CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,026 CVEs published, 313 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,026
Show in the list
Critical, last 7 days
313
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,688 CVEs, showing 2001 to 2050PreviousPage 41 of 154Next
CVESeverityTitlePublished
CVE-2026-89958Not yet scoreds390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
Assigned by Linux
Sep 16, 2026
CVE-2026-89957High 8.8s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
Assigned by Linux
Sep 16, 2026
CVE-2026-89956Not yet scoreds390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
Assigned by Linux
Sep 16, 2026
CVE-2026-89955Not yet scoreds390/vfio-ap: Fix NULL deref in status_show() during queue probe
Assigned by Linux
Sep 16, 2026
CVE-2026-89954High 8.0mtd: afs: validate v2 image info bounds
Assigned by Linux
Sep 16, 2026
CVE-2026-89953Not yet scoredmtd: mtdoops: free page bitmap when the backing MTD is removed
Assigned by Linux
Sep 16, 2026
CVE-2026-89952Not yet scoredmtd: rawnand: validate ONFI extended parameter page sections
Assigned by Linux
Sep 16, 2026
CVE-2026-89951High 8.8batman-adv: fix stale receive device on merged fragments
Assigned by Linux
Sep 16, 2026
CVE-2026-89950Not yet scoredbatman-adv: mcast: linearize skbuff for packet generation
Assigned by Linux
Sep 16, 2026
CVE-2026-89949Not yet scoredbatman-adv: dat: avoid unaligned fault in IP extraction
Assigned by Linux
Sep 16, 2026
CVE-2026-89948Not yet scoredbatman-adv: bla: fix freeing of claims on meshif deletion
Assigned by Linux
Sep 16, 2026
CVE-2026-89947High 8.0clk: meson: align gxbb_32k_clk_sel number of parents with actual count
Assigned by Linux
Sep 16, 2026
CVE-2026-89946Not yet scoredASoC: cs35l33: drain threaded IRQ before runtime suspend
Assigned by Linux
Sep 16, 2026
CVE-2026-89945Not yet scoredASoC: cs35l34: drain threaded IRQ before runtime suspend
Assigned by Linux
Sep 16, 2026
CVE-2026-89944Not yet scoredASoC: hdac_hda: Fix hlink refcount leak on component registration failure
Assigned by Linux
Sep 16, 2026
CVE-2026-89943High 8.4ASoC: loongson: Fix error handling in ACPI property parsing
Assigned by Linux
Sep 16, 2026
CVE-2026-89942High 7.8iio: buffer: Fix potential use-after-free in anonymous buffer release
Assigned by Linux
Sep 16, 2026
CVE-2026-89941High 7.8iio: buffer: Make IIO DMA fence release RCU-safe
Assigned by Linux
Sep 16, 2026
CVE-2026-89940High 7.8iio: buffer: Tie IIO dma fence lock lifetime to the fence
Assigned by Linux
Sep 16, 2026
CVE-2026-89939Not yet scorediio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
Assigned by Linux
Sep 16, 2026
CVE-2026-89938High 7.8iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
Assigned by Linux
Sep 16, 2026
CVE-2026-89937Not yet scorediio: chemical: sgp30: Handle IAQ thread creation failure
Assigned by Linux
Sep 16, 2026
CVE-2026-89936Not yet scorediio: dac: m62332: Fix regulator reference count imbalance
Assigned by Linux
Sep 16, 2026
CVE-2026-89935Not yet scorediio: light: apds9306: fix PM reference leak in apds9306_read_data()
Assigned by Linux
Sep 16, 2026
CVE-2026-89934Not yet scorediio: light: ltrf216a: fix runtime PM reference leak in error path
Assigned by Linux
Sep 16, 2026
CVE-2026-89933Not yet scorediio: pressure: dps310: fix NULL pointer dereference on ACPI probe
Assigned by Linux
Sep 16, 2026
CVE-2026-89932High 8.8KVM: nVMX: Always flush vpid02 on first use
Assigned by Linux
Sep 16, 2026
CVE-2026-89931Not yet scoredKVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
Assigned by Linux
Sep 16, 2026
CVE-2026-89930Critical 9.3KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
Assigned by Linux
Sep 16, 2026
CVE-2026-89929High 8.8KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
Assigned by Linux
Sep 16, 2026
CVE-2026-89928High 8.8KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
Assigned by Linux
Sep 16, 2026
CVE-2026-89927High 7.1KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
Assigned by Linux
Sep 16, 2026
CVE-2026-89926Not yet scoredKVM: s390: Fix length check __import_wp_info()
Assigned by Linux
Sep 16, 2026
CVE-2026-89925Not yet scoredKVM: s390: Fix memory leak in guest debug handling
Assigned by Linux
Sep 16, 2026
CVE-2026-89924Not yet scoredKVM: s390: Fix old_data leak in guest debug error path
Assigned by Linux
Sep 16, 2026
CVE-2026-89923Not yet scoredKVM: s390: Free guest debug data on vcpu destroy
Assigned by Linux
Sep 16, 2026
CVE-2026-89922High 7.8KVM: s390: Take srcu when importing watchpoint data
Assigned by Linux
Sep 16, 2026
CVE-2026-89921Not yet scoredKVM: s390: Zero initialize data structures for inject_pfault_token
Assigned by Linux
Sep 16, 2026
CVE-2026-89920High 7.8KVM: s390: Fix memory corruption by not reinjecting CK machine checks
Assigned by Linux
Sep 16, 2026
CVE-2026-89919High 7.8KVM: s390: keyop: use mmu_lock to read gmap->asce
Assigned by Linux
Sep 16, 2026
CVE-2026-89918Critical 9.3KVM: arm64: Correctly handle end of VA space TLBI invalidation
Assigned by Linux
Sep 16, 2026
CVE-2026-89917Not yet scoredKVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping
Assigned by Linux
Sep 16, 2026
CVE-2026-89916Critical 9.3KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
Assigned by Linux
Sep 16, 2026
CVE-2026-89915Critical 9.3KVM: arm64: Remove VM-wide VNCR mapping counter
Assigned by Linux
Sep 16, 2026
CVE-2026-89914Critical 9.3KVM: arm64: Sign-extend VA for range-based TLBI invalidation
Assigned by Linux
Sep 16, 2026
CVE-2026-89913High 8.8KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
Assigned by Linux
Sep 16, 2026
CVE-2026-89912High 7.1KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
Assigned by Linux
Sep 16, 2026
CVE-2026-89911High 7.9KVM: arm64: Correctly cap TLBI Range to the architural limit
Assigned by Linux
Sep 16, 2026
CVE-2026-89910High 7.3LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
Assigned by Linux
Sep 16, 2026
CVE-2026-89909Not yet scoredLoongArch: KVM: Free init resources if kvm_init() fails
Assigned by Linux
Sep 16, 2026
PreviousPage 41 of 154Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.