CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,613 CVEs published, 312 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,613
Show in the list
Critical, last 7 days
312
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,851 CVEs, showing 4201 to 4250PreviousPage 85 of 178Next
CVESeverityTitlePublished
CVE-2026-64372High 7.8cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
Assigned by Linux
Jul 25, 2026
CVE-2026-64373Medium 4.7cpufreq: Fix hotplug-suspend race during reboot
Assigned by Linux
Jul 25, 2026
CVE-2026-64374High 7.5sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Assigned by Linux
Jul 25, 2026
CVE-2026-64375High 7.8proc: protect ptrace_may_access() with exec_update_lock (FD links)
Assigned by Linux
Jul 25, 2026
CVE-2026-64376Medium 5.5firmware_loader: fix device reference leak in firmware_upload_register()
Assigned by Linux
Jul 25, 2026
CVE-2026-64377High 7.8cpufreq: qcom-cpufreq-hw: Fix possible double free
Assigned by Linux
Jul 25, 2026
CVE-2026-64378High 7.8writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
Assigned by Linux
Jul 25, 2026
CVE-2026-64379High 7.1smb: client: mask server-provided mode to 07777 in modefromsid
Assigned by Linux
Jul 25, 2026
CVE-2026-64380High 8.2smb: client: harden POSIX SID length parsing
Assigned by Linux
Jul 25, 2026
CVE-2026-64381High 7.8smb: client: Fix next buffer leak in receive_encrypted_standard()
Assigned by Linux
Jul 25, 2026
CVE-2026-64382High 8.8smb: client: fix double-free in SMB2_open() replay
Assigned by Linux
Jul 25, 2026
CVE-2026-64383Critical 9.8smb: client: fix double-free in SMB2_flush() replay
Assigned by Linux
Jul 25, 2026
CVE-2026-64384Critical 9.8smb: client: fix change notify replay double-free
Assigned by Linux
Jul 25, 2026
CVE-2026-64385Critical 9.8smb: client: fix double-free in SMB2_ioctl() replay
Assigned by Linux
Jul 25, 2026
CVE-2026-64386Critical 9.8smb: client: fix query_info() replay double-free
Assigned by Linux
Jul 25, 2026
CVE-2026-64387Critical 9.8smb: client: fix query directory replay double-free
Assigned by Linux
Jul 25, 2026
CVE-2026-64388High 7.8smb/client: fix chown/chgrp with SMB3 POSIX Extensions
Assigned by Linux
Jul 25, 2026
CVE-2026-64389High 8.2ksmbd: validate NTLMv2 response before updating session key
Assigned by Linux
Jul 25, 2026
CVE-2026-64390High 8.8ksmbd: track the connection owning a byte-range lock
Assigned by Linux
Jul 25, 2026
CVE-2026-64391Critical 9.8ksmbd: use opener credentials for ADS I/O
Assigned by Linux
Jul 25, 2026
CVE-2026-64392Critical 9.1ksmbd: use opener credentials for delete-on-close
Assigned by Linux
Jul 25, 2026
CVE-2026-64393Critical 9.1ksmbd: run set info with opener credentials
Assigned by Linux
Jul 25, 2026
CVE-2026-64394High 8.8ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
Assigned by Linux
Jul 25, 2026
CVE-2026-64395High 7.5ksmbd: require source read access for duplicate extents
Assigned by Linux
Jul 25, 2026
CVE-2026-64396High 8.8ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
Assigned by Linux
Jul 25, 2026
CVE-2026-64397Critical 9.8ksmbd: serialize QUERY_DIRECTORY requests per file
Assigned by Linux
Jul 25, 2026
CVE-2026-64398High 8.1ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
Assigned by Linux
Jul 25, 2026
CVE-2026-64399Critical 9.8ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
Assigned by Linux
Jul 25, 2026
CVE-2026-64400High 8.6ksmbd: prevent path traversal bypass by restricting caseless retry
Assigned by Linux
Jul 25, 2026
CVE-2026-64401High 7.8smb: client: resolve SWN tcon from live registrations
Assigned by Linux
Jul 25, 2026
CVE-2026-64402High 7.8coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
Assigned by Linux
Jul 25, 2026
CVE-2026-64403High 7.1Bluetooth: L2CAP: validate option length before reading conf opt value
Assigned by Linux
Jul 25, 2026
CVE-2026-64404Medium 5.5Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
Assigned by Linux
Jul 25, 2026
CVE-2026-64405Medium 5.5Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
Assigned by Linux
Jul 25, 2026
CVE-2026-64406High 8.0Bluetooth: fix UAF in bt_accept_dequeue()
Assigned by Linux
Jul 25, 2026
CVE-2026-64407High 7.1Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()
Assigned by Linux
Jul 25, 2026
CVE-2026-64408High 8.8Bluetooth: bnep: pin L2CAP connection during netdev registration
Assigned by Linux
Jul 25, 2026
CVE-2026-64409Medium 5.5Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
Assigned by Linux
Jul 25, 2026
CVE-2026-64410Critical 9.8netfilter: flowtable: IPIP tunnel hardware offload is not yet support
Assigned by Linux
Jul 25, 2026
CVE-2026-64411High 7.1netfilter: ebtables: terminate table name before find_table_lock()
Assigned by Linux
Jul 25, 2026
CVE-2026-64412High 7.1netfilter: ebtables: module names must be null-terminated
Assigned by Linux
Jul 25, 2026
CVE-2026-64413High 7.0netfilter: ebtables: zero chainstack array
Assigned by Linux
Jul 25, 2026
CVE-2026-64414High 7.5netfilter: handle unreadable frags
Assigned by Linux
Jul 25, 2026
CVE-2026-64415Medium 5.5mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup
Assigned by Linux
Jul 25, 2026
CVE-2026-64416Medium 5.5mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
Assigned by Linux
Jul 25, 2026
CVE-2026-64417Medium 5.5mm: shrinker: fix NULL pointer dereference in debugfs
Assigned by Linux
Jul 25, 2026
CVE-2026-64418High 7.8mm: shrinker: fix shrinker_info teardown race with expansion
Assigned by Linux
Jul 25, 2026
CVE-2026-64419Medium 5.5mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
Assigned by Linux
Jul 25, 2026
CVE-2026-64420High 7.0mfd: cros_ec: Delay dev_set_drvdata() until probe success
Assigned by Linux
Jul 25, 2026
CVE-2026-64421High 7.8media: nxp: imx8-isi: Fix use-after-free on remove
Assigned by Linux
Jul 25, 2026
PreviousPage 85 of 178Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.