CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,907 CVEs published, 348 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,907
Show in the list
Critical, last 7 days
348
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,754 CVEs, showing 2701 to 2750PreviousPage 55 of 156Next
CVESeverityTitlePublished
CVE-2026-63955High 7.5mm/vmalloc: do not trigger BUG() on BH disabled context
Assigned by Linux
Jul 19, 2026
CVE-2026-63956Not yet scoredUSB: serial: cypress_m8: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63957Not yet scoredUSB: serial: safe_serial: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63958Not yet scoredusb: typec: ucsi: validate connector number in ucsi_connector_change()
Assigned by Linux
Jul 19, 2026
CVE-2026-63959Not yet scoredusb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT
Assigned by Linux
Jul 19, 2026
CVE-2026-63960Not yet scoredusb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()
Assigned by Linux
Jul 19, 2026
CVE-2026-63961Not yet scoredusb: typec: altmodes/displayport: validate count before reading Status Update VDO
Assigned by Linux
Jul 19, 2026
CVE-2026-63962Not yet scoredusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()
Assigned by Linux
Jul 19, 2026
CVE-2026-63963Not yet scoredusb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
Assigned by Linux
Jul 19, 2026
CVE-2026-63964Not yet scoredusb: typec: ucsi: ccg: reject firmware images without a ':' record header
Assigned by Linux
Jul 19, 2026
CVE-2026-63965Not yet scorediio: pressure: bmp280: fix stack leak in bmp580 trigger handler
Assigned by Linux
Jul 19, 2026
CVE-2026-63966Not yet scorediio: imu: adis16550: fix stack leak in trigger handler
Assigned by Linux
Jul 19, 2026
CVE-2026-63967Not yet scorediio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
Assigned by Linux
Jul 19, 2026
CVE-2026-63968High 7.5ipv6: fix possible infinite loop in fib6_select_path()
Assigned by Linux
Jul 19, 2026
CVE-2026-63969Not yet scoredipv6: fix possible infinite loop in rt6_fill_node()
Assigned by Linux
Jul 19, 2026
CVE-2026-63970High 7.8vsock/virtio: bind uarg before filling zerocopy skb
Assigned by Linux
Jul 19, 2026
CVE-2026-63971High 7.8sctp: fix race between sctp_wait_for_connect and peeloff
Assigned by Linux
Jul 19, 2026
CVE-2026-63972High 7.5net: mana: Skip redundant detach on already-detached port
Assigned by Linux
Jul 19, 2026
CVE-2026-63973Medium 5.5net: mana: Add NULL guards in teardown path to prevent panic on attach failure
Assigned by Linux
Jul 19, 2026
CVE-2026-63974High 8.8Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
Assigned by Linux
Jul 19, 2026
CVE-2026-63975High 8.8Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
Assigned by Linux
Jul 19, 2026
CVE-2026-63976High 8.8Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
Assigned by Linux
Jul 19, 2026
CVE-2026-63977High 7.8dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work
Assigned by Linux
Jul 19, 2026
CVE-2026-63978Critical 9.8net/handshake: Drain pending requests at net namespace exit
Assigned by Linux
Jul 19, 2026
CVE-2026-63979Critical 9.8net/handshake: hand off the pinned file reference to accept_doit
Assigned by Linux
Jul 19, 2026
CVE-2026-63980High 7.5net/handshake: Use spin_lock_bh for hn_lock
Assigned by Linux
Jul 19, 2026
CVE-2026-63981Not yet scorednet/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow
Assigned by Linux
Jul 19, 2026
CVE-2026-63982Not yet scorednet/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop
Assigned by Linux
Jul 19, 2026
CVE-2026-63983Not yet scorednet/sched: fix packet loop on netem when duplicate is on
Assigned by Linux
Jul 19, 2026
CVE-2026-63984Critical 9.8ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
Assigned by Linux
Jul 19, 2026
CVE-2026-63985High 7.8ethtool: eeprom: add more safeties to EEPROM Netlink fallback
Assigned by Linux
Jul 19, 2026
CVE-2026-63986Medium 5.5ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure
Assigned by Linux
Jul 19, 2026
CVE-2026-63987High 7.8ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES
Assigned by Linux
Jul 19, 2026
CVE-2026-63988Medium 5.5bridge: Fix sleep in atomic context in sysfs path
Assigned by Linux
Jul 19, 2026
CVE-2026-63989Medium 5.5bridge: Fix sleep in atomic context in netlink path
Assigned by Linux
Jul 19, 2026
CVE-2026-63990Medium 5.5bonding: refuse to enslave CAN devices
Assigned by Linux
Jul 19, 2026
CVE-2026-63991Medium 5.5Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()
Assigned by Linux
Jul 19, 2026
CVE-2026-63992Critical 9.1tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()
Assigned by Linux
Jul 19, 2026
CVE-2026-63993Critical 9.8vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()
Assigned by Linux
Jul 19, 2026
CVE-2026-63994Critical 9.8tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
Assigned by Linux
Jul 19, 2026
CVE-2026-63995High 7.8ethtool: cmis: validate start_cmd_payload_size from module
Assigned by Linux
Jul 19, 2026
CVE-2026-63996High 7.8ethtool: cmis: require exact CDB reply length
Assigned by Linux
Jul 19, 2026
CVE-2026-63997Medium 5.5ethtool: module: avoid leaking a netdev ref on module flash errors
Assigned by Linux
Jul 19, 2026
CVE-2026-63998Medium 5.5ethtool: module: call ethnl_ops_complete() on module flash errors
Assigned by Linux
Jul 19, 2026
CVE-2026-63999Medium 5.5ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
Assigned by Linux
Jul 19, 2026
CVE-2026-64000Critical 9.8net: hsr: fix potential OOB access in supervision frame handling
Assigned by Linux
Jul 19, 2026
CVE-2026-64001High 7.8ALSA: pcm: oss: Fix setup list UAF on proc write error
Assigned by Linux
Jul 19, 2026
CVE-2026-64002High 7.8ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
Assigned by Linux
Jul 19, 2026
CVE-2026-64003High 7.5scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues
Assigned by Linux
Jul 19, 2026
CVE-2026-64004High 7.8net/iucv: fix locking in .getsockopt
Assigned by Linux
Jul 19, 2026
PreviousPage 55 of 156Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.