CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,861 CVEs published, 341 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,861
Show in the list
Critical, last 7 days
341
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,636 CVEs, showing 3101 to 3150PreviousPage 63 of 93Next
CVESeverityTitlePublished
CVE-2026-43492Medium 5.5lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
Assigned by Linux
May 19, 2026
CVE-2026-43493Critical 9.8crypto: pcrypt - Fix handling of MAY_BACKLOG requests
Assigned by Linux
May 19, 2026
CVE-2026-43494High 7.8net/rds: reset op_nents when zerocopy page pin fails
Assigned by Linux
May 21, 2026
CVE-2026-43495High 8.8net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
Assigned by Linux
May 21, 2026
CVE-2026-43496Medium 5.5net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Assigned by Linux
May 21, 2026
CVE-2026-43497High 7.3fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
Assigned by Linux
May 21, 2026
CVE-2026-43498High 7.8accel/ivpu: Disallow re-exporting imported GEM objects
Assigned by Linux
May 21, 2026
CVE-2026-43499High 7.8rtmutex: Use waiter::task instead of current in remove_waiter()
Assigned by Linux
May 21, 2026
CVE-2026-43501Critical 9.8ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
Assigned by Linux
May 21, 2026
CVE-2026-43502High 7.8net/rds: handle zerocopy send cleanup before the message is queued
Assigned by Linux
May 21, 2026
CVE-2026-43503High 8.8net: skbuff: propagate shared-frag marker through frag-transfer helpers
Assigned by Linux
May 23, 2026
CVE-2026-46300High 7.8net: skbuff: preserve shared-frag marker during coalescing
Assigned by Linux
May 23, 2026
CVE-2026-45834Medium 5.5Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
Assigned by Linux
May 26, 2026
CVE-2026-45835Medium 5.5Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
Assigned by Linux
May 26, 2026
CVE-2026-45836Medium 5.5Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
Assigned by Linux
May 26, 2026
CVE-2026-45837High 7.8bpf: Fix use-after-free in arena_vm_close on fork
Assigned by Linux
May 27, 2026
CVE-2026-45838Medium 5.5bpf: fix end-of-list detection in cgroup_storage_get_next_key()
Assigned by Linux
May 27, 2026
CVE-2026-45839High 7.8bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
Assigned by Linux
May 27, 2026
CVE-2026-45840Medium 5.5openvswitch: cap upcall PID array size and pre-size vport replies
Assigned by Linux
May 27, 2026
CVE-2026-45841Medium 5.5netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
Assigned by Linux
May 27, 2026
CVE-2026-45842Medium 5.5slip: reject VJ receive packets on instances with no rstate array
Assigned by Linux
May 27, 2026
CVE-2026-45843High 8.2slip: bound decode() reads against the compressed packet length
Assigned by Linux
May 27, 2026
CVE-2026-45844Medium 5.5netfilter: arp_tables: fix IEEE1394 ARP payload parsing
Assigned by Linux
May 27, 2026
CVE-2026-45845Medium 5.5net/sched: taprio: fix NULL pointer dereference in class dump
Assigned by Linux
May 27, 2026
CVE-2026-45846Medium 5.5bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
Assigned by Linux
May 27, 2026
CVE-2025-71303Medium 4.7accel/amdxdna: Fix race condition when checking rpm_on
Assigned by Linux
May 27, 2026
CVE-2025-71304Medium 5.5smack: /smack/doi: accept previously used values
Assigned by Linux
May 27, 2026
CVE-2025-71305Medium 5.5drm/display/dp_mst: Add protection against 0 vcpi
Assigned by Linux
May 27, 2026
CVE-2025-71306High 7.1ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()
Assigned by Linux
May 27, 2026
CVE-2025-71307Medium 5.5drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug
Assigned by Linux
May 27, 2026
CVE-2025-71308Medium 5.5accel/amdxdna: Fix potential NULL pointer dereference in context cleanup
Assigned by Linux
May 27, 2026
CVE-2025-71309Medium 5.5fs/ntfs3: fix deadlock in ni_read_folio_cmpr
Assigned by Linux
May 27, 2026
CVE-2026-45847Medium 5.5net: remove WARN_ON_ONCE when accessing forward path array
Assigned by Linux
May 27, 2026
CVE-2026-45848Medium 5.5apparmor: fix NULL sock in aa_sock_file_perm
Assigned by Linux
May 27, 2026
CVE-2026-45849Medium 5.5net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
Assigned by Linux
May 27, 2026
CVE-2026-45850Medium 5.5ipvs: skip ipv6 extension headers for csum checks
Assigned by Linux
May 27, 2026
CVE-2026-45851High 7.1efi: Fix reservation of unaccepted memory table
Assigned by Linux
May 27, 2026
CVE-2026-45852High 7.8RDMA/rxe: Fix double free in rxe_srq_from_init
Assigned by Linux
May 27, 2026
CVE-2026-45853High 7.8drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
Assigned by Linux
May 27, 2026
CVE-2026-45854Medium 5.5crypto: inside-secure/eip93 - unregister only available algorithm
Assigned by Linux
May 27, 2026
CVE-2026-45855Medium 5.5ata: libata-scsi: avoid Non-NCQ command starvation
Assigned by Linux
May 27, 2026
CVE-2026-45856High 7.1RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
Assigned by Linux
May 27, 2026
CVE-2026-45857Medium 5.5scsi: csiostor: Fix dereference of null pointer rn
Assigned by Linux
May 27, 2026
CVE-2026-45858Medium 5.5ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1
Assigned by Linux
May 27, 2026
CVE-2026-45859High 7.5netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
Assigned by Linux
May 27, 2026
CVE-2026-45860High 7.5netfilter: nf_conncount: increase the connection clean up limit to 64
Assigned by Linux
May 27, 2026
CVE-2026-45861High 7.8gfs2: Fix slab-use-after-free in qd_put
Assigned by Linux
May 27, 2026
CVE-2026-45862High 7.8iommu/vt-d: Flush cache for PASID table before using it
Assigned by Linux
May 27, 2026
CVE-2026-45863Medium 5.5i3c: dw: Fix memory leak in dw_i3c_master_i2c_xfers()
Assigned by Linux
May 27, 2026
CVE-2026-45864Medium 5.5fs/ntfs3: prevent infinite loops caused by the next valid being the same
Assigned by Linux
May 27, 2026
PreviousPage 63 of 93Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.