CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,746 CVEs published, 330 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,746
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,321 CVEs, showing 3301 to 3350PreviousPage 67 of 167Next
CVESeverityTitlePublished
CVE-2026-63990Medium 5.5bonding: refuse to enslave CAN devices
Assigned by Linux
Jul 19, 2026
CVE-2026-63991Medium 5.5Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()
Assigned by Linux
Jul 19, 2026
CVE-2026-63992Critical 9.1tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()
Assigned by Linux
Jul 19, 2026
CVE-2026-63993Critical 9.8vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()
Assigned by Linux
Jul 19, 2026
CVE-2026-63994Critical 9.8tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
Assigned by Linux
Jul 19, 2026
CVE-2026-63995High 7.8ethtool: cmis: validate start_cmd_payload_size from module
Assigned by Linux
Jul 19, 2026
CVE-2026-63996High 7.8ethtool: cmis: require exact CDB reply length
Assigned by Linux
Jul 19, 2026
CVE-2026-63997Medium 5.5ethtool: module: avoid leaking a netdev ref on module flash errors
Assigned by Linux
Jul 19, 2026
CVE-2026-63998Medium 5.5ethtool: module: call ethnl_ops_complete() on module flash errors
Assigned by Linux
Jul 19, 2026
CVE-2026-63999Medium 5.5ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
Assigned by Linux
Jul 19, 2026
CVE-2026-64000Critical 9.8net: hsr: fix potential OOB access in supervision frame handling
Assigned by Linux
Jul 19, 2026
CVE-2026-64001High 7.8ALSA: pcm: oss: Fix setup list UAF on proc write error
Assigned by Linux
Jul 19, 2026
CVE-2026-64002High 7.8ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
Assigned by Linux
Jul 19, 2026
CVE-2026-64003High 7.5scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues
Assigned by Linux
Jul 19, 2026
CVE-2026-64004High 7.8net/iucv: fix locking in .getsockopt
Assigned by Linux
Jul 19, 2026
CVE-2026-64005High 7.8net/smc: Do not re-initialize smc hashtables
Assigned by Linux
Jul 19, 2026
CVE-2026-64006Medium 5.5netfilter: nf_tables: fix dst corruption in same register operation
Assigned by Linux
Jul 19, 2026
CVE-2026-64007Critical 9.8netfilter: synproxy: refresh tcphdr after skb_ensure_writable
Assigned by Linux
Jul 19, 2026
CVE-2026-64008High 7.8accel/rocket: fix UAF via dangling GEM handle in create_bo
Assigned by Linux
Jul 19, 2026
CVE-2026-64009High 7.8xfrm: Check for underflow in xfrm_state_mtu
Assigned by Linux
Jul 19, 2026
CVE-2026-64010High 8.8nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
Assigned by Linux
Jul 19, 2026
CVE-2026-64011High 7.8nfc: llcp: Fix use-after-free in llcp_sock_release()
Assigned by Linux
Jul 19, 2026
CVE-2026-64012Medium 5.5net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Assigned by Linux
Jul 19, 2026
CVE-2026-64013Medium 5.5ACPI: button: Fix ACPI GPE handler leak during removal
Assigned by Linux
Jul 19, 2026
CVE-2026-64014High 7.1Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size
Assigned by Linux
Jul 19, 2026
CVE-2026-64015High 7.8security/keys: fix missed RCU read section on lookup
Assigned by Linux
Jul 19, 2026
CVE-2026-64016Critical 9.8ksmbd: fix durable reconnect error path file lifetime
Assigned by Linux
Jul 19, 2026
CVE-2026-64017High 7.8blk-mq: pop cached request if it is usable
Assigned by Linux
Jul 19, 2026
CVE-2026-64018Critical 9.3net: mana: validate rx_req_idx to prevent out-of-bounds array access
Assigned by Linux
Jul 19, 2026
CVE-2026-64019Medium 5.5nvme-pci: fix dma mapping leak on data setup error
Assigned by Linux
Jul 19, 2026
CVE-2026-64020High 7.5nvme-pci: fix dma_vecs leak on p2p memory
Assigned by Linux
Jul 19, 2026
CVE-2026-64021Medium 5.5drm/xe/oa: Fix exec_queue leak on width check in stream open
Assigned by Linux
Jul 19, 2026
CVE-2026-64022Medium 5.5gpio: aggregator: remove the software node when deactivating the aggregator
Assigned by Linux
Jul 19, 2026
CVE-2026-64023High 7.8gpio: aggregator: fix a potential use-after-free
Assigned by Linux
Jul 19, 2026
CVE-2026-64024Critical 9.4tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
Assigned by Linux
Jul 19, 2026
CVE-2026-64025Critical 9.8bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
Assigned by Linux
Jul 19, 2026
CVE-2026-64026High 7.8rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg
Assigned by Linux
Jul 19, 2026
CVE-2026-64027High 7.8net: shaper: rework the VALID marking (again)
Assigned by Linux
Jul 19, 2026
CVE-2026-64028Medium 5.5tracing: Avoid NULL return from hist_field_name() on truncation
Assigned by Linux
Jul 19, 2026
CVE-2026-64029High 7.8ALSA: seq: Serialize UMP output teardown with event_input
Assigned by Linux
Jul 19, 2026
CVE-2026-64030High 8.8wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
Assigned by Linux
Jul 19, 2026
CVE-2026-64031High 7.8erofs: fix managed cache race for unaligned extents
Assigned by Linux
Jul 19, 2026
CVE-2026-64032High 7.8bridge: mcast: Fix a possible use-after-free when removing a bridge port
Assigned by Linux
Jul 19, 2026
CVE-2026-64033Critical 9.8RDMA/rtrs: Fix use-after-free in path file creation cleanup
Assigned by Linux
Jul 19, 2026
CVE-2026-64034Critical 9.3net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
Assigned by Linux
Jul 19, 2026
CVE-2026-64035Critical 9.8igc: set tx buffer type for SMD frames
Assigned by Linux
Jul 19, 2026
CVE-2026-64036High 7.8cgroup/rstat: validate cpu before css_rstat_cpu() access
Assigned by Linux
Jul 19, 2026
CVE-2026-64037Critical 9.8wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled
Assigned by Linux
Jul 19, 2026
CVE-2026-64038Medium 4.7hwmon: (lm90) Stop work before releasing hwmon device
Assigned by Linux
Jul 19, 2026
CVE-2026-64039High 7.7drm/msm/snapshot: fix dumping of the unaligned regions
Assigned by Linux
Jul 19, 2026
PreviousPage 67 of 167Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.