CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,629 CVEs published, 315 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,629
Show in the list
Critical, last 7 days
315
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,851 CVEs, showing 4151 to 4200PreviousPage 84 of 178Next
CVESeverityTitlePublished
CVE-2026-64322High 7.8udf: validate sparing table length as an entry count, not a byte count
Assigned by Linux
Jul 25, 2026
CVE-2026-64323High 7.1udf: validate VAT header length against the VAT inode size
Assigned by Linux
Jul 25, 2026
CVE-2026-64324High 7.8udf: validate free block extents against the partition length
Assigned by Linux
Jul 25, 2026
CVE-2026-64325Medium 5.5wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon
Assigned by Linux
Jul 25, 2026
CVE-2026-64326Medium 5.5block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
Assigned by Linux
Jul 25, 2026
CVE-2026-64327Medium 5.5usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
Assigned by Linux
Jul 25, 2026
CVE-2026-64328Medium 5.5usb: gadget: f_fs: Fix DMA fence leak
Assigned by Linux
Jul 25, 2026
CVE-2026-64329High 7.8usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Assigned by Linux
Jul 25, 2026
CVE-2026-64330High 7.8usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Assigned by Linux
Jul 25, 2026
CVE-2026-64331Medium 5.5usbip: vudc: fix NULL deref in vep_dequeue()
Assigned by Linux
Jul 25, 2026
CVE-2026-64332Medium 5.5USB: ulpi: fix memory leak on registration failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64333High 7.8USB: serial: digi_acceleport: fix write buffer corruption
Assigned by Linux
Jul 25, 2026
CVE-2026-64334Medium 5.5USB: serial: digi_acceleport: fix hard lockup on disconnect
Assigned by Linux
Jul 25, 2026
CVE-2026-64335Medium 5.5USB: serial: digi_acceleport: fix broken rx after throttle
Assigned by Linux
Jul 25, 2026
CVE-2026-64336Medium 5.5USB: serial: keyspan_pda: fix information leak
Assigned by Linux
Jul 25, 2026
CVE-2026-64337Medium 5.5usb: mtu3: unmap request DMA on queue failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64338Medium 5.5USB: misc: uss720: unregister parport on probe failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64339High 7.1usb: misc: usbio: bound bulk IN response length to the received transfer
Assigned by Linux
Jul 25, 2026
CVE-2026-64340High 7.8USB: legousbtower: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64341High 7.8USB: iowarrior: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64342High 7.8USB: iowarrior: fix use-after-free on disconnect
Assigned by Linux
Jul 25, 2026
CVE-2026-64343High 7.8USB: ldusb: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64344High 7.8USB: idmouse: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64345Medium 5.5usb: gadget: f_printer: take kref only for successful open
Assigned by Linux
Jul 25, 2026
CVE-2026-64346High 7.8usb: gadget: udc: Fix use-after-free in gadget_match_driver
Assigned by Linux
Jul 25, 2026
CVE-2026-64347Medium 5.5usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
Assigned by Linux
Jul 25, 2026
CVE-2026-64348High 7.8usb: free iso schedules on failed submit
Assigned by Linux
Jul 25, 2026
CVE-2026-64349Medium 5.5usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()
Assigned by Linux
Jul 25, 2026
CVE-2026-64350Medium 5.5usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
Assigned by Linux
Jul 25, 2026
CVE-2026-64351Medium 5.5net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
Assigned by Linux
Jul 25, 2026
CVE-2026-64352High 7.8bpf: Allow LPM map access from sleepable BPF programs
Assigned by Linux
Jul 25, 2026
CVE-2026-64353Medium 5.5bpf: Keep dynamic inner array lookups nullable
Assigned by Linux
Jul 25, 2026
CVE-2026-64354High 7.8bpf: Validate BTF repeated field counts before expansion
Assigned by Linux
Jul 25, 2026
CVE-2026-64355Critical 9.8bpf: Reject fragmented frames in devmap
Assigned by Linux
Jul 25, 2026
CVE-2026-64356Medium 5.5xfs: fix memory leak in xfs_dqinode_metadir_create()
Assigned by Linux
Jul 25, 2026
CVE-2026-64357Medium 5.5xfs: fix exchmaps reservation limit check
Assigned by Linux
Jul 25, 2026
CVE-2026-64358Medium 5.5media: mtk-jpeg: cancel workqueue on release for supported platforms only
Assigned by Linux
Jul 25, 2026
CVE-2026-64359Medium 5.5nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
Assigned by Linux
Jul 25, 2026
CVE-2026-64360Medium 5.5hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
Assigned by Linux
Jul 25, 2026
CVE-2026-64361High 7.8hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
Assigned by Linux
Jul 25, 2026
CVE-2026-64362High 7.8HID: lg-g15: cancel pending work on remove to fix a use-after-free
Assigned by Linux
Jul 25, 2026
CVE-2026-64363High 7.8HID: appleir: fix UAF on pending key_up_timer in remove()
Assigned by Linux
Jul 25, 2026
CVE-2026-64364High 8.8HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Assigned by Linux
Jul 25, 2026
CVE-2026-64365High 7.8HID: letsketch: fix UAF on inrange_timer at driver unbind
Assigned by Linux
Jul 25, 2026
CVE-2026-64366High 8.8HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert
Assigned by Linux
Jul 25, 2026
CVE-2026-64367High 7.8HID: hid-goodix-spi: validate report size to prevent stack buffer overflow
Assigned by Linux
Jul 25, 2026
CVE-2026-64368High 8.1mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
Assigned by Linux
Jul 25, 2026
CVE-2026-64369Medium 5.5s390: Revert support for DCACHE_WORD_ACCESS
Assigned by Linux
Jul 25, 2026
CVE-2026-64370Medium 5.5posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
Assigned by Linux
Jul 25, 2026
CVE-2026-64371Medium 5.5proc: protect ptrace_may_access() with exec_update_lock (part 1)
Assigned by Linux
Jul 25, 2026
PreviousPage 84 of 178Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.