CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,627 CVEs published, 315 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,627
Show in the list
Critical, last 7 days
315
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,851 CVEs, showing 4101 to 4150PreviousPage 83 of 178Next
CVESeverityTitlePublished
CVE-2026-64272High 7.8Input: mms114 - fix touch indexing for MMS134S and MMS136
Assigned by Linux
Jul 25, 2026
CVE-2026-64273High 7.8Input: iforce - bound the device-reported force-feedback effect index
Assigned by Linux
Jul 25, 2026
CVE-2026-64274High 7.8Input: goodix - clamp the device-reported contact count
Assigned by Linux
Jul 25, 2026
CVE-2026-64275Medium 5.5Input: elan_i2c - prevent division by zero and arithmetic underflow
Assigned by Linux
Jul 25, 2026
CVE-2026-64276High 7.8Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Assigned by Linux
Jul 25, 2026
CVE-2026-64277High 7.8Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Assigned by Linux
Jul 25, 2026
CVE-2026-64278Medium 5.5i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
Assigned by Linux
Jul 25, 2026
CVE-2026-64279High 7.8i2c: core: fix adapter deregistration race
Assigned by Linux
Jul 25, 2026
CVE-2026-64280High 8.8fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
Assigned by Linux
Jul 25, 2026
CVE-2026-64281High 7.5svcrdma: wake sq waiters when the transport closes
Assigned by Linux
Jul 25, 2026
CVE-2026-64282Medium 4.7KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier
Assigned by Linux
Jul 25, 2026
CVE-2026-64283High 7.0KVM: guest_memfd: Treat memslot binding offset+size as unsigned values
Assigned by Linux
Jul 25, 2026
CVE-2026-64284High 7.1KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits
Assigned by Linux
Jul 25, 2026
CVE-2026-64285Medium 5.5KVM: SEV: Pin source page for write when adding CPUID data for SNP guest
Assigned by Linux
Jul 25, 2026
CVE-2026-64286High 8.2KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU
Assigned by Linux
Jul 25, 2026
CVE-2026-64287High 8.2KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
Assigned by Linux
Jul 25, 2026
CVE-2026-64288Medium 5.5KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
Assigned by Linux
Jul 25, 2026
CVE-2026-64289Medium 5.5iommufd: Set upper bounds on cache invalidation entry_num and entry_len
Assigned by Linux
Jul 25, 2026
CVE-2026-64290Medium 5.5iommufd: Break the loop on failure in iommufd_fault_fops_read()
Assigned by Linux
Jul 25, 2026
CVE-2026-64291Medium 5.5iommufd: Set veventq_depth upper bound
Assigned by Linux
Jul 25, 2026
CVE-2026-64292Medium 5.5iommufd: Move vevent memory allocation outside spinlock
Assigned by Linux
Jul 25, 2026
CVE-2026-64293High 7.8iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
Assigned by Linux
Jul 25, 2026
CVE-2026-64294Medium 5.5mm: do file ownership checks with the proper mount idmap
Assigned by Linux
Jul 25, 2026
CVE-2026-64295Medium 5.5mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
Assigned by Linux
Jul 25, 2026
CVE-2026-64296High 7.8exfat: bound uniname advance in exfat_find_dir_entry()
Assigned by Linux
Jul 25, 2026
CVE-2026-64297Medium 5.5module: decompress: check return value of module_extend_max_pages()
Assigned by Linux
Jul 25, 2026
CVE-2026-64298High 7.1NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Assigned by Linux
Jul 25, 2026
CVE-2026-64299High 7.1tracing: Prevent out-of-bounds read in glob matching
Assigned by Linux
Jul 25, 2026
CVE-2026-64300High 7.8perf/aux: Fix page UAF in map_range()
Assigned by Linux
Jul 25, 2026
CVE-2026-64301Medium 5.5regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Assigned by Linux
Jul 25, 2026
CVE-2026-64302Medium 5.5x86/mm: Fix freeing of PMD-sized vmemmap pages
Assigned by Linux
Jul 25, 2026
CVE-2026-64303Critical 9.8spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Assigned by Linux
Jul 25, 2026
CVE-2026-64304High 7.8crypto: qat - validate RSA CRT component lengths
Assigned by Linux
Jul 25, 2026
CVE-2026-64305High 7.8crypto: qat - protect service table iterations with service_lock
Assigned by Linux
Jul 25, 2026
CVE-2026-64306Medium 5.5crypto: drbg - Fix returning success on failure in CTR_DRBG
Assigned by Linux
Jul 25, 2026
CVE-2026-64307Medium 5.5crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
Assigned by Linux
Jul 25, 2026
CVE-2026-64308Medium 5.5crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
Assigned by Linux
Jul 25, 2026
CVE-2026-64309Medium 5.5crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
Assigned by Linux
Jul 25, 2026
CVE-2026-64310Medium 5.5crypto: ccp - Do not initialize SNP for SEV ioctls
Assigned by Linux
Jul 25, 2026
CVE-2026-64311High 7.8crypto: loongson - Remove broken and unused loongson-rng
Assigned by Linux
Jul 25, 2026
CVE-2026-64312High 7.5crypto: pcrypt - restore callback for non-parallel fallback
Assigned by Linux
Jul 25, 2026
CVE-2026-64313High 8.8crypto: ecc - Fix carry overflow in vli multiplication
Assigned by Linux
Jul 25, 2026
CVE-2026-64314Medium 5.5crypto: chacha20poly1305 - validate poly1305 template argument
Assigned by Linux
Jul 25, 2026
CVE-2026-64315High 7.0crypto: caam - use print_hex_dump_devel to guard key hex dumps
Assigned by Linux
Jul 25, 2026
CVE-2026-64316Medium 5.5crypto: caam - use print_hex_dump_devel to guard key hex dumps
Assigned by Linux
Jul 25, 2026
CVE-2026-64317High 7.1isofs: bound Rock Ridge symlink components to the SL record
Assigned by Linux
Jul 25, 2026
CVE-2026-64318High 7.1partitions: aix: bound the pp_count scan to the ppe array
Assigned by Linux
Jul 25, 2026
CVE-2026-64319Critical 9.1nvmet-auth: validate reply message payload bounds against transfer length
Assigned by Linux
Jul 25, 2026
CVE-2026-64320Critical 9.1nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
Assigned by Linux
Jul 25, 2026
CVE-2026-64321Medium 5.5nvme: target: rdma: fix ndev refcount leak on queue connect
Assigned by Linux
Jul 25, 2026
PreviousPage 83 of 178Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.