CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,975 CVEs published, 319 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,975
Show in the list
Critical, last 7 days
319
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,688 CVEs, showing 2051 to 2100PreviousPage 42 of 154Next
CVESeverityTitlePublished
CVE-2026-89908High 8.8LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
Assigned by Linux
Sep 16, 2026
CVE-2026-89907High 8.8LoongArch: KVM: Validate MSI data before routing it to EIOINTC
Assigned by Linux
Sep 16, 2026
CVE-2026-89906High 7.8LoongArch: BPF: Refactor jump offset calculation in tail call
Assigned by Linux
Sep 16, 2026
CVE-2026-89905Not yet scoredLoongArch: BPF: Move arena register slot below TCC context
Assigned by Linux
Sep 16, 2026
CVE-2026-89904High 8.4LoongArch: Fix acpi_package_ids[] array overflow
Assigned by Linux
Sep 16, 2026
CVE-2026-89903High 7.8LoongArch: Do not save/restore percpu base register in rethook trampoline
Assigned by Linux
Sep 16, 2026
CVE-2026-89902High 7.8LoongArch: Avoid preempt count underflow without probe
Assigned by Linux
Sep 16, 2026
CVE-2026-89901Not yet scoredmedia: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
Assigned by Linux
Sep 16, 2026
CVE-2026-89900Not yet scoredmedia: cec: core: Fix kmemleak due to missed rc_free_device() call
Assigned by Linux
Sep 16, 2026
CVE-2026-89899High 7.8media: cec: disable delayed work before freeing an interrupted transmit
Assigned by Linux
Sep 16, 2026
CVE-2026-89898High 8.8media: cec: extron-da-hd-4k-plus: add sanity check
Assigned by Linux
Sep 16, 2026
CVE-2026-89897High 7.5media: cec: Serialize exclusive follower delivery
Assigned by Linux
Sep 16, 2026
CVE-2026-89896Not yet scoredmedia: cedrus: fix memory leak in cedrus_init_ctrls()
Assigned by Linux
Sep 16, 2026
CVE-2026-89895Not yet scoredmedia: cobalt: Avoid freeing ALSA private data twice
Assigned by Linux
Sep 16, 2026
CVE-2026-89894High 7.8media: cx231xx: reject geometry changes while the VBI queue is busy
Assigned by Linux
Sep 16, 2026
CVE-2026-89893High 7.8media: cx23885: cancel NetUP CI work before teardown
Assigned by Linux
Sep 16, 2026
CVE-2026-89892Not yet scoredmedia: em28xx: defer audio-only extension registration
Assigned by Linux
Sep 16, 2026
CVE-2026-89891Not yet scoredmedia: em28xx: fix use-after-free of dev_next->devlist on disconnect
Assigned by Linux
Sep 16, 2026
CVE-2026-89890High 7.8media: go7007: defer the ALSA v4l2 put until card release
Assigned by Linux
Sep 16, 2026
CVE-2026-89889Not yet scoredmedia: i2c: imx415: Release runtime PM reference on VBLANK error
Assigned by Linux
Sep 16, 2026
CVE-2026-89888High 7.8media: i2c: ov02a10: fix endpoint parsing use-after-free
Assigned by Linux
Sep 16, 2026
CVE-2026-89887High 7.8media: i2c: ov7740: fix use-after-destroy in remove
Assigned by Linux
Sep 16, 2026
CVE-2026-89886Not yet scoredmedia: intel/ipu6: fix async notifier cleanup leak on parse error
Assigned by Linux
Sep 16, 2026
CVE-2026-89885High 8.4media: platform: mtk-mdp3: Fix SCP device refcounting
Assigned by Linux
Sep 16, 2026
CVE-2026-89884Not yet scoredmedia: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
Assigned by Linux
Sep 16, 2026
CVE-2026-89883High 7.8media: rc: sunxi-cir: Unregister rc device on probe failure
Assigned by Linux
Sep 16, 2026
CVE-2026-89882High 7.8media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
Assigned by Linux
Sep 16, 2026
CVE-2026-89881Not yet scoredmedia: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
Assigned by Linux
Sep 16, 2026
CVE-2026-89880High 7.8media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
Assigned by Linux
Sep 16, 2026
CVE-2026-89879Not yet scoredmedia: s2255: bound JPEG frame size before copying into the buffer
Assigned by Linux
Sep 16, 2026
CVE-2026-89878Not yet scoredmedia: s2255: check firmware size before reading trailing marker
Assigned by Linux
Sep 16, 2026
CVE-2026-89877High 8.4media: saa7164: fix cleanup on resource allocation failure
Assigned by Linux
Sep 16, 2026
CVE-2026-89876Not yet scoredmedia: tda18250: fix possible integer overflow
Assigned by Linux
Sep 16, 2026
CVE-2026-89875High 7.8media: ti: vpe: quiesce overflow recovery before freeing streams
Assigned by Linux
Sep 16, 2026
CVE-2026-89874Not yet scoredmedia: v4l2-async: avoid deleting unlinked ASC entry on link error
Assigned by Linux
Sep 16, 2026
CVE-2026-89873High 7.8media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
Assigned by Linux
Sep 16, 2026
CVE-2026-89872Not yet scoredmedia: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
Assigned by Linux
Sep 16, 2026
CVE-2026-89871Not yet scoredmedia: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
Assigned by Linux
Sep 16, 2026
CVE-2026-89870High 7.8media: zoran: Avoid freeing a registered video_device twice
Assigned by Linux
Sep 16, 2026
CVE-2026-89869Not yet scoredmedia: qcom: iris: use disable_irq() during power-off
Assigned by Linux
Sep 16, 2026
CVE-2026-89868Not yet scoredmedia: chips-media: wave5: Add timeout while stop_streaming
Assigned by Linux
Sep 16, 2026
CVE-2026-89867Not yet scoredmedia: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued
Assigned by Linux
Sep 16, 2026
CVE-2026-89866Not yet scoredmedia: chips-media: wave5: Resume device before setting EOS flag
Assigned by Linux
Sep 16, 2026
CVE-2026-89865Not yet scoredscsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
Assigned by Linux
Sep 16, 2026
CVE-2026-89864Not yet scoredscsi: qla2xxx: Bound i2c->length in I2C bsg handlers
Assigned by Linux
Sep 16, 2026
CVE-2026-89863High 7.5scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
Assigned by Linux
Sep 16, 2026
CVE-2026-89862Not yet scoredscsi: qla2xxx: Fix BSG job leak on validate flash image error path
Assigned by Linux
Sep 16, 2026
CVE-2026-89861High 8.1scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
Assigned by Linux
Sep 16, 2026
CVE-2026-89860High 8.8scsi: qla2xxx: Initialize NVMe abort_work once at submission
Assigned by Linux
Sep 16, 2026
CVE-2026-89859Not yet scoredscsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
Assigned by Linux
Sep 16, 2026
PreviousPage 42 of 154Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.