CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,851 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,851
Show in the list
Critical, last 7 days
323
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,688 CVEs, showing 2251 to 2300PreviousPage 46 of 154Next
CVESeverityTitlePublished
CVE-2026-89708Critical 9.8nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
Assigned by Linux
Sep 11, 2026
CVE-2026-89707High 7.5nfsd: release path refs on follow_down() error
Assigned by Linux
Sep 11, 2026
CVE-2026-89706High 7.5nfsd: Reset write verifier when async COPY writeback fails
Assigned by Linux
Sep 11, 2026
CVE-2026-89705High 7.1nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths
Assigned by Linux
Sep 11, 2026
CVE-2026-89704High 7.5nfsd: sample writeback error cursor before async COPY loop
Assigned by Linux
Sep 11, 2026
CVE-2026-89703Critical 9.8nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
Assigned by Linux
Sep 11, 2026
CVE-2026-89702Critical 9.8nfsd: size fh_verify server sockaddr slot by xpt_locallen
Assigned by Linux
Sep 11, 2026
CVE-2026-89701Not yet scorednfsd: validate nseconds in TIME_DELEG decode paths
Assigned by Linux
Sep 11, 2026
CVE-2026-89700Not yet scorednfsd: validate sockaddr length per family in listener_set
Assigned by Linux
Sep 11, 2026
CVE-2026-89699High 7.5nfsd: validate symlink target length in NFSv4 CREATE
Assigned by Linux
Sep 11, 2026
CVE-2026-89698Not yet scorednfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage
Assigned by Linux
Sep 11, 2026
CVE-2026-89697Critical 9.1nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
Assigned by Linux
Sep 11, 2026
CVE-2026-89696High 7.5nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
Assigned by Linux
Sep 11, 2026
CVE-2026-89695High 7.5nfsd: cap decoded POSIX ACL count to bound sort cost
Assigned by Linux
Sep 11, 2026
CVE-2026-89694Not yet scorednfsd: check client ownership when cancelling a copy-notify stateid
Assigned by Linux
Sep 11, 2026
CVE-2026-89693Not yet scorednfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
Assigned by Linux
Sep 11, 2026
CVE-2026-89692High 7.5nfsd: clear CALLBACK_RUNNING on failed delegation recall queue
Assigned by Linux
Sep 11, 2026
CVE-2026-89691High 7.1nfsd: clear opcnt on compound arg release to prevent OOB read
Assigned by Linux
Sep 11, 2026
CVE-2026-89690High 7.8nfsd: defer vfree of compound ops to fix rpc_status UAF
Assigned by Linux
Sep 11, 2026
CVE-2026-89689Critical 9.8nfsd: don't free session slots that are still in use
Assigned by Linux
Sep 11, 2026
CVE-2026-89688Critical 9.8nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
Assigned by Linux
Sep 11, 2026
CVE-2026-89687High 7.5nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file
Assigned by Linux
Sep 11, 2026
CVE-2026-89686Critical 9.8nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
Assigned by Linux
Sep 11, 2026
CVE-2026-89685High 7.5nfsd: fix clock domain mismatch in clients_still_reclaiming()
Assigned by Linux
Sep 11, 2026
CVE-2026-89684High 7.5nfsd: fix cpntf publish race in nfs4_init_cp_state
Assigned by Linux
Sep 11, 2026
CVE-2026-89683Not yet scorednfsd: fix dentry ref leak on V4ROOT export filehandle lookup
Assigned by Linux
Sep 11, 2026
CVE-2026-89682High 8.1nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net
Assigned by Linux
Sep 11, 2026
CVE-2026-89681Critical 9.8nfsd: fix layout fence worker double-reference race
Assigned by Linux
Sep 11, 2026
CVE-2026-89680High 7.5nfsd: fix nfsd_file leak on inter-server COPY setup failure
Assigned by Linux
Sep 11, 2026
CVE-2026-89679High 7.5nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs
Assigned by Linux
Sep 11, 2026
CVE-2026-89678High 7.5nfsd: fix partial-write detection in nfsd_direct_write
Assigned by Linux
Sep 11, 2026
CVE-2026-89677Critical 9.8nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
Assigned by Linux
Sep 11, 2026
CVE-2026-89676Critical 9.8nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
Assigned by Linux
Sep 11, 2026
CVE-2026-89675Critical 9.8nfsd: fix UAF in async copy cancel and shutdown
Assigned by Linux
Sep 11, 2026
CVE-2026-89674Critical 9.8nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
Assigned by Linux
Sep 11, 2026
CVE-2026-89673Not yet scorednfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
Assigned by Linux
Sep 11, 2026
CVE-2026-89672Critical 9.1nfsd: gate nfs2 setacl by argp->mask
Assigned by Linux
Sep 11, 2026
CVE-2026-89671Critical 9.1nfsd: gate nfs3 setacl by argp->mask
Assigned by Linux
Sep 11, 2026
CVE-2026-89670High 7.8nfsd: hold rcu across localio cmpxchg retry
Assigned by Linux
Sep 11, 2026
CVE-2026-89669Critical 9.8nfsd: initialize copy-notify stateid before publishing it
Assigned by Linux
Sep 11, 2026
CVE-2026-89668High 7.8nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()
Assigned by Linux
Sep 11, 2026
CVE-2026-89667High 8.1nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache
Assigned by Linux
Sep 11, 2026
CVE-2026-89666Not yet scorednfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops
Assigned by Linux
Sep 11, 2026
CVE-2026-89665High 8.2nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE
Assigned by Linux
Sep 11, 2026
CVE-2026-89664High 7.5nfsd: release OPEN-decoded posix ACLs via op_release
Assigned by Linux
Sep 11, 2026
CVE-2026-89663High 8.8nfsd: revoke copy-notify stateids before dropping their reference
Assigned by Linux
Sep 11, 2026
CVE-2026-89662Critical 9.8NFSD: Prevent lock owner use-after-free during client teardown
Assigned by Linux
Sep 11, 2026
CVE-2026-89661Not yet scoredNFSD: Prevent post-shutdown use-after-free in unlock_filesystem
Assigned by Linux
Sep 11, 2026
CVE-2026-89660Critical 9.8NFSD: Prevent client use-after-free during admin state revocation
Assigned by Linux
Sep 11, 2026
CVE-2026-89659Critical 9.8NFSD: Prevent client use-after-free during delegation revoke
Assigned by Linux
Sep 11, 2026
PreviousPage 46 of 154Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.