CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product linux:linux. Show all products

6,817 CVEs, showing 1 to 50Page 1 of 137Next
CVESeverityTitlePublished
CVE-2022-42328Medium 6.2Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-…
Assigned by XEN
Dec 7, 2022
CVE-2022-42329Medium 5.5Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-…
Assigned by XEN
Dec 7, 2022
CVE-2023-34319High 7.8Linux: buffer overrun in netback due to unusual packet
Assigned by XEN
Sep 22, 2023
CVE-2023-52444High 7.8f2fs: fix to avoid dirent corruption
Assigned by Linux
Feb 22, 2024
CVE-2023-52447High 7.8bpf: Defer the free of inner map when necessary
Assigned by Linux
Feb 22, 2024
CVE-2023-52458Medium 5.5block: add check that partition length needs to be aligned with block size
Assigned by Linux
Feb 23, 2024
CVE-2023-52464High 7.8EDAC/thunderx: Fix possible out-of-bounds string access
Assigned by Linux
Feb 23, 2024
CVE-2024-26596Not yet scorednet: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
Assigned by Linux
Feb 23, 2024
CVE-2021-47002Medium 5.5SUNRPC: Fix null pointer dereference in svc_rqst_free()
Assigned by Linux
Feb 28, 2024
CVE-2021-47107Critical 9.8NFSD: Fix READDIR buffer overflow
Assigned by Linux
Mar 4, 2024
CVE-2024-26629Medium 5.5nfsd: fix RELEASE_LOCKOWNER
Assigned by Linux
Mar 13, 2024
CVE-2023-52612High 7.8crypto: scomp - fix req->dst buffer overflow
Assigned by Linux
Mar 18, 2024
CVE-2023-52614High 7.8PM / devfreq: Fix buffer overflow in trans_stat_show
Assigned by Linux
Mar 18, 2024
CVE-2023-52620High 7.8netfilter: nf_tables: disallow timeout for anonymous sets
Assigned by Linux
Mar 21, 2024
CVE-2024-26642High 7.8netfilter: nf_tables: disallow anonymous set with timeout flag
Assigned by Linux
Mar 21, 2024
CVE-2024-26643High 7.8netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
Assigned by Linux
Mar 21, 2024
CVE-2024-26645Medium 5.5tracing: Ensure visibility when inserting an element into tracing_map
Assigned by Linux
Mar 26, 2024
CVE-2023-52622Medium 5.5ext4: avoid online resizing failures due to oversized flex bg
Assigned by Linux
Mar 26, 2024
CVE-2024-26651Medium 5.5sr9800: Add check for usbnet_get_endpoints
Assigned by Linux
Mar 27, 2024
CVE-2024-26659High 7.8xhci: handle isoc Babble and Buffer Overrun events properly
Assigned by Linux
Apr 2, 2024
CVE-2024-26671Medium 4.7blk-mq: fix IO hang from sbitmap wakeup race
Assigned by Linux
Apr 2, 2024
CVE-2024-26679Medium 5.5inet: read sk->sk_family once in inet_recv_error()
Assigned by Linux
Apr 2, 2024
CVE-2024-26772High 7.8ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
Assigned by Linux
Apr 3, 2024
CVE-2024-26773High 7.8ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
Assigned by Linux
Apr 3, 2024
CVE-2024-26777Medium 5.5fbdev: sis: Error out if pixclock equals zero
Assigned by Linux
Apr 3, 2024
CVE-2024-26783Medium 5.5mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
Assigned by Linux
Apr 4, 2024
CVE-2024-26787Medium 5.5mmc: mmci: stm32: fix DMA API overlapping mappings warning
Assigned by Linux
Apr 4, 2024
CVE-2024-26805Medium 5.5netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
Assigned by Linux
Apr 4, 2024
CVE-2024-26810High 7.8vfio/pci: Lock external INTx masking ops
Assigned by Linux
Apr 5, 2024
CVE-2024-26812High 7.8vfio/pci: Create persistent INTx handler
Assigned by Linux
Apr 5, 2024
CVE-2024-27437Medium 5.5vfio/pci: Disable auto-enable of exclusive INTx IRQ
Assigned by Linux
Apr 5, 2024
CVE-2024-26816Medium 5.5x86, relocs: Ignore relocations in .notes section
Assigned by Linux
Apr 10, 2024
CVE-2024-26820Medium 5.5hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
Assigned by Linux
Apr 17, 2024
CVE-2024-26835Medium 5.5netfilter: nf_tables: set dormant flag on hook register failure
Assigned by Linux
Apr 17, 2024
CVE-2024-26851High 7.5netfilter: nf_conntrack_h323: Add protection for bmp length out of range
Assigned by Linux
Apr 17, 2024
CVE-2024-26852High 7.8net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
Assigned by Linux
Apr 17, 2024
CVE-2024-26855Medium 5.5net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
Assigned by Linux
Apr 17, 2024
CVE-2024-26859Medium 4.7net/bnx2x: Prevent access to a freed page in page_pool
Assigned by Linux
Apr 17, 2024
CVE-2024-26861Medium 4.7wireguard: receive: annotate data-race around receiving_counter.counter
Assigned by Linux
Apr 17, 2024
CVE-2024-26863Medium 5.5hsr: Fix uninit-value access in hsr_get_node()
Assigned by Linux
Apr 17, 2024
CVE-2024-26870High 7.8NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
Assigned by Linux
Apr 17, 2024
CVE-2024-26872High 7.8RDMA/srpt: Do not register event handler until srpt device is fully setup
Assigned by Linux
Apr 17, 2024
CVE-2024-26875Medium 6.4media: pvrusb2: fix uaf in pvr2_context_set_notify
Assigned by Linux
Apr 17, 2024
CVE-2024-26877Critical 9.8crypto: xilinx - call finalize with bh disabled
Assigned by Linux
Apr 17, 2024
CVE-2024-26878Medium 4.7quota: Fix potential NULL pointer dereference
Assigned by Linux
Apr 17, 2024
CVE-2024-26880High 7.8dm: call the resume method on internal suspend
Assigned by Linux
Apr 17, 2024
CVE-2024-26882High 7.3net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
Assigned by Linux
Apr 17, 2024
CVE-2024-26883High 7.8bpf: Fix stackmap overflow check on 32-bit arches
Assigned by Linux
Apr 17, 2024
CVE-2024-26884High 7.8bpf: Fix hashtab overflow check on 32-bit arches
Assigned by Linux
Apr 17, 2024
CVE-2024-26885High 7.8bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
Assigned by Linux
Apr 17, 2024
Page 1 of 137Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.