CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,613 CVEs published, 307 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,613
Show in the list
Critical, last 7 days
307
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,904 CVEs, showing 4401 to 4450PreviousPage 89 of 179Next
CVESeverityTitlePublished
CVE-2026-64519Not yet scoredNFSD: Fix infinite loop in layout state revocation
Assigned by Linux
Jul 25, 2026
CVE-2026-64520High 8.4firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
Assigned by Linux
Jul 25, 2026
CVE-2026-64521Not yet scoredpinctrl: meson: amlogic-a4: fix deadlock issue
Assigned by Linux
Jul 25, 2026
CVE-2026-64522High 8.8net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
Assigned by Linux
Jul 25, 2026
CVE-2026-64523Critical 9.8net/handshake: Take a long-lived file reference at submit
Assigned by Linux
Jul 25, 2026
CVE-2026-64524High 7.7drm/hyperv: validate resolution_count and fix WIN8 fallback
Assigned by Linux
Jul 25, 2026
CVE-2026-64525Not yet scoredxfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
Assigned by Linux
Jul 25, 2026
CVE-2026-64526Not yet scoredethtool: tsconfig: fix missing ethnl_ops_complete()
Assigned by Linux
Jul 25, 2026
CVE-2026-64527Not yet scoreddrm/hyperv: validate VMBus packet size in receive callback
Assigned by Linux
Jul 25, 2026
CVE-2026-64528Not yet scoredtty: serial: samsung: Remove redundant port lock acquisition in rx helpers
Assigned by Linux
Jul 25, 2026
CVE-2026-64529High 7.8crypto: qat - remove unused character device and IOCTLs
Assigned by Linux
Jul 25, 2026
CVE-2026-64530Critical 9.8net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Assigned by Linux
Jul 26, 2026
CVE-2024-14040High 7.8net: nexthop: Increase weight to u16
Assigned by Linux
Jul 26, 2026
CVE-2026-64531High 7.8net: openvswitch: reject oversized nested action attrs
Assigned by Linux
Jul 27, 2026
CVE-2026-64532High 7.8fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
Assigned by Linux
Jul 27, 2026
CVE-2026-64533High 7.8fs/ntfs3: validate lcns_follow in log_replay conversion
Assigned by Linux
Jul 27, 2026
CVE-2026-64534Critical 9.8nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
Assigned by Linux
Jul 27, 2026
CVE-2026-64535Critical 9.8nvmet-tcp: Fix potential UAF when ddgst mismatch
Assigned by Linux
Jul 27, 2026
CVE-2026-64536High 8.1staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Assigned by Linux
Jul 27, 2026
CVE-2026-17523High 7.8can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
Assigned by redhat
Jul 27, 2026
CVE-2026-64537Not yet scoredbridge: cfm: reject invalid CCM interval at configuration time
Assigned by Linux
Jul 27, 2026
CVE-2026-64538Not yet scoredipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
Assigned by Linux
Jul 27, 2026
CVE-2026-64539High 7.8Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
Assigned by Linux
Jul 27, 2026
CVE-2026-64540High 8.1usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
Assigned by Linux
Jul 27, 2026
CVE-2026-64541Critical 9.8net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
Assigned by Linux
Jul 27, 2026
CVE-2026-64542Not yet scoredipv6: ndisc: fix NULL deref in accept_untracked_na()
Assigned by Linux
Jul 27, 2026
CVE-2026-64543High 7.8tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
Assigned by Linux
Jul 27, 2026
CVE-2026-64544Not yet scoredcrypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
Assigned by Linux
Jul 27, 2026
CVE-2026-64545High 7.5net, bpf: check master for NULL in xdp_master_redirect()
Assigned by Linux
Jul 27, 2026
CVE-2026-64546High 7.1drm/edid: fix OOB read in drm_parse_tiled_block()
Assigned by Linux
Jul 27, 2026
CVE-2026-64547High 8.1net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Assigned by Linux
Jul 27, 2026
CVE-2026-64548High 8.4bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
Assigned by Linux
Jul 27, 2026
CVE-2026-64549Not yet scoredBluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
Assigned by Linux
Jul 27, 2026
CVE-2026-64550High 7.3net: qualcomm: rmnet: validate MAP frame length before ingress parsing
Assigned by Linux
Jul 27, 2026
CVE-2026-64551Critical 9.1sctp: validate STALE_COOKIE cause length before reading staleness
Assigned by Linux
Jul 27, 2026
CVE-2026-64552High 8.4virtio-net: fix len check in receive_big()
Assigned by Linux
Jul 27, 2026
CVE-2026-64553Not yet scorednet: psample: fix info leak in PSAMPLE_ATTR_DATA
Assigned by Linux
Jul 27, 2026
CVE-2026-64554High 8.8netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
Assigned by Linux
Jul 27, 2026
CVE-2026-64555High 8.8KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()
Assigned by Linux
Jul 27, 2026
CVE-2026-64556High 7.8perf/core: Detach event groups during remove_on_exec
Assigned by Linux
Jul 29, 2026
CVE-2026-64557High 8.8Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
Assigned by Linux
Jul 29, 2026
CVE-2026-64558High 7.8s390/pkey: Check length in pkey_pckmo handler implementation
Assigned by Linux
Jul 29, 2026
CVE-2026-64559High 7.8s390/pkey: Check length in PKEY_VERIFYPROTK ioctl
Assigned by Linux
Jul 29, 2026
CVE-2026-64560High 7.8posix-cpu-timers: Prevent UAF caused by non-leader exec() race
Assigned by Linux
Jul 29, 2026
CVE-2022-4994Not yet scoredKVM: x86: wean fast IN from emulator_pio_in
Assigned by Linux
Jul 30, 2026
CVE-2026-64561High 8.8KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
Assigned by Linux
Aug 4, 2026
CVE-2026-64562High 8.8KVM: nVMX: Hide shadow VMCS right after VMCLEAR
Assigned by Linux
Aug 4, 2026
CVE-2026-64563High 7.8rhashtable: clear stale iter->p on table restart
Assigned by Linux
Aug 4, 2026
CVE-2026-64564Critical 9.8sctp: don't free the ASCONF's own transport in DEL-IP processing
Assigned by Linux
Aug 4, 2026
CVE-2026-64565Not yet scoredInput: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
Assigned by Linux
Aug 4, 2026
PreviousPage 89 of 179Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.