CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 08:20 UTC)

What this means for you

This week: 5,438 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,438; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,237 CVEs, showing 1 to 50Page 1 of 85Next

CVE	Severity	Title	Published
CVE-2002-0510	Medium 5.0	The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Li… Assigned by mitre	Jun 11, 2002
CVE-2010-3904 Known exploited	High 7.8	The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u… Assigned by canonical	Dec 6, 2010
CVE-2013-2596 Known exploited	High 7.8	Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to crea… Assigned by mitre	Apr 13, 2013
CVE-2013-2094 Known exploited	High 8.4	The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open… Assigned by redhat	May 14, 2013
CVE-2013-6282 Known exploited	High 8.8	The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the conten… Assigned by mitre	Nov 19, 2013
CVE-2014-0196 Known exploited	Medium 5.5	The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial… Assigned by redhat	May 7, 2014
CVE-2014-3153 Known exploited	High 7.8	The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafte… Assigned by Chrome	Jun 7, 2014
CVE-2016-5195 Known exploited	High 7.0	Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-… Assigned by Chrome	Nov 10, 2016
CVE-2017-1000253 Known exploited	High 7.8	Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). Assigned by mitre	Oct 4, 2017
CVE-2018-14634 Known exploited	High 7.8	An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. Assigned by redhat	Sep 25, 2018
CVE-2019-13272 Known exploited	High 7.8	In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obta… Assigned by mitre	Jul 17, 2019
CVE-2019-15219	Medium 4.6	An issue was discovered in the Linux kernel before 5.1.8. Assigned by mitre	Aug 19, 2019
CVE-2019-15218	Medium 4.6	An issue was discovered in the Linux kernel before 5.1.8. Assigned by mitre	Aug 19, 2019
CVE-2019-15217	Medium 4.6	An issue was discovered in the Linux kernel before 5.2.3. Assigned by mitre	Aug 19, 2019
CVE-2019-15807	Medium 4.7	In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. Assigned by mitre	Aug 29, 2019
CVE-2019-16089	Medium 4.1	An issue was discovered in the Linux kernel through 5.2.13. Assigned by mitre	Sep 6, 2019
CVE-2019-18806	Medium 5.5	A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) b… Assigned by mitre	Nov 7, 2019
CVE-2019-19054	Medium 4.7	A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by tri… Assigned by mitre	Nov 18, 2019
CVE-2019-19066	Medium 4.7	A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering b… Assigned by mitre	Nov 18, 2019
CVE-2019-19080	Medium 5.9	Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memor… Assigned by mitre	Nov 18, 2019
CVE-2019-19081	Medium 5.9	A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory… Assigned by mitre	Nov 18, 2019
CVE-2019-19082	Medium 4.7	Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-19083	Medium 4.7	Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-19462	Medium 5.5	relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result. Assigned by mitre	Nov 30, 2019
CVE-2019-19530	Medium 4.6	In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. Assigned by mitre	Dec 3, 2019
CVE-2019-19965	Medium 4.7	In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race… Assigned by mitre	Dec 25, 2019
CVE-2019-20095	Medium 5.5	mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. Assigned by mitre	Dec 30, 2019
CVE-2020-11494	Medium 4.4	An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. Assigned by mitre	Apr 2, 2020
CVE-2020-11609	Medium 4.3	An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. Assigned by mitre	Apr 7, 2020
CVE-2019-20794	Medium 4.7	An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. Assigned by mitre	May 9, 2020
CVE-2020-12769	Medium 5.5	An issue was discovered in the Linux kernel before 5.4.17. Assigned by mitre	May 9, 2020
CVE-2020-14416	Medium 4.2	In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. Assigned by mitre	Jun 18, 2020
CVE-2020-14304	Medium 4.4	A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device.	Sep 15, 2020
CVE-2020-10781	Medium 5.5	A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM devic… Assigned by redhat	Sep 16, 2020
CVE-2020-14390	Medium 5.6	A flaw was found in the Linux kernel in versions before 5.9-rc6. Assigned by redhat	Sep 18, 2020
CVE-2020-29374	Low 3.6	An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. Assigned by mitre	Nov 28, 2020
CVE-2020-25639	Medium 4.4	A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. Assigned by redhat	Mar 4, 2021
CVE-2020-27170	Medium 4.7	An issue was discovered in the Linux kernel before 5.11.8. Assigned by mitre	Mar 20, 2021
CVE-2020-27171	Medium 6.0	An issue was discovered in the Linux kernel before 5.11.8. Assigned by mitre	Mar 20, 2021
CVE-2021-28972	Medium 6.7	In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace… Assigned by mitre	Mar 22, 2021
CVE-2020-36311	Medium 5.5	An issue was discovered in the Linux kernel before 5.9. Assigned by mitre	Apr 6, 2021
CVE-2021-34693	Medium 5.5	net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. Assigned by mitre	Jun 14, 2021
CVE-2021-33624	Medium 4.7	In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory loca… Assigned by mitre	Jun 23, 2021
CVE-2020-28097	Medium 5.9	The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. Assigned by mitre	Jun 24, 2021
CVE-2021-22555 Known exploited	High 8.3	Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Assigned by Google	Jul 7, 2021
CVE-2021-37159	Medium 6.4	hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free. Assigned by mitre	Jul 21, 2021
CVE-2021-35477	Medium 5.5	In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting sto… Assigned by mitre	Aug 2, 2021
CVE-2021-34556	Medium 5.5	In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism… Assigned by mitre	Aug 2, 2021
CVE-2021-3655	Low 3.3	A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Assigned by redhat	Aug 5, 2021
CVE-2021-38166	High 7.8	In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. Assigned by mitre	Aug 7, 2021

Page 1 of 85Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.