CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,886 CVEs published, 343 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,886
Show in the list
Critical, last 7 days
343
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,294 CVEs, showing 3151 to 3200PreviousPage 64 of 166Next
CVESeverityTitlePublished
CVE-2026-63864High 8.4bpf: Propagate error from visit_tailcall_insn
Assigned by Linux
Jul 19, 2026
CVE-2026-63865High 8.8bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
Assigned by Linux
Jul 19, 2026
CVE-2026-63866High 8.8wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link()
Assigned by Linux
Jul 19, 2026
CVE-2026-63867High 8.2mptcp: close TOCTOU race while computing rcv_wnd
Assigned by Linux
Jul 19, 2026
CVE-2026-63868Not yet scorednet: garp: fix unsigned integer underflow in garp_pdu_parse_attr
Assigned by Linux
Jul 19, 2026
CVE-2026-63869High 7.6wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
Assigned by Linux
Jul 19, 2026
CVE-2026-63870High 7.8ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
Assigned by Linux
Jul 19, 2026
CVE-2026-63871Not yet scoredBluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
Assigned by Linux
Jul 19, 2026
CVE-2026-63873Not yet scoredaccel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()
Assigned by Linux
Jul 19, 2026
CVE-2026-63874High 7.8net: mctp: usb: fix race between urb completion and rx_retry cancellation
Assigned by Linux
Jul 19, 2026
CVE-2026-63875High 7.8arm64: tlb: Flush walk cache when unsharing PMD tables
Assigned by Linux
Jul 19, 2026
CVE-2026-63876Not yet scoredserial: zs: Convert to use a platform device
Assigned by Linux
Jul 19, 2026
CVE-2026-63877Not yet scoredserial: dz: Convert to use a platform device
Assigned by Linux
Jul 19, 2026
CVE-2026-63878Not yet scoreddrm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
Assigned by Linux
Jul 19, 2026
CVE-2026-63879High 7.8drm/amdgpu: fix amdgpu_hmm_range_get_pages
Assigned by Linux
Jul 19, 2026
CVE-2026-63880Not yet scoreddrm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO
Assigned by Linux
Jul 19, 2026
CVE-2026-63881High 7.8drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger
Assigned by Linux
Jul 19, 2026
CVE-2026-63882Not yet scoreddrm/amdkfd: fix NULL pointer bug in svm_range_set_attr
Assigned by Linux
Jul 19, 2026
CVE-2026-63883High 7.3serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ
Assigned by Linux
Jul 19, 2026
CVE-2026-63884High 7.8drm/i915: Fix potential UAF in TTM object purge
Assigned by Linux
Jul 19, 2026
CVE-2026-63885High 8.8drm/gem: fix race between change_handle and handle_delete
Assigned by Linux
Jul 19, 2026
CVE-2026-63886Critical 9.8scsi: target: iscsi: Validate CHAP_R length before base64 decode
Assigned by Linux
Jul 19, 2026
CVE-2026-63887Critical 9.8scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
Assigned by Linux
Jul 19, 2026
CVE-2026-63888Critical 9.8scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
Assigned by Linux
Jul 19, 2026
CVE-2026-63889High 8.1scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
Assigned by Linux
Jul 19, 2026
CVE-2026-63890Not yet scoredscsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker
Assigned by Linux
Jul 19, 2026
CVE-2026-63891Not yet scoredthunderbolt: property: Cap recursion depth in __tb_property_parse_dir()
Assigned by Linux
Jul 19, 2026
CVE-2026-63892Not yet scoredthunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
Assigned by Linux
Jul 19, 2026
CVE-2026-63893High 8.1thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()
Assigned by Linux
Jul 19, 2026
CVE-2026-63894High 7.8usb: gadget: f_fs: serialize DMABUF cancel against request completion
Assigned by Linux
Jul 19, 2026
CVE-2026-63895Not yet scoredusb: gadget: f_fs: copy only received bytes on short ep0 read
Assigned by Linux
Jul 19, 2026
CVE-2026-63896Not yet scoredusb: gadget: composite: fix integer underflow in WebUSB GET_URL handling
Assigned by Linux
Jul 19, 2026
CVE-2026-63897Not yet scoredUSB: serial: mct_u232: fix missing interrupt-in transfer sanity check
Assigned by Linux
Jul 19, 2026
CVE-2026-63898Not yet scoredUSB: serial: mct_u232: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63899Not yet scoredUSB: serial: mxuport: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63900Not yet scoredUSB: serial: keyspan: fix missing indat transfer sanity check
Assigned by Linux
Jul 19, 2026
CVE-2026-63901Not yet scoredUSB: serial: digi_acceleport: fix memory corruption with small endpoints
Assigned by Linux
Jul 19, 2026
CVE-2026-63902Not yet scoredUSB: serial: cypress_m8: validate interrupt packet headers
Assigned by Linux
Jul 19, 2026
CVE-2026-63903Not yet scoredUSB: serial: belkin_sa: validate interrupt status length
Assigned by Linux
Jul 19, 2026
CVE-2026-63904Not yet scoredusb: usbtmc: check URB actual_length for interrupt-IN notifications
Assigned by Linux
Jul 19, 2026
CVE-2026-63905Not yet scoredusbip: vudc: Fix use after free bug in vudc_remove due to race condition
Assigned by Linux
Jul 19, 2026
CVE-2026-63906High 8.4usb: musb: omap2430: Fix use-after-free in omap2430_probe()
Assigned by Linux
Jul 19, 2026
CVE-2026-63907Not yet scoreduio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory
Assigned by Linux
Jul 19, 2026
CVE-2026-63908Not yet scoredInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
Assigned by Linux
Jul 19, 2026
CVE-2026-63909High 8.1ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops
Assigned by Linux
Jul 19, 2026
CVE-2026-63910High 7.8dma-buf: fix UAF in dma_buf_fd() tracepoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63911High 7.8xfrm: iptfs: reset runtime state when cloning SAs
Assigned by Linux
Jul 19, 2026
CVE-2026-63912Critical 9.8xfrm: esp: restore combined single-frag length gate
Assigned by Linux
Jul 19, 2026
CVE-2026-63913High 8.2netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
Assigned by Linux
Jul 19, 2026
CVE-2026-63914High 7.3xfrm: route MIGRATE notifications to caller's netns
Assigned by Linux
Jul 19, 2026
PreviousPage 64 of 166Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.