CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,867 CVEs published, 346 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,867
Show in the list
Critical, last 7 days
346
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2801 to 2850PreviousPage 57 of 91Next
CVESeverityTitlePublished
CVE-2026-43296High 7.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky NIX SQ manager sticky mode is known to cause stalls when multiple SQs s…May 8, 2026
CVE-2026-43297Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() rga_get_frame() can return ERR_PTR(-EINVAL) when buffer ty…May 8, 2026
CVE-2026-43298Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5.May 8, 2026
CVE-2026-43300Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() In jdi_panel_dsi_remove(), jdi is explicitly checked,…May 8, 2026
CVE-2026-43301Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime usage count underflow Replace pm_runtime_put_sync() with pm_runtime_dont_use_autosuspend(…May 8, 2026
CVE-2026-43302Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment size to avoid debug warnings When using V3D rendering with CONFIG_DMA_API_DEBUG enabled, the kernel occasi…May 8, 2026
CVE-2026-43305Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path [Why] The evaluation for whether we need to use the DMUB…May 8, 2026
CVE-2026-43306Medium 5.5In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type With CONFIG_CFI enabled, the kernel strictly enforces that indirect function cal…May 8, 2026
CVE-2026-43307High 7.8In the Linux kernel, the following vulnerability has been resolved: iio: accel: adxl380: Avoid reading more entries than present in FIFO The interrupt handler reads FIFO entries in batches of N sampl…May 8, 2026
CVE-2026-43309Medium 5.5In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID arr…May 8, 2026
CVE-2026-43312Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In ov5647_init_controls() we call v4l2_get_subdevdata, but it is initialized…May 8, 2026
CVE-2026-43313Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() In acpi_processor_errata_piix4(), the pointer dev is…May 8, 2026
CVE-2026-43314Medium 5.5In the Linux kernel, the following vulnerability has been resolved: dm: remove fake timeout to avoid leak request Since commit 15f73f5b3e59 ("blk-mq: move failure injection out of blk_mq_complete_req…May 8, 2026
CVE-2026-43315Medium 5.5In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding Drop the WARN in svm_set_nested_state() on nested_svm…May 8, 2026
CVE-2026-43316Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: Check for out of bounds chip_id Clang with CONFIG_UBSAN_SHIFT=y noticed a condition where a signed type (literal "…May 8, 2026
CVE-2026-43317Medium 5.5In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration failures but for som…May 8, 2026
CVE-2026-43318Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify Invalidating a dmabuf will impact other users of the shared BO.May 8, 2026
CVE-2026-43319Medium 5.5In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spi_lock and buf_lock The spidev driver previously used two mutexes, spi_lock and buf_lock,…May 8, 2026
CVE-2026-43320Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dsc eDP issue [why] Need to add function hook check before useMay 8, 2026
CVE-2026-43322High 8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in le_read_features_complete This fixes the following backtrace caused by hci_conn being freed before…May 8, 2026
CVE-2026-43323Medium 5.5In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zero_vruntime tracking fix John reported that stress-ng-yield could make his machine unhappy and managed to bisect…May 8, 2026
CVE-2026-43324High 7.8In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix interrupt synchronization error This fixes an error in synchronization in the dummy-hcd driver.May 8, 2026
CVE-2026-43325Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't send a 6E related command when not supported MCC_ALLOWED_AP_TYPE_CMD is related to 6E support.May 8, 2026
CVE-2026-43326Medium 5.5In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback SCX_KICK_WAIT busy-waits in kick_cpus_irq_workfn() usin…May 8, 2026
CVE-2026-43327Medium 5.5In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix locking/synchronization error Syzbot testing was able to provoke an addressing exception and crash in the usb_g…May 8, 2026
CVE-2026-43328High 7.8In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path When kobject_init_and_add() fails, cpufreq_dbs_governo…May 8, 2026
CVE-2026-43330High 7.8In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the…May 8, 2026
CVE-2026-43331Medium 5.5In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Disable KCOV instrumentation after load_segments() The load_segments() function changes segment registers, invalidating…May 8, 2026
CVE-2026-43333Medium 5.5In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF pointers check_mem_access() matches PTR_TO_BUF via base_type() which strips PTR_MA…May 8, 2026
CVE-2026-43335Medium 5.5In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() The change to dynamic IDs for SM8450 platform intercon…May 8, 2026
CVE-2026-43336High 7.5In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state before it leaves scope Since the ChaCha permutation is invertible, the local variable 'p…May 8, 2026
CVE-2026-43337Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() dcn401_init_hw() assumes that update_bw_bounding_box() is valid w…May 8, 2026
CVE-2026-43338Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't reserve any space, they just do a trans…May 8, 2026
CVE-2026-43340Medium 5.5In the Linux kernel, the following vulnerability has been resolved: comedi: Reinit dev->spinlock between attachments to low-level drivers `struct comedi_device` is the main controlling structure for…May 8, 2026
CVE-2026-43342Medium 4.7In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as th…May 8, 2026
CVE-2026-43343Medium 5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free geth_alloc() increments the reference count, but geth_free() fails to dec…May 8, 2026
CVE-2026-43344
Healthcare
Medium 5.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix die ID init and look up bugs In snbep_pci2phy_map_init(), in the nr_node_ids > 8 path, uncore_device_to_…May 8, 2026
CVE-2026-43345High 7.5In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed for IPA v5.0+ For IPA v5.0+, the event ring index field moved from CH_C_CNTXT_0 to CH…May 8, 2026
CVE-2026-43346Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ice: ptp: don't WARN when controlling PF is unavailable In VFIO passthrough setups, it is possible to pass through only a PF which…May 8, 2026
CVE-2026-43347High 7.5In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: monaco: Reserve full Gunyah metadata region We observe spurious "Synchronous External Abort" exceptions (ESR=0x96…May 8, 2026
CVE-2026-43348Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER When registering VTL0 memory via MSHV_ADD_VTL0_MEMORY, the kernel computes pg…May 8, 2026
CVE-2026-43349Medium 5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer syzbot reported a f2fs bug as below: BUG: KMSAN: uninit-val…May 8, 2026
CVE-2026-43362High 8.1smb: client: fix in-place encryption corruption in SMB2_write()
Assigned by Linux
May 8, 2026
CVE-2026-43365High 8.2xfs: fix undersized l_iclog_roundoff values
Assigned by Linux
May 8, 2026
CVE-2026-43366High 7.8io_uring/kbuf: check if target buffer list is still legacy on recycle
Assigned by Linux
May 8, 2026
CVE-2026-43368High 7.8drm/i915: Fix potential overflow of shmem scatterlist length
Assigned by Linux
May 8, 2026
CVE-2026-43370High 7.8drm/amdgpu: Fix use-after-free race in VM acquire
Assigned by Linux
May 8, 2026
CVE-2026-43374High 7.8net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
Assigned by Linux
May 8, 2026
CVE-2026-43383Critical 9.4net/tcp-md5: Fix MAC comparison to be constant-time
Assigned by Linux
May 8, 2026
CVE-2026-43402Critical 9.8kthread: consolidate kthread exit paths to prevent use-after-free
Assigned by Linux
May 8, 2026
PreviousPage 57 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.