CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,493 CVEs published, 335 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,493
Show in the list
Critical, last 7 days
335
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,988 CVEs, showing 4851 to 4900PreviousPage 98 of 180Next
CVESeverityTitlePublished
CVE-2026-68360Not yet scoredhwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
Assigned by Linux
Aug 10, 2026
CVE-2026-68361Not yet scoredhwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
Assigned by Linux
Aug 10, 2026
CVE-2026-68362Not yet scoredwifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
Assigned by Linux
Aug 10, 2026
CVE-2026-68363Not yet scoredwifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
Assigned by Linux
Aug 10, 2026
CVE-2026-68364Not yet scoreddrm/amd/display: Fix ISM dc_lock deadlock during suspend
Assigned by Linux
Aug 10, 2026
CVE-2026-68365Not yet scoredUSB: serial: io_edgeport: cap received transmit credits
Assigned by Linux
Aug 10, 2026
CVE-2026-68366Not yet scoredusb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer
Assigned by Linux
Aug 10, 2026
CVE-2026-68367Not yet scoredusb: gadget: f_tcm: synchronize delayed set_alt with teardown
Assigned by Linux
Aug 10, 2026
CVE-2026-68368Not yet scoredusb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
Assigned by Linux
Aug 10, 2026
CVE-2026-68369Not yet scoredusb: gadget: printer: fix infinite loop in printer_read()
Assigned by Linux
Aug 10, 2026
CVE-2026-68370High 7.8usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
Assigned by Linux
Aug 10, 2026
CVE-2026-68371High 8.4usb: musb: omap2430: Do not put borrowed of_node in probe
Assigned by Linux
Aug 10, 2026
CVE-2026-68372Not yet scoredusb: core: port: Deattach Type-C connector on component unbind
Assigned by Linux
Aug 10, 2026
CVE-2026-68373High 8.1wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
Assigned by Linux
Aug 10, 2026
CVE-2026-68374High 7.8usb: core: sysfs: add lock to bos_descriptors_read()
Assigned by Linux
Aug 10, 2026
CVE-2026-68375Not yet scoredbnxt_en: Handle partially initialized auxiliary devices
Assigned by Linux
Aug 10, 2026
CVE-2026-68376High 8.1sctp: fix auth_hmacs array size in struct sctp_cookie
Assigned by Linux
Aug 10, 2026
CVE-2026-68377High 7.8net/sched: act_tunnel_key: Defer dst_release to RCU callback
Assigned by Linux
Aug 10, 2026
CVE-2026-68378Not yet scoreddpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()
Assigned by Linux
Aug 10, 2026
CVE-2026-68379High 7.5tcp: fix TIME_WAIT socket reference leak on PSP policy failure
Assigned by Linux
Aug 10, 2026
CVE-2026-68380High 7.8accel/amdxdna: Fix use-after-free of mm_struct in job scheduler
Assigned by Linux
Aug 10, 2026
CVE-2026-68381Critical 9.8ksmbd: pin conn during async oplock break notification
Assigned by Linux
Aug 10, 2026
CVE-2026-68382High 7.8drm/xe/guc: Hold device ref until queue teardown completes
Assigned by Linux
Aug 10, 2026
CVE-2026-68383High 7.8drm/xe/guc: Keep scheduler timeline name alive
Assigned by Linux
Aug 10, 2026
CVE-2026-68384High 7.8drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves
Assigned by Linux
Aug 10, 2026
CVE-2026-68385Critical 9.8s390/checksum: Fix csum_partial() without vector facility
Assigned by Linux
Aug 10, 2026
CVE-2026-68386Not yet scoredbpf, sockmap: Reject unhashed UDP sockets on sockmap update
Assigned by Linux
Aug 10, 2026
CVE-2026-68387High 7.8can: raw: add locking for raw flags bitfield
Assigned by Linux
Aug 10, 2026
CVE-2026-68388Critical 9.8smb/client: handle overlapping allocated ranges in fallocate
Assigned by Linux
Aug 10, 2026
CVE-2026-68389High 8.8Bluetooth: hci_qca: Clear memdump state on invalid dump size
Assigned by Linux
Aug 10, 2026
CVE-2026-68390High 8.8Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups
Assigned by Linux
Aug 10, 2026
CVE-2026-68391High 7.8Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
Assigned by Linux
Aug 10, 2026
CVE-2026-68392High 7.8Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
Assigned by Linux
Aug 10, 2026
CVE-2026-68393High 8.8Bluetooth: hci_sync: extend conn_hash lookup critical sections
Assigned by Linux
Aug 10, 2026
CVE-2026-68394High 7.8Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update
Assigned by Linux
Aug 10, 2026
CVE-2026-68395Not yet scoredata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
Assigned by Linux
Aug 10, 2026
CVE-2026-68396Not yet scoredscsi: core: wake eh reliably when using scsi_schedule_eh
Assigned by Linux
Aug 10, 2026
CVE-2026-68397High 8.8net/iucv: take a reference on the socket found in afiucv_hs_rcv()
Assigned by Linux
Aug 10, 2026
CVE-2026-68398High 7.8ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF
Assigned by Linux
Aug 10, 2026
CVE-2026-68399High 7.8bpf: Fix UAF in sock clone early bailouts
Assigned by Linux
Aug 10, 2026
CVE-2026-68400High 7.8firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation
Assigned by Linux
Aug 10, 2026
CVE-2026-68401High 7.8firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()
Assigned by Linux
Aug 10, 2026
CVE-2026-68402High 7.1wifi: cfg80211: bound element ID read when checking non-inheritance
Assigned by Linux
Aug 10, 2026
CVE-2026-68403Not yet scoredwifi: brcmfmac: initialize SDIO data work before cleanup
Assigned by Linux
Aug 10, 2026
CVE-2026-68404High 7.8wifi: cfg80211: use wiphy work for socket owner autodisconnect
Assigned by Linux
Aug 10, 2026
CVE-2026-68405Not yet scoredwifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
Assigned by Linux
Aug 10, 2026
CVE-2026-68406Not yet scoredwifi: cfg80211: validate PMSR FTM preamble range
Assigned by Linux
Aug 10, 2026
CVE-2026-68407Not yet scoredwifi: nl80211: free RNR data on MBSSID mismatch
Assigned by Linux
Aug 10, 2026
CVE-2026-68408Not yet scoredwifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock
Assigned by Linux
Aug 10, 2026
CVE-2026-68409High 8.8wifi: mac80211: defer link RX stats percpu free to RCU
Assigned by Linux
Aug 10, 2026
PreviousPage 98 of 180Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.