CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,796 CVEs published, 330 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,796
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,319 CVEs, showing 3251 to 3300PreviousPage 66 of 167Next
CVESeverityTitlePublished
CVE-2026-63940Critical 9.3KVM: SEV: Ignore Port I/O requests of length '0'
Assigned by Linux
Jul 19, 2026
CVE-2026-63941High 8.8KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
Assigned by Linux
Jul 19, 2026
CVE-2026-63942High 7.8parport: Fix race between port and client registration
Assigned by Linux
Jul 19, 2026
CVE-2026-63943Not yet scoredInput: xpad - fix out-of-bounds access for Share button
Assigned by Linux
Jul 19, 2026
CVE-2026-63944High 8.8Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
Assigned by Linux
Jul 19, 2026
CVE-2026-63945High 7.8Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
Assigned by Linux
Jul 19, 2026
CVE-2026-63946High 8.8Bluetooth: ISO: fix UAF in iso_recv_frame
Assigned by Linux
Jul 19, 2026
CVE-2026-63947High 8.8Bluetooth: HIDP: fix missing length checks in hidp_input_report()
Assigned by Linux
Jul 19, 2026
CVE-2026-63948Not yet scoredBluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn
Assigned by Linux
Jul 19, 2026
CVE-2026-63949Not yet scoredauxdisplay: line-display: fix OOB read on zero-length message_store()
Assigned by Linux
Jul 19, 2026
CVE-2026-63950High 7.8mm/rmap: initialize nr_pages to 1 at loop start in try_to_unmap_one
Assigned by Linux
Jul 19, 2026
CVE-2026-63951High 7.8zram: fix use-after-free in zram_writeback_endio
Assigned by Linux
Jul 19, 2026
CVE-2026-63952High 8.4memfd: deny writeable mappings when implying SEAL_WRITE
Assigned by Linux
Jul 19, 2026
CVE-2026-63953Not yet scoredmm/migrate_device: fix pgtable leak in migrate_vma_insert_huge_pmd_page
Assigned by Linux
Jul 19, 2026
CVE-2026-63954High 7.8hpfs: fix a crash if hpfs_map_dnode_bitmap fails
Assigned by Linux
Jul 19, 2026
CVE-2026-63955High 7.5mm/vmalloc: do not trigger BUG() on BH disabled context
Assigned by Linux
Jul 19, 2026
CVE-2026-63956Not yet scoredUSB: serial: cypress_m8: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63957Not yet scoredUSB: serial: safe_serial: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63958Not yet scoredusb: typec: ucsi: validate connector number in ucsi_connector_change()
Assigned by Linux
Jul 19, 2026
CVE-2026-63959Not yet scoredusb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT
Assigned by Linux
Jul 19, 2026
CVE-2026-63960Not yet scoredusb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()
Assigned by Linux
Jul 19, 2026
CVE-2026-63961Not yet scoredusb: typec: altmodes/displayport: validate count before reading Status Update VDO
Assigned by Linux
Jul 19, 2026
CVE-2026-63962Not yet scoredusb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()
Assigned by Linux
Jul 19, 2026
CVE-2026-63963Not yet scoredusb: typec: tcpm: validate VDO count in Discover Identity ACK handlers
Assigned by Linux
Jul 19, 2026
CVE-2026-63964Not yet scoredusb: typec: ucsi: ccg: reject firmware images without a ':' record header
Assigned by Linux
Jul 19, 2026
CVE-2026-63965Not yet scorediio: pressure: bmp280: fix stack leak in bmp580 trigger handler
Assigned by Linux
Jul 19, 2026
CVE-2026-63966Not yet scorediio: imu: adis16550: fix stack leak in trigger handler
Assigned by Linux
Jul 19, 2026
CVE-2026-63967Not yet scorediio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
Assigned by Linux
Jul 19, 2026
CVE-2026-63968High 7.5ipv6: fix possible infinite loop in fib6_select_path()
Assigned by Linux
Jul 19, 2026
CVE-2026-63969Not yet scoredipv6: fix possible infinite loop in rt6_fill_node()
Assigned by Linux
Jul 19, 2026
CVE-2026-63970High 7.8vsock/virtio: bind uarg before filling zerocopy skb
Assigned by Linux
Jul 19, 2026
CVE-2026-63971High 7.8sctp: fix race between sctp_wait_for_connect and peeloff
Assigned by Linux
Jul 19, 2026
CVE-2026-63972High 7.5net: mana: Skip redundant detach on already-detached port
Assigned by Linux
Jul 19, 2026
CVE-2026-63973Medium 5.5net: mana: Add NULL guards in teardown path to prevent panic on attach failure
Assigned by Linux
Jul 19, 2026
CVE-2026-63974High 8.8Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
Assigned by Linux
Jul 19, 2026
CVE-2026-63975High 8.8Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
Assigned by Linux
Jul 19, 2026
CVE-2026-63976High 8.8Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
Assigned by Linux
Jul 19, 2026
CVE-2026-63977High 7.8dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work
Assigned by Linux
Jul 19, 2026
CVE-2026-63978Critical 9.8net/handshake: Drain pending requests at net namespace exit
Assigned by Linux
Jul 19, 2026
CVE-2026-63979Critical 9.8net/handshake: hand off the pinned file reference to accept_doit
Assigned by Linux
Jul 19, 2026
CVE-2026-63980High 7.5net/handshake: Use spin_lock_bh for hn_lock
Assigned by Linux
Jul 19, 2026
CVE-2026-63981Not yet scorednet/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow
Assigned by Linux
Jul 19, 2026
CVE-2026-63982Not yet scorednet/sched: Fix ethx:ingress -> ethy:egress -> ethx:ingress mirred loop
Assigned by Linux
Jul 19, 2026
CVE-2026-63983Not yet scorednet/sched: fix packet loop on netem when duplicate is on
Assigned by Linux
Jul 19, 2026
CVE-2026-63984Critical 9.8ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
Assigned by Linux
Jul 19, 2026
CVE-2026-63985High 7.8ethtool: eeprom: add more safeties to EEPROM Netlink fallback
Assigned by Linux
Jul 19, 2026
CVE-2026-63986Medium 5.5ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure
Assigned by Linux
Jul 19, 2026
CVE-2026-63987High 7.8ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES
Assigned by Linux
Jul 19, 2026
CVE-2026-63988Medium 5.5bridge: Fix sleep in atomic context in sysfs path
Assigned by Linux
Jul 19, 2026
CVE-2026-63989Medium 5.5bridge: Fix sleep in atomic context in netlink path
Assigned by Linux
Jul 19, 2026
PreviousPage 66 of 167Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.