CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,851 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,851
Show in the list
Critical, last 7 days
323
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux. Show all products

7,688 CVEs, showing 2301 to 2350PreviousPage 47 of 154Next
CVESeverityTitlePublished
CVE-2026-89658Critical 9.8NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
Assigned by Linux
Sep 11, 2026
CVE-2026-89657High 7.5libceph: validate OSD extent maps before cursor advance
Assigned by Linux
Sep 11, 2026
CVE-2026-89656Critical 9.8libceph: reject buckets with mismatched CRUSH ids
Assigned by Linux
Sep 11, 2026
CVE-2026-89655Critical 9.8ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
Assigned by Linux
Sep 11, 2026
CVE-2026-89654Critical 9.8ceph: fix UAF in check_new_map() on session freed during unlock
Assigned by Linux
Sep 11, 2026
CVE-2026-89653Critical 9.8ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
Assigned by Linux
Sep 11, 2026
CVE-2026-89652Critical 9.8ceph: bound copied dentry name length in NFS export get_name
Assigned by Linux
Sep 11, 2026
CVE-2026-89651Critical 9.8ceph: bound MDSCapAuth path and fs_name decode in handle_session()
Assigned by Linux
Sep 11, 2026
CVE-2026-89650Critical 9.1ceph: bound num_export_targets array for mds info v2/v3
Assigned by Linux
Sep 11, 2026
CVE-2026-89649Critical 9.1ceph: bound xattr value length in __build_xattrs()
Assigned by Linux
Sep 11, 2026
CVE-2026-89648High 7.5ceph: cap delegated inode count in ceph_parse_deleg_inos()
Assigned by Linux
Sep 11, 2026
CVE-2026-89647High 7.5ceph: do not repeat ceph_trim_dentries() if no progress possible
Assigned by Linux
Sep 11, 2026
CVE-2026-89646High 7.8ceph: fix leaked inode reference on writeback abort at umount
Assigned by Linux
Sep 11, 2026
CVE-2026-89645Not yet scoredbtrfs: drop recovered reloc root refs on recovery failure
Assigned by Linux
Sep 11, 2026
CVE-2026-89644Not yet scoredbtrfs: fix extent map leak in NOCOW direct I/O write
Assigned by Linux
Sep 11, 2026
CVE-2026-89643Critical 9.8audit: avoid dropping live tree ref on fsnotify rule autoremove
Assigned by Linux
Sep 11, 2026
CVE-2026-89642Not yet scoredcifs: call pagecache_isize_extended() in cifs_setsize() when extending
Assigned by Linux
Sep 11, 2026
CVE-2026-89641High 7.8cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()
Assigned by Linux
Sep 11, 2026
CVE-2026-89640High 7.1cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0
Assigned by Linux
Sep 11, 2026
CVE-2026-89639High 7.1cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC
Assigned by Linux
Sep 11, 2026
CVE-2026-89638High 7.8smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions
Assigned by Linux
Sep 11, 2026
CVE-2026-89637Critical 9.8smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2
Assigned by Linux
Sep 11, 2026
CVE-2026-89636Critical 9.8smb: client: clear ce->tgthint in free_tgts()
Assigned by Linux
Sep 11, 2026
CVE-2026-89635Critical 9.8ksmbd: only rebind the reopened file's own oplock on durable reconnect
Assigned by Linux
Sep 11, 2026
CVE-2026-89634Critical 9.1smb: client: fix ALIGN() overflow in symlink_data() error context loop
Assigned by Linux
Sep 11, 2026
CVE-2026-89633Critical 9.8smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
Assigned by Linux
Sep 11, 2026
CVE-2026-89632High 8.2smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()
Assigned by Linux
Sep 11, 2026
CVE-2026-89631Critical 9.1smb: client: reject a tree connect response whose byte count is too small
Assigned by Linux
Sep 11, 2026
CVE-2026-89630Critical 9.1smb: client: restore the data_offset bound in is_valid_oplock_break()
Assigned by Linux
Sep 11, 2026
CVE-2026-89629Not yet scoredHID: corsair-void: Check size of status and firmware events before reading them
Assigned by Linux
Sep 11, 2026
CVE-2026-89628Not yet scoredHID: picolcd: clamp eeprom debugfs read to bytes actually received
Assigned by Linux
Sep 11, 2026
CVE-2026-89627Not yet scoredHID: roccat: free buffered reports when destroying device
Assigned by Linux
Sep 11, 2026
CVE-2026-89626High 8.8HID: sensor: custom: Fix field sysfs group cleanup on failure
Assigned by Linux
Sep 11, 2026
CVE-2026-89625Not yet scoredHID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind
Assigned by Linux
Sep 11, 2026
CVE-2026-89624High 7.8HID: universal-pidff: stop the device when force-feedback init fails
Assigned by Linux
Sep 11, 2026
CVE-2026-89623Not yet scoredHID: mcp2221: stop device IO before hid_hw_stop
Assigned by Linux
Sep 11, 2026
CVE-2026-89622High 7.8HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes
Assigned by Linux
Sep 11, 2026
CVE-2026-89621Not yet scoredHID: mcp2221: validate report size in mcp2221_raw_event()
Assigned by Linux
Sep 11, 2026
CVE-2026-89620High 7.8HID: intel-thc-hid: intel-quickspi: validate report size before copy
Assigned by Linux
Sep 11, 2026
CVE-2026-89619High 7.8HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer
Assigned by Linux
Sep 11, 2026
CVE-2026-89618Not yet scoredeventfs: Initialize ei->children and ei->list in init_ei()
Assigned by Linux
Sep 11, 2026
CVE-2026-89617High 7.8fs/ntfs3: validate dirty page table on log replay
Assigned by Linux
Sep 11, 2026
CVE-2026-89616High 7.5fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()
Assigned by Linux
Sep 11, 2026
CVE-2026-89615High 8.4fs/ntfs3: bound page_lcns[] index by the log record
Assigned by Linux
Sep 11, 2026
CVE-2026-89614Critical 9.8ntfs: bound the free-cluster bitmap scan to the volume
Assigned by Linux
Sep 11, 2026
CVE-2026-89613Critical 9.8ntfs: reject invalid empty mapping pairs
Assigned by Linux
Sep 11, 2026
CVE-2026-89612Critical 9.8ntfs: reject invalid MFT LCNs from boot sector
Assigned by Linux
Sep 11, 2026
CVE-2026-89611Critical 9.8ntfs: validate non-resident attribute offsets
Assigned by Linux
Sep 11, 2026
CVE-2026-89610Critical 9.8ntfs: verify run length exceeding volume boundary
Assigned by Linux
Sep 11, 2026
CVE-2026-89609High 7.8ecryptfs: hold msg ctx list lock when cleaning daemon queue
Assigned by Linux
Sep 11, 2026
PreviousPage 47 of 154Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.