CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,544 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,544
Show in the list
Critical, last 7 days
305
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,964 CVEs, showing 4451 to 4500PreviousPage 90 of 180Next
CVESeverityTitlePublished
CVE-2026-64509Not yet scoredrust: block: fix GenDisk cleanup paths
Assigned by Linux
Jul 25, 2026
CVE-2026-64510High 7.0ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Assigned by Linux
Jul 25, 2026
CVE-2026-64511Not yet scoredACPI: NFIT: core: Fix possible NULL pointer dereference
Assigned by Linux
Jul 25, 2026
CVE-2026-64512Not yet scoredACPI: CPPC: Suppress UBSAN warning caused by field misuse
Assigned by Linux
Jul 25, 2026
CVE-2026-64513Not yet scoredKVM: x86: Unconditionally recompute CR8 intercept on PPR update
Assigned by Linux
Jul 25, 2026
CVE-2026-64514Not yet scoreduserfaultfd: gate must_wait writability check on pte_present()
Assigned by Linux
Jul 25, 2026
CVE-2026-64515High 8.3wifi: mac80211: fix MLE defragmentation
Assigned by Linux
Jul 25, 2026
CVE-2026-64516High 8.8drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
Assigned by Linux
Jul 25, 2026
CVE-2026-64517Not yet scoreddrm/xe/gsc: Fix double-free of managed BO in error path
Assigned by Linux
Jul 25, 2026
CVE-2026-64518Not yet scoredtcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().
Assigned by Linux
Jul 25, 2026
CVE-2026-64519Not yet scoredNFSD: Fix infinite loop in layout state revocation
Assigned by Linux
Jul 25, 2026
CVE-2026-64520High 8.4firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
Assigned by Linux
Jul 25, 2026
CVE-2026-64521Not yet scoredpinctrl: meson: amlogic-a4: fix deadlock issue
Assigned by Linux
Jul 25, 2026
CVE-2026-64522High 8.8net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
Assigned by Linux
Jul 25, 2026
CVE-2026-64523Critical 9.8net/handshake: Take a long-lived file reference at submit
Assigned by Linux
Jul 25, 2026
CVE-2026-64524High 7.7drm/hyperv: validate resolution_count and fix WIN8 fallback
Assigned by Linux
Jul 25, 2026
CVE-2026-64525Not yet scoredxfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
Assigned by Linux
Jul 25, 2026
CVE-2026-64526Not yet scoredethtool: tsconfig: fix missing ethnl_ops_complete()
Assigned by Linux
Jul 25, 2026
CVE-2026-64527Not yet scoreddrm/hyperv: validate VMBus packet size in receive callback
Assigned by Linux
Jul 25, 2026
CVE-2026-64528Not yet scoredtty: serial: samsung: Remove redundant port lock acquisition in rx helpers
Assigned by Linux
Jul 25, 2026
CVE-2026-64529High 7.8crypto: qat - remove unused character device and IOCTLs
Assigned by Linux
Jul 25, 2026
CVE-2026-64530Critical 9.8net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Assigned by Linux
Jul 26, 2026
CVE-2024-14040High 7.8net: nexthop: Increase weight to u16
Assigned by Linux
Jul 26, 2026
CVE-2026-64531High 7.8net: openvswitch: reject oversized nested action attrs
Assigned by Linux
Jul 27, 2026
CVE-2026-64532High 7.8fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
Assigned by Linux
Jul 27, 2026
CVE-2026-64533High 7.8fs/ntfs3: validate lcns_follow in log_replay conversion
Assigned by Linux
Jul 27, 2026
CVE-2026-64534Critical 9.8nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
Assigned by Linux
Jul 27, 2026
CVE-2026-64535Critical 9.8nvmet-tcp: Fix potential UAF when ddgst mismatch
Assigned by Linux
Jul 27, 2026
CVE-2026-64536High 8.1staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Assigned by Linux
Jul 27, 2026
CVE-2026-17523High 7.8can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
Assigned by redhat
Jul 27, 2026
CVE-2026-64537Not yet scoredbridge: cfm: reject invalid CCM interval at configuration time
Assigned by Linux
Jul 27, 2026
CVE-2026-64538Not yet scoredipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
Assigned by Linux
Jul 27, 2026
CVE-2026-64539High 7.8Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
Assigned by Linux
Jul 27, 2026
CVE-2026-64540High 8.1usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
Assigned by Linux
Jul 27, 2026
CVE-2026-64541Critical 9.8net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
Assigned by Linux
Jul 27, 2026
CVE-2026-64542Not yet scoredipv6: ndisc: fix NULL deref in accept_untracked_na()
Assigned by Linux
Jul 27, 2026
CVE-2026-64543High 7.8tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
Assigned by Linux
Jul 27, 2026
CVE-2026-64544Not yet scoredcrypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
Assigned by Linux
Jul 27, 2026
CVE-2026-64545High 7.5net, bpf: check master for NULL in xdp_master_redirect()
Assigned by Linux
Jul 27, 2026
CVE-2026-64546High 7.1drm/edid: fix OOB read in drm_parse_tiled_block()
Assigned by Linux
Jul 27, 2026
CVE-2026-64547High 8.1net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Assigned by Linux
Jul 27, 2026
CVE-2026-64548High 8.4bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
Assigned by Linux
Jul 27, 2026
CVE-2026-64549Not yet scoredBluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
Assigned by Linux
Jul 27, 2026
CVE-2026-64550High 7.3net: qualcomm: rmnet: validate MAP frame length before ingress parsing
Assigned by Linux
Jul 27, 2026
CVE-2026-64551Critical 9.1sctp: validate STALE_COOKIE cause length before reading staleness
Assigned by Linux
Jul 27, 2026
CVE-2026-64552High 8.4virtio-net: fix len check in receive_big()
Assigned by Linux
Jul 27, 2026
CVE-2026-64553Not yet scorednet: psample: fix info leak in PSAMPLE_ATTR_DATA
Assigned by Linux
Jul 27, 2026
CVE-2026-64554High 8.8netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
Assigned by Linux
Jul 27, 2026
CVE-2026-64555High 8.8KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()
Assigned by Linux
Jul 27, 2026
CVE-2026-64556High 7.8perf/core: Detach event groups during remove_on_exec
Assigned by Linux
Jul 29, 2026
PreviousPage 90 of 180Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.