CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,114 CVEs published, 326 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,114
Show in the list
Critical, last 7 days
326
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,514 CVEs, showing 1851 to 1900PreviousPage 38 of 91Next
CVESeverityTitlePublished
CVE-2026-43149Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() The priv->rx_buffer and priv->tx_buffer are alloc'd together as…May 6, 2026
CVE-2026-43148Medium 5.5In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() As kcalloc() may fail, check its return value to avoid a NULL…May 6, 2026
CVE-2026-43147Medium 5.5In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" This reverts commit 05703271c3cd ("PCI/IOV: Add PCI…May 6, 2026
CVE-2026-43146Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: iris: Add buffer to list only after successful allocation Move `list_add_tail()` to after `dma_alloc_attrs()` succeeds when…May 6, 2026
CVE-2026-43145Medium 5.5In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix invalid loaded resource table detection imx_rproc_elf_find_loaded_rsc_table() may incorrectly report a l…May 6, 2026
CVE-2026-43144Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential kernel oops when probe fails When probe of the sdio brcmfmac device fails for some reasons (i.e.May 6, 2026
CVE-2026-43143Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mfd: core: Add locking around 'mfd_of_node_list' Manipulating a list in the kernel isn't safe without some sort of mutual exclusion.May 6, 2026
CVE-2026-43142Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not dest…May 6, 2026
CVE-2026-43141High 7.1In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut Number of MW LUTs depends on NTB configuration and can be set to zero,…May 6, 2026
CVE-2026-43140Medium 5.5In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapp…May 6, 2026
CVE-2026-43138High 7.8In the Linux kernel, the following vulnerability has been resolved: reset: gpio: suppress bind attributes in sysfs This is a special device that's created dynamically and is supposed to stay in memor…May 6, 2026
CVE-2026-43137Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix NULL pointer dereference If there's a mismatch between the DAI links in the machine driver and the topol…May 6, 2026
CVE-2026-43136Medium 5.5In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() Do not crash when a report has no fields.May 6, 2026
CVE-2026-43135Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Add missing unmap in snd_cx23885_hw_params() In error path, add cx23885_alsa_dma_unmap() to release the resource ac…May 6, 2026
CVE-2026-43132Medium 5.5In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr()…May 6, 2026
CVE-2026-43131Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer dereferenc…May 6, 2026
CVE-2026-43130Medium 5.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac ("iommu/vt-d: Don't issue ATS…May 6, 2026
CVE-2026-43129Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ima: verify the previous kernel's IMA buffer lies in addressable RAM Patch series "Address page fault in ima_restore_measurement_li…May 6, 2026
CVE-2026-43127Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix circular locking dependency in run_unpack_ex Syzbot reported a circular locking dependency between wnd->rw_lock (sbi->us…May 6, 2026
CVE-2026-43126High 7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: mixer: oss: Add card disconnect checkpoints ALSA OSS mixer layer calls the kcontrol ops rather individually, and pending call…May 6, 2026
CVE-2026-43124Medium 5.5In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return NULL on failure.May 6, 2026
CVE-2026-43123Medium 5.5In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newinfo() If fbcon_open() fails when called from con2fb_acquire_newinfo() then info->fb…May 6, 2026
CVE-2026-43121Medium 4.7In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix user_ref race between scrub and refill paths The io_zcrx_put_niov_uref() function uses a non-atomic check-then-d…May 6, 2026
CVE-2025-71295Medium 5.5In the Linux kernel, the following vulnerability has been resolved: fs/buffer: add alert in try_to_free_buffers() for folios without buffers try_to_free_buffers() can be called on folios with no buff…May 6, 2026
CVE-2025-71294Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer issue buffer funcs If SDMA block not enabled, buffer_funcs will not initialize, fix the null pointer i…May 6, 2026
CVE-2025-71293Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: Move ras data alloc before bad page check In the rare event if eeprom has only invalid address entries, allocation…May 6, 2026
CVE-2025-71292Medium 5.5In the Linux kernel, the following vulnerability has been resolved: jfs: nlink overflow in jfs_rename If nlink is maximal for a directory (-1) and inside that directory you perform a rename for some…May 6, 2026
CVE-2025-71291Medium 5.5In the Linux kernel, the following vulnerability has been resolved: misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read() In the function bcm_vk_read(), the pointer entry is checked,…May 6, 2026
CVE-2025-71290Medium 5.5In the Linux kernel, the following vulnerability has been resolved: misc: ti_fpc202: fix a potential memory leak in probe function Use for_each_child_of_node_scoped() to simplify the code and ensure…May 6, 2026
CVE-2025-71289Medium 5.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle attr_set_size() errors when truncating files If attr_set_size() fails while truncating down, the error is silently…May 6, 2026
CVE-2025-71288Medium 5.5In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leaks on common probe Make sure to drop the reference taken when looking up the SMI device during commo…May 6, 2026
CVE-2025-71287Medium 5.5In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leak on larb probe Make sure to drop the reference taken when looking up the SMI device during larb pro…May 6, 2026
CVE-2025-71285Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels MHI stack offers the 'auto_queue' feature, which allows the MHI sta…May 6, 2026
CVE-2025-71273Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() Simplify the code by using device managed memory allocations.May 6, 2026
CVE-2025-71272Medium 5.5In the Linux kernel, the following vulnerability has been resolved: most: core: fix resource leak in most_register_interface error paths The function most_register_interface() did not correctly relea…May 6, 2026
CVE-2025-71271Medium 5.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: ensure sb->s_fs_info is always cleaned up When hfsplus was converted to the new mount api a bug was introduced by changing…May 6, 2026
CVE-2025-71286High 7.8ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
Assigned by Linux
May 6, 2026
CVE-2026-43280High 7.1drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise
Assigned by Linux
May 6, 2026
CVE-2026-43279High 7.8ALSA: usb-audio: Add sanity check for OOB writes at silencing
Assigned by Linux
May 6, 2026
CVE-2026-43278High 7.8dm: clear cloned request bio pointer when last clone bio completes
Assigned by Linux
May 6, 2026
CVE-2026-43253High 7.5iommu/amd: move wait_on_sem() out of spinlock
Assigned by Linux
May 6, 2026
CVE-2026-43248High 7.8vhost: move vdpa group bound check to vhost_vdpa
Assigned by Linux
May 6, 2026
CVE-2026-43239High 8.8smb: client: prevent races in ->query_interfaces()
Assigned by Linux
May 6, 2026
CVE-2026-43237High 7.8drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4
Assigned by Linux
May 6, 2026
CVE-2026-43233High 8.2netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
Assigned by Linux
May 6, 2026
CVE-2026-43228Medium 5.5hfs: Replace BUG_ON with error handling for CNID count checks
Assigned by Linux
May 6, 2026
CVE-2026-43216Medium 5.5net: Drop the lock in skb_may_tx_timestamp()
Assigned by Linux
May 6, 2026
CVE-2026-43215High 8.8cifs: Fix locking usage for tcon fields
Assigned by Linux
May 6, 2026
CVE-2026-43214High 7.8KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
Assigned by Linux
May 6, 2026
CVE-2026-43213High 7.5wifi: rtw89: pci: validate sequence number of TX release report
Assigned by Linux
May 6, 2026
PreviousPage 38 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.