CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,861 CVEs published, 341 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,861
Show in the list
Critical, last 7 days
341
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,319 CVEs, showing 3201 to 3250PreviousPage 65 of 167Next
CVESeverityTitlePublished
CVE-2026-63890Not yet scoredscsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker
Assigned by Linux
Jul 19, 2026
CVE-2026-63891Not yet scoredthunderbolt: property: Cap recursion depth in __tb_property_parse_dir()
Assigned by Linux
Jul 19, 2026
CVE-2026-63892Not yet scoredthunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
Assigned by Linux
Jul 19, 2026
CVE-2026-63893High 8.1thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()
Assigned by Linux
Jul 19, 2026
CVE-2026-63894High 7.8usb: gadget: f_fs: serialize DMABUF cancel against request completion
Assigned by Linux
Jul 19, 2026
CVE-2026-63895Not yet scoredusb: gadget: f_fs: copy only received bytes on short ep0 read
Assigned by Linux
Jul 19, 2026
CVE-2026-63896Not yet scoredusb: gadget: composite: fix integer underflow in WebUSB GET_URL handling
Assigned by Linux
Jul 19, 2026
CVE-2026-63897Not yet scoredUSB: serial: mct_u232: fix missing interrupt-in transfer sanity check
Assigned by Linux
Jul 19, 2026
CVE-2026-63898Not yet scoredUSB: serial: mct_u232: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63899Not yet scoredUSB: serial: mxuport: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63900Not yet scoredUSB: serial: keyspan: fix missing indat transfer sanity check
Assigned by Linux
Jul 19, 2026
CVE-2026-63901Not yet scoredUSB: serial: digi_acceleport: fix memory corruption with small endpoints
Assigned by Linux
Jul 19, 2026
CVE-2026-63902Not yet scoredUSB: serial: cypress_m8: validate interrupt packet headers
Assigned by Linux
Jul 19, 2026
CVE-2026-63903Not yet scoredUSB: serial: belkin_sa: validate interrupt status length
Assigned by Linux
Jul 19, 2026
CVE-2026-63904Not yet scoredusb: usbtmc: check URB actual_length for interrupt-IN notifications
Assigned by Linux
Jul 19, 2026
CVE-2026-63905Not yet scoredusbip: vudc: Fix use after free bug in vudc_remove due to race condition
Assigned by Linux
Jul 19, 2026
CVE-2026-63906High 8.4usb: musb: omap2430: Fix use-after-free in omap2430_probe()
Assigned by Linux
Jul 19, 2026
CVE-2026-63907Not yet scoreduio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory
Assigned by Linux
Jul 19, 2026
CVE-2026-63908Not yet scoredInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
Assigned by Linux
Jul 19, 2026
CVE-2026-63909High 8.1ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops
Assigned by Linux
Jul 19, 2026
CVE-2026-63910High 7.8dma-buf: fix UAF in dma_buf_fd() tracepoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63911High 7.8xfrm: iptfs: reset runtime state when cloning SAs
Assigned by Linux
Jul 19, 2026
CVE-2026-63912Critical 9.8xfrm: esp: restore combined single-frag length gate
Assigned by Linux
Jul 19, 2026
CVE-2026-63913High 8.2netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
Assigned by Linux
Jul 19, 2026
CVE-2026-63914High 7.3xfrm: route MIGRATE notifications to caller's netns
Assigned by Linux
Jul 19, 2026
CVE-2026-63915High 8.8nfc: hci: fix out-of-bounds read in HCP header parsing
Assigned by Linux
Jul 19, 2026
CVE-2026-63916High 8.8HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
Assigned by Linux
Jul 19, 2026
CVE-2026-63917High 8.8ip6: vti: Use ip6_tnl.net in vti6_changelink().
Assigned by Linux
Jul 19, 2026
CVE-2026-63918High 7.8l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
Assigned by Linux
Jul 19, 2026
CVE-2026-63919High 8.8xfrm: input: hold netns during deferred transport reinjection
Assigned by Linux
Jul 19, 2026
CVE-2026-63920High 7.1ipv6: validate extension header length before copying to cmsg
Assigned by Linux
Jul 19, 2026
CVE-2026-63921High 8.8ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().
Assigned by Linux
Jul 19, 2026
CVE-2026-63922Critical 9.8ipv6: exthdrs: refresh nh after handling HAO option
Assigned by Linux
Jul 19, 2026
CVE-2026-63923High 8.8octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
Assigned by Linux
Jul 19, 2026
CVE-2026-63924Critical 9.8ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
Assigned by Linux
Jul 19, 2026
CVE-2026-63925High 8.1macsec: fix replay protection at XPN lower-PN wrap
Assigned by Linux
Jul 19, 2026
CVE-2026-63926High 8.4bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
Assigned by Linux
Jul 19, 2026
CVE-2026-63927High 7.8usb: dwc2: Fix use after free in debug code
Assigned by Linux
Jul 19, 2026
CVE-2026-63928Not yet scoredUSB: serial: omninet: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63929Not yet scorediio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
Assigned by Linux
Jul 19, 2026
CVE-2026-63930High 7.8iio: buffer: hw-consumer: fix use-after-free in error path
Assigned by Linux
Jul 19, 2026
CVE-2026-63931Not yet scorediio: chemical: scd30: fix division by zero in write_raw
Assigned by Linux
Jul 19, 2026
CVE-2026-63932Not yet scorediio: chemical: mhz19b: reject oversized serial replies
Assigned by Linux
Jul 19, 2026
CVE-2026-63933Not yet scorediio: gyro: adis16260: fix division by zero in write_raw
Assigned by Linux
Jul 19, 2026
CVE-2026-63934Not yet scorediio: gyro: itg3200: fix i2c read into the wrong stack location
Assigned by Linux
Jul 19, 2026
CVE-2026-63935Not yet scorediio: adc: nxp-sar-adc: fix division by zero in write_raw
Assigned by Linux
Jul 19, 2026
CVE-2026-63936Not yet scorediio: adc: mt6359: fix unchecked return value in mt6358_read_imp
Assigned by Linux
Jul 19, 2026
CVE-2026-63937High 8.8KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer
Assigned by Linux
Jul 19, 2026
CVE-2026-63938Critical 9.3KVM: SEV: Check PSC request indices against the actual size of the buffer
Assigned by Linux
Jul 19, 2026
CVE-2026-63939Critical 9.3KVM: SEV: Compute the correct max length of the in-GHCB scratch area
Assigned by Linux
Jul 19, 2026
PreviousPage 65 of 167Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.