CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,565 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,565
Show in the list
Critical, last 7 days
305
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,653 CVEs, showing 4451 to 4500PreviousPage 90 of 94Next
CVESeverityTitlePublished
CVE-2026-64303Critical 9.8spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Assigned by Linux
Jul 25, 2026
CVE-2026-64304High 7.8crypto: qat - validate RSA CRT component lengths
Assigned by Linux
Jul 25, 2026
CVE-2026-64305High 7.8crypto: qat - protect service table iterations with service_lock
Assigned by Linux
Jul 25, 2026
CVE-2026-64306Medium 5.5crypto: drbg - Fix returning success on failure in CTR_DRBG
Assigned by Linux
Jul 25, 2026
CVE-2026-64307Medium 5.5crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
Assigned by Linux
Jul 25, 2026
CVE-2026-64308Medium 5.5crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
Assigned by Linux
Jul 25, 2026
CVE-2026-64309Medium 5.5crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
Assigned by Linux
Jul 25, 2026
CVE-2026-64310Medium 5.5crypto: ccp - Do not initialize SNP for SEV ioctls
Assigned by Linux
Jul 25, 2026
CVE-2026-64311High 7.8crypto: loongson - Remove broken and unused loongson-rng
Assigned by Linux
Jul 25, 2026
CVE-2026-64312High 7.5crypto: pcrypt - restore callback for non-parallel fallback
Assigned by Linux
Jul 25, 2026
CVE-2026-64313High 8.8crypto: ecc - Fix carry overflow in vli multiplication
Assigned by Linux
Jul 25, 2026
CVE-2026-64314Medium 5.5crypto: chacha20poly1305 - validate poly1305 template argument
Assigned by Linux
Jul 25, 2026
CVE-2026-64315High 7.0crypto: caam - use print_hex_dump_devel to guard key hex dumps
Assigned by Linux
Jul 25, 2026
CVE-2026-64316Medium 5.5crypto: caam - use print_hex_dump_devel to guard key hex dumps
Assigned by Linux
Jul 25, 2026
CVE-2026-64317High 7.1isofs: bound Rock Ridge symlink components to the SL record
Assigned by Linux
Jul 25, 2026
CVE-2026-64318High 7.1partitions: aix: bound the pp_count scan to the ppe array
Assigned by Linux
Jul 25, 2026
CVE-2026-64319Critical 9.1nvmet-auth: validate reply message payload bounds against transfer length
Assigned by Linux
Jul 25, 2026
CVE-2026-64320Critical 9.1nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
Assigned by Linux
Jul 25, 2026
CVE-2026-64321Medium 5.5nvme: target: rdma: fix ndev refcount leak on queue connect
Assigned by Linux
Jul 25, 2026
CVE-2026-64322High 7.8udf: validate sparing table length as an entry count, not a byte count
Assigned by Linux
Jul 25, 2026
CVE-2026-64323High 7.1udf: validate VAT header length against the VAT inode size
Assigned by Linux
Jul 25, 2026
CVE-2026-64324High 7.8udf: validate free block extents against the partition length
Assigned by Linux
Jul 25, 2026
CVE-2026-64325Medium 5.5wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon
Assigned by Linux
Jul 25, 2026
CVE-2026-64326Medium 5.5block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
Assigned by Linux
Jul 25, 2026
CVE-2026-64327Medium 5.5usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks
Assigned by Linux
Jul 25, 2026
CVE-2026-64328Medium 5.5usb: gadget: f_fs: Fix DMA fence leak
Assigned by Linux
Jul 25, 2026
CVE-2026-64329High 7.8usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Assigned by Linux
Jul 25, 2026
CVE-2026-64330High 7.8usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Assigned by Linux
Jul 25, 2026
CVE-2026-64331Medium 5.5usbip: vudc: fix NULL deref in vep_dequeue()
Assigned by Linux
Jul 25, 2026
CVE-2026-64332Medium 5.5USB: ulpi: fix memory leak on registration failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64333High 7.8USB: serial: digi_acceleport: fix write buffer corruption
Assigned by Linux
Jul 25, 2026
CVE-2026-64334Medium 5.5USB: serial: digi_acceleport: fix hard lockup on disconnect
Assigned by Linux
Jul 25, 2026
CVE-2026-64335Medium 5.5USB: serial: digi_acceleport: fix broken rx after throttle
Assigned by Linux
Jul 25, 2026
CVE-2026-64336Medium 5.5USB: serial: keyspan_pda: fix information leak
Assigned by Linux
Jul 25, 2026
CVE-2026-64337Medium 5.5usb: mtu3: unmap request DMA on queue failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64338Medium 5.5USB: misc: uss720: unregister parport on probe failure
Assigned by Linux
Jul 25, 2026
CVE-2026-64339High 7.1usb: misc: usbio: bound bulk IN response length to the received transfer
Assigned by Linux
Jul 25, 2026
CVE-2026-64340High 7.8USB: legousbtower: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64341High 7.8USB: iowarrior: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64342High 7.8USB: iowarrior: fix use-after-free on disconnect
Assigned by Linux
Jul 25, 2026
CVE-2026-64343High 7.8USB: ldusb: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64344High 7.8USB: idmouse: fix use-after-free on disconnect race
Assigned by Linux
Jul 25, 2026
CVE-2026-64345Medium 5.5usb: gadget: f_printer: take kref only for successful open
Assigned by Linux
Jul 25, 2026
CVE-2026-64346High 7.8usb: gadget: udc: Fix use-after-free in gadget_match_driver
Assigned by Linux
Jul 25, 2026
CVE-2026-64347Medium 5.5usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
Assigned by Linux
Jul 25, 2026
CVE-2026-64348High 7.8usb: free iso schedules on failed submit
Assigned by Linux
Jul 25, 2026
CVE-2026-64349Medium 5.5usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()
Assigned by Linux
Jul 25, 2026
CVE-2026-64350Medium 5.5usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
Assigned by Linux
Jul 25, 2026
CVE-2026-64351Medium 5.5net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
Assigned by Linux
Jul 25, 2026
CVE-2026-64352High 7.8bpf: Allow LPM map access from sleepable BPF programs
Assigned by Linux
Jul 25, 2026
PreviousPage 90 of 94Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.