CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,182 CVEs published, 330 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,182
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,514 CVEs, showing 1651 to 1700PreviousPage 34 of 91Next
CVESeverityTitlePublished
CVE-2026-43466High 8.2net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
Assigned by Linux
May 8, 2026
CVE-2026-43459High 7.3ASoC: soc-core: flush delayed work before removing DAIs and widgets
Assigned by Linux
May 8, 2026
CVE-2026-43456High 7.8bonding: fix type confusion in bond_setup_by_slave()
Assigned by Linux
May 8, 2026
CVE-2026-43452High 8.2netfilter: x_tables: guard option walkers against 1-byte tail reads
Assigned by Linux
May 8, 2026
CVE-2026-43446Medium 5.5accel/amdxdna: Fix runtime suspend deadlock when there is pending job
Assigned by Linux
May 8, 2026
CVE-2026-43443Medium 5.5ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
Assigned by Linux
May 8, 2026
CVE-2026-43441High 7.5net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
Assigned by Linux
May 8, 2026
CVE-2026-43437High 7.8ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
Assigned by Linux
May 8, 2026
CVE-2026-43421Medium 5.5usb: gadget: f_ncm: Fix net_device lifecycle with device_move
Assigned by Linux
May 8, 2026
CVE-2026-43414Critical 9.8scsi: qla2xxx: Completely fix fcport double free
Assigned by Linux
May 8, 2026
CVE-2026-43408High 7.8ceph: add a bunch of missing ceph_path_info initializers
Assigned by Linux
May 8, 2026
CVE-2026-43407Critical 9.1libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
Assigned by Linux
May 8, 2026
CVE-2026-43406Critical 9.1libceph: prevent potential out-of-bounds reads in process_message_header()
Assigned by Linux
May 8, 2026
CVE-2026-43405High 7.5libceph: Use u32 for non-negative values in ceph_monmap_decode()
Assigned by Linux
May 8, 2026
CVE-2026-43402Critical 9.8kthread: consolidate kthread exit paths to prevent use-after-free
Assigned by Linux
May 8, 2026
CVE-2026-43383Critical 9.4net/tcp-md5: Fix MAC comparison to be constant-time
Assigned by Linux
May 8, 2026
CVE-2026-43374High 7.8net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
Assigned by Linux
May 8, 2026
CVE-2026-43370High 7.8drm/amdgpu: Fix use-after-free race in VM acquire
Assigned by Linux
May 8, 2026
CVE-2026-43368High 7.8drm/i915: Fix potential overflow of shmem scatterlist length
Assigned by Linux
May 8, 2026
CVE-2026-43366High 7.8io_uring/kbuf: check if target buffer list is still legacy on recycle
Assigned by Linux
May 8, 2026
CVE-2026-43365High 8.2xfs: fix undersized l_iclog_roundoff values
Assigned by Linux
May 8, 2026
CVE-2026-43362High 8.1smb: client: fix in-place encryption corruption in SMB2_write()
Assigned by Linux
May 8, 2026
CVE-2026-43349Medium 5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer syzbot reported a f2fs bug as below: BUG: KMSAN: uninit-val…May 8, 2026
CVE-2026-43348Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER When registering VTL0 memory via MSHV_ADD_VTL0_MEMORY, the kernel computes pg…May 8, 2026
CVE-2026-43347High 7.5In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: monaco: Reserve full Gunyah metadata region We observe spurious "Synchronous External Abort" exceptions (ESR=0x96…May 8, 2026
CVE-2026-43346Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ice: ptp: don't WARN when controlling PF is unavailable In VFIO passthrough setups, it is possible to pass through only a PF which…May 8, 2026
CVE-2026-43345High 7.5In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed for IPA v5.0+ For IPA v5.0+, the event ring index field moved from CH_C_CNTXT_0 to CH…May 8, 2026
CVE-2026-43344
Healthcare
Medium 5.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix die ID init and look up bugs In snbep_pci2phy_map_init(), in the nr_node_ids > 8 path, uncore_device_to_…May 8, 2026
CVE-2026-43343Medium 5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free geth_alloc() increments the reference count, but geth_free() fails to dec…May 8, 2026
CVE-2026-43342Medium 4.7In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as th…May 8, 2026
CVE-2026-43340Medium 5.5In the Linux kernel, the following vulnerability has been resolved: comedi: Reinit dev->spinlock between attachments to low-level drivers `struct comedi_device` is the main controlling structure for…May 8, 2026
CVE-2026-43338Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't reserve any space, they just do a trans…May 8, 2026
CVE-2026-43337Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() dcn401_init_hw() assumes that update_bw_bounding_box() is valid w…May 8, 2026
CVE-2026-43336High 7.5In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state before it leaves scope Since the ChaCha permutation is invertible, the local variable 'p…May 8, 2026
CVE-2026-43335Medium 5.5In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() The change to dynamic IDs for SM8450 platform intercon…May 8, 2026
CVE-2026-43333Medium 5.5In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF pointers check_mem_access() matches PTR_TO_BUF via base_type() which strips PTR_MA…May 8, 2026
CVE-2026-43331Medium 5.5In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Disable KCOV instrumentation after load_segments() The load_segments() function changes segment registers, invalidating…May 8, 2026
CVE-2026-43330High 7.8In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the…May 8, 2026
CVE-2026-43328High 7.8In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path When kobject_init_and_add() fails, cpufreq_dbs_governo…May 8, 2026
CVE-2026-43327Medium 5.5In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix locking/synchronization error Syzbot testing was able to provoke an addressing exception and crash in the usb_g…May 8, 2026
CVE-2026-43326Medium 5.5In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback SCX_KICK_WAIT busy-waits in kick_cpus_irq_workfn() usin…May 8, 2026
CVE-2026-43325Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't send a 6E related command when not supported MCC_ALLOWED_AP_TYPE_CMD is related to 6E support.May 8, 2026
CVE-2026-43324High 7.8In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix interrupt synchronization error This fixes an error in synchronization in the dummy-hcd driver.May 8, 2026
CVE-2026-43323Medium 5.5In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zero_vruntime tracking fix John reported that stress-ng-yield could make his machine unhappy and managed to bisect…May 8, 2026
CVE-2026-43322High 8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in le_read_features_complete This fixes the following backtrace caused by hci_conn being freed before…May 8, 2026
CVE-2026-43320Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dsc eDP issue [why] Need to add function hook check before useMay 8, 2026
CVE-2026-43319Medium 5.5In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spi_lock and buf_lock The spidev driver previously used two mutexes, spi_lock and buf_lock,…May 8, 2026
CVE-2026-43318Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify Invalidating a dmabuf will impact other users of the shared BO.May 8, 2026
CVE-2026-43317Medium 5.5In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration failures but for som…May 8, 2026
CVE-2026-43316Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: Check for out of bounds chip_id Clang with CONFIG_UBSAN_SHIFT=y noticed a condition where a signed type (literal "…May 8, 2026
PreviousPage 34 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.