2026
CVE-2026-31676High 7.5rxrpc: only handle RESPONSE during service challenge
Assigned by Linux
Apr 25, 2026
CVE-2026-31678High 7.8openvswitch: defer tunnel netdev_put to RCU release
Assigned by Linux
Apr 25, 2026
CVE-2026-31679High 7.1openvswitch: validate MPLS set/set_masked payload length
Assigned by Linux
Apr 25, 2026
CVE-2026-31680High 7.8net: ipv6: flowlabel: defer exclusive option free until RCU teardown
Assigned by Linux
Apr 25, 2026
CVE-2026-31681Medium 5.5netfilter: xt_multiport: validate range encoding in checkentry
Assigned by Linux
Apr 25, 2026
CVE-2026-31682Critical 9.1bridge: br_nd_send: linearize skb before parsing ND options
Assigned by Linux
Apr 25, 2026
CVE-2026-31685Critical 9.4netfilter: ip6t_eui64: reject invalid MAC header for all packets
Assigned by Linux
Apr 25, 2026
CVE-2026-31677Medium 5.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit each RX scatterlist extraction to the…Apr 25, 2026
CVE-2026-31683High 7.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailroom is insufficient When OGM aggregation state is toggled at runtime, an existing f…Apr 25, 2026
CVE-2026-31684Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: sched: act_csum: validate nested VLAN headers tcf_csum_act() walks nested VLAN headers directly from skb->data when an skb sti…Apr 25, 2026
CVE-2026-31686High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/kasan: fix double free for kasan pXds kasan_free_pxd() assumes the page table is always struct page aligned.Apr 27, 2026
CVE-2026-31687Medium 5.5In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe() Commit 11a78b794496 ("ARM: OMAP: MPUIO wake updates") registers the omap_mpuio_driver…Apr 27, 2026
CVE-2026-31689Medium 5.5In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edac_mc_alloc() When the mci->pvt_info allocation in edac_mc_alloc() fails, the error path will…Apr 27, 2026
CVE-2026-31690High 7.8In the Linux kernel, the following vulnerability has been resolved: firmware: thead: Fix buffer overflow and use standard endian macros Addresses two issues in the TH1520 AON firmware protocol driver…Apr 27, 2026
CVE-2026-31691Medium 5.5In the Linux kernel, the following vulnerability has been resolved: igb: remove napi_synchronize() in igb_down() When an AF_XDP zero-copy application terminates abruptly (e.g., kill -9), the XSK buff…Apr 27, 2026
CVE-2026-31786High 7.8Buffer overflow in drivers/xen/sys-hypervisor.c
Assigned by Linux
Apr 30, 2026
CVE-2026-31692Medium 5.5In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer…Apr 30, 2026
CVE-2026-31787High 7.8In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may_split nor .open.Apr 30, 2026
CVE-2026-31693High 7.8cifs: some missing initializations on replay
Assigned by Linux
Apr 30, 2026
CVE-2026-31694High 7.8fuse: reject oversized dirents in page cache
Assigned by Linux
May 1, 2026
CVE-2026-31696High 7.8rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
Assigned by Linux
May 1, 2026
CVE-2026-31697High 7.1crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
Assigned by Linux
May 1, 2026
CVE-2026-31698High 7.1crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
Assigned by Linux
May 1, 2026
CVE-2026-31699High 7.1crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
Assigned by Linux
May 1, 2026
CVE-2026-31700High 7.8net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
Assigned by Linux
May 1, 2026
CVE-2026-31704Medium 5.5ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
Assigned by Linux
May 1, 2026
CVE-2026-31705Critical 9.8ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
Assigned by Linux
May 1, 2026
CVE-2026-31708High 8.1smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
Assigned by Linux
May 1, 2026
CVE-2026-31709High 8.8smb: client: validate the whole DACL before rewriting it in cifsacl
Assigned by Linux
May 1, 2026
CVE-2026-31711High 7.5smb: server: fix active_num_conn leak on transport allocation failure
Assigned by Linux
May 1, 2026
CVE-2026-31712High 8.3ksmbd: require minimum ACE size in smb_check_perm_dacl()
Assigned by Linux
May 1, 2026
CVE-2026-31719High 7.5crypto: krb5enc - fix async decrypt skipping hash verification
Assigned by Linux
May 1, 2026
CVE-2026-31731High 7.8thermal: core: Address thermal zone removal races with resume
Assigned by Linux
May 1, 2026
CVE-2026-31737Medium 5.5net: ftgmac100: fix ring allocation unwind on open failure
Assigned by Linux
May 1, 2026
CVE-2026-31739High 8.8crypto: tegra - Add missing CRYPTO_ALG_ASYNC
Assigned by Linux
May 1, 2026
CVE-2026-31742High 7.8vt: discard stale unicode buffer on alt screen exit after resize
Assigned by Linux
May 1, 2026
CVE-2026-31752Medium 5.5bridge: br_nd_send: validate ND option lengths
Assigned by Linux
May 1, 2026
PreviousPage 48 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.