CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,586 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,586
Show in the list
Critical, last 7 days
305
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,892 CVEs, showing 4301 to 4350PreviousPage 87 of 178Next
CVESeverityTitlePublished
CVE-2026-64431High 7.8ntfs: avoid calling post_write_mst_fixup() for invalid index_block
Assigned by Linux
Jul 25, 2026
CVE-2026-64432High 7.8fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
Assigned by Linux
Jul 25, 2026
CVE-2026-64433High 7.8Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
Assigned by Linux
Jul 25, 2026
CVE-2026-64434High 8.8Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
Assigned by Linux
Jul 25, 2026
CVE-2026-64435High 8.2audit: Fix data races of skb_queue_len() readers on audit_queue
Assigned by Linux
Jul 25, 2026
CVE-2026-64436High 7.1net: af_key: initialize alg_key_len for IPComp states
Assigned by Linux
Jul 25, 2026
CVE-2026-64437High 8.8ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
Assigned by Linux
Jul 25, 2026
CVE-2026-64438High 8.8crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
Assigned by Linux
Jul 25, 2026
CVE-2026-64439Critical 9.8crypto: krb5 - filter out async aead implementations at alloc
Assigned by Linux
Jul 25, 2026
CVE-2026-64440High 8.1staging: rtl8723bs: fix OOB write in HT_caps_handler()
Assigned by Linux
Jul 25, 2026
CVE-2026-64441High 8.8staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
Assigned by Linux
Jul 25, 2026
CVE-2026-64442High 8.1staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
Assigned by Linux
Jul 25, 2026
CVE-2026-64443High 8.1staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
Assigned by Linux
Jul 25, 2026
CVE-2026-64444High 8.1staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
Assigned by Linux
Jul 25, 2026
CVE-2026-64445High 8.8staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
Assigned by Linux
Jul 25, 2026
CVE-2026-64446High 7.8staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
Assigned by Linux
Jul 25, 2026
CVE-2026-64447High 7.8staging: media: ipu7: fix double-free and use-after-free in error paths
Assigned by Linux
Jul 25, 2026
CVE-2026-64448High 8.2smb: client: restrict implied bcc[0] exemption to responses without data area
Assigned by Linux
Jul 25, 2026
CVE-2026-64449High 7.8staging: vme_user: bound slave read/write to the kern_buf size
Assigned by Linux
Jul 25, 2026
CVE-2026-64450Critical 9.1tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Assigned by Linux
Jul 25, 2026
CVE-2026-64451Medium 5.5tracing: Fix NULL pointer dereference in func_set_flag()
Assigned by Linux
Jul 25, 2026
CVE-2026-64452High 7.16lowpan: fix NHC entry use-after-free on error path
Assigned by Linux
Jul 25, 2026
CVE-2026-64453High 7.8usb: misc: usbio: fix disconnect UAF in client teardown
Assigned by Linux
Jul 25, 2026
CVE-2026-64454Not yet scoredusb: dwc3: run gadget disconnect from sleepable suspend context
Assigned by Linux
Jul 25, 2026
CVE-2026-64455Not yet scoredUSB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Assigned by Linux
Jul 25, 2026
CVE-2026-64456High 7.7hwrng: virtio: clamp device-reported used.len at copy_data()
Assigned by Linux
Jul 25, 2026
CVE-2026-64457Not yet scoredvirtio_pci: fix vq info pointer lookup via wrong index
Assigned by Linux
Jul 25, 2026
CVE-2026-64458Not yet scoredmm/damon/ops-common: handle extreme intervals in damon_hot_score()
Assigned by Linux
Jul 25, 2026
CVE-2026-64459Critical 9.8tcp: restore RCU grace period in tcp_ao_destroy_sock
Assigned by Linux
Jul 25, 2026
CVE-2026-64460High 7.0PCI/IOV: Skip VF Resizable BAR restore on read error
Assigned by Linux
Jul 25, 2026
CVE-2026-64461Not yet scoredPCI: mediatek: Fix IRQ domain leak when port fails to enable
Assigned by Linux
Jul 25, 2026
CVE-2026-64462Not yet scoredPCI: altera: Fix resource leaks on probe failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64463High 7.8usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
Assigned by Linux
Jul 25, 2026
CVE-2026-64464Not yet scoredxhci: sideband: fix ring sg table pages leak
Assigned by Linux
Jul 25, 2026
CVE-2026-64465Not yet scoredusb: xhci: Fix sleep in atomic context in xhci_free_streams()
Assigned by Linux
Jul 25, 2026
CVE-2026-64466Not yet scoredrust_binder: clear freeze listener on node removal
Assigned by Linux
Jul 25, 2026
CVE-2026-64467High 8.8rust_binder: use a u64 stride when cleaning up the offsets array
Assigned by Linux
Jul 25, 2026
CVE-2026-64468High 7.8binder: fix UAF in binder_free_transaction()
Assigned by Linux
Jul 25, 2026
CVE-2026-64469High 7.8binder: fix UAF in binder_thread_release()
Assigned by Linux
Jul 25, 2026
CVE-2026-64470Not yet scoredBluetooth: btusb: fix use-after-free on marvell probe failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64471Not yet scoredBluetooth: btusb: fix use-after-free on registration failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64472Not yet scoredvfio/mlx5: Fix racy bitfields and tighten struct layout
Assigned by Linux
Jul 25, 2026
CVE-2026-64473Not yet scoredvfio: Remove device debugfs before releasing devres
Assigned by Linux
Jul 25, 2026
CVE-2026-64474Not yet scoredvfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
Assigned by Linux
Jul 25, 2026
CVE-2026-64475High 8.8vfio/pci: Release the VGA arbiter client on register_device() failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64476Not yet scoredvfio/pci: Latch disable_idle_d3 per device
Assigned by Linux
Jul 25, 2026
CVE-2026-64477Not yet scoredx86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled
Assigned by Linux
Jul 25, 2026
CVE-2026-64478Not yet scoredALSA: usb-audio: avoid kobject path lookup in DualSense match
Assigned by Linux
Jul 25, 2026
CVE-2026-64479Not yet scoredALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
Assigned by Linux
Jul 25, 2026
CVE-2026-64480Not yet scoredALSA: ice1712: check snd_ctl_new1() return value
Assigned by Linux
Jul 25, 2026
PreviousPage 87 of 178Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.