CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,578 CVEs published, 313 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,578
Show in the list
Critical, last 7 days
313
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,628 CVEs, showing 3501 to 3550PreviousPage 71 of 173Next
CVESeverityTitlePublished
CVE-2026-63883High 7.3serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ
Assigned by Linux
Jul 19, 2026
CVE-2026-63884High 7.8drm/i915: Fix potential UAF in TTM object purge
Assigned by Linux
Jul 19, 2026
CVE-2026-63885High 8.8drm/gem: fix race between change_handle and handle_delete
Assigned by Linux
Jul 19, 2026
CVE-2026-63886Critical 9.8scsi: target: iscsi: Validate CHAP_R length before base64 decode
Assigned by Linux
Jul 19, 2026
CVE-2026-63887Critical 9.8scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
Assigned by Linux
Jul 19, 2026
CVE-2026-63888Critical 9.8scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
Assigned by Linux
Jul 19, 2026
CVE-2026-63889High 8.1scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
Assigned by Linux
Jul 19, 2026
CVE-2026-63890Not yet scoredscsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker
Assigned by Linux
Jul 19, 2026
CVE-2026-63891Not yet scoredthunderbolt: property: Cap recursion depth in __tb_property_parse_dir()
Assigned by Linux
Jul 19, 2026
CVE-2026-63892Not yet scoredthunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
Assigned by Linux
Jul 19, 2026
CVE-2026-63893High 8.1thunderbolt: property: Reject u32 wrap in tb_property_entry_valid()
Assigned by Linux
Jul 19, 2026
CVE-2026-63894High 7.8usb: gadget: f_fs: serialize DMABUF cancel against request completion
Assigned by Linux
Jul 19, 2026
CVE-2026-63895Not yet scoredusb: gadget: f_fs: copy only received bytes on short ep0 read
Assigned by Linux
Jul 19, 2026
CVE-2026-63896Not yet scoredusb: gadget: composite: fix integer underflow in WebUSB GET_URL handling
Assigned by Linux
Jul 19, 2026
CVE-2026-63897Not yet scoredUSB: serial: mct_u232: fix missing interrupt-in transfer sanity check
Assigned by Linux
Jul 19, 2026
CVE-2026-63898Not yet scoredUSB: serial: mct_u232: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63899Not yet scoredUSB: serial: mxuport: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63900Not yet scoredUSB: serial: keyspan: fix missing indat transfer sanity check
Assigned by Linux
Jul 19, 2026
CVE-2026-63901Not yet scoredUSB: serial: digi_acceleport: fix memory corruption with small endpoints
Assigned by Linux
Jul 19, 2026
CVE-2026-63902Not yet scoredUSB: serial: cypress_m8: validate interrupt packet headers
Assigned by Linux
Jul 19, 2026
CVE-2026-63903Not yet scoredUSB: serial: belkin_sa: validate interrupt status length
Assigned by Linux
Jul 19, 2026
CVE-2026-63904Not yet scoredusb: usbtmc: check URB actual_length for interrupt-IN notifications
Assigned by Linux
Jul 19, 2026
CVE-2026-63905Not yet scoredusbip: vudc: Fix use after free bug in vudc_remove due to race condition
Assigned by Linux
Jul 19, 2026
CVE-2026-63906High 8.4usb: musb: omap2430: Fix use-after-free in omap2430_probe()
Assigned by Linux
Jul 19, 2026
CVE-2026-63907Not yet scoreduio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory
Assigned by Linux
Jul 19, 2026
CVE-2026-63908Not yet scoredInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
Assigned by Linux
Jul 19, 2026
CVE-2026-63909High 8.1ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops
Assigned by Linux
Jul 19, 2026
CVE-2026-63910High 7.8dma-buf: fix UAF in dma_buf_fd() tracepoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63911High 7.8xfrm: iptfs: reset runtime state when cloning SAs
Assigned by Linux
Jul 19, 2026
CVE-2026-63912Critical 9.8xfrm: esp: restore combined single-frag length gate
Assigned by Linux
Jul 19, 2026
CVE-2026-63913High 8.2netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check
Assigned by Linux
Jul 19, 2026
CVE-2026-63914High 7.3xfrm: route MIGRATE notifications to caller's netns
Assigned by Linux
Jul 19, 2026
CVE-2026-63915High 8.8nfc: hci: fix out-of-bounds read in HCP header parsing
Assigned by Linux
Jul 19, 2026
CVE-2026-63916High 8.8HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
Assigned by Linux
Jul 19, 2026
CVE-2026-63917High 8.8ip6: vti: Use ip6_tnl.net in vti6_changelink().
Assigned by Linux
Jul 19, 2026
CVE-2026-63918High 7.8l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
Assigned by Linux
Jul 19, 2026
CVE-2026-63919High 8.8xfrm: input: hold netns during deferred transport reinjection
Assigned by Linux
Jul 19, 2026
CVE-2026-63920High 7.1ipv6: validate extension header length before copying to cmsg
Assigned by Linux
Jul 19, 2026
CVE-2026-63921High 8.8ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().
Assigned by Linux
Jul 19, 2026
CVE-2026-63922Critical 9.8ipv6: exthdrs: refresh nh after handling HAO option
Assigned by Linux
Jul 19, 2026
CVE-2026-63923High 8.8octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
Assigned by Linux
Jul 19, 2026
CVE-2026-63924Critical 9.8ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
Assigned by Linux
Jul 19, 2026
CVE-2026-63925High 8.1macsec: fix replay protection at XPN lower-PN wrap
Assigned by Linux
Jul 19, 2026
CVE-2026-63926High 8.4bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
Assigned by Linux
Jul 19, 2026
CVE-2026-63927High 7.8usb: dwc2: Fix use after free in debug code
Assigned by Linux
Jul 19, 2026
CVE-2026-63928Not yet scoredUSB: serial: omninet: fix memory corruption with small endpoint
Assigned by Linux
Jul 19, 2026
CVE-2026-63929Not yet scorediio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
Assigned by Linux
Jul 19, 2026
CVE-2026-63930High 7.8iio: buffer: hw-consumer: fix use-after-free in error path
Assigned by Linux
Jul 19, 2026
CVE-2026-63931Not yet scorediio: chemical: scd30: fix division by zero in write_raw
Assigned by Linux
Jul 19, 2026
CVE-2026-63932Not yet scorediio: chemical: mhz19b: reject oversized serial replies
Assigned by Linux
Jul 19, 2026
PreviousPage 71 of 173Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.