CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,851 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,851
Show in the list
Critical, last 7 days
323
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2351 to 2400PreviousPage 48 of 91Next
CVESeverityTitlePublished
CVE-2026-31438Medium 5.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators When a process crashes and the kernel writes a core dump to a 9…Apr 22, 2026
CVE-2026-31437Medium 5.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry When a write subrequest is marked NETFS_SREQ_NEED_RETRY, t…Apr 22, 2026
CVE-2026-31434Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group space_info When create_space_info_sub_group() allocates elements of space_info->sub_g…Apr 22, 2026
CVE-2026-31528High 7.8perf: Make sure to use pmu_ctx->pmu for groups
Assigned by Linux
Apr 22, 2026
CVE-2026-31525High 7.8bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
Assigned by Linux
Apr 22, 2026
CVE-2026-31521Medium 5.5module: Fix kernel panic when a symbol st_shndx is out of bounds
Assigned by Linux
Apr 22, 2026
CVE-2026-31518Medium 5.5esp: fix skb leak with espintcp and async crypto
Assigned by Linux
Apr 22, 2026
CVE-2026-31516High 7.8xfrm: prevent policy_hthresh.work from racing with netns teardown
Assigned by Linux
Apr 22, 2026
CVE-2026-31515Medium 5.5af_key: validate families in pfkey_send_migrate()
Assigned by Linux
Apr 22, 2026
CVE-2026-31513High 8.1Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
Assigned by Linux
Apr 22, 2026
CVE-2026-31511High 7.8Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
Assigned by Linux
Apr 22, 2026
CVE-2026-31508High 7.8net: openvswitch: Avoid releasing netdev before teardown completes
Assigned by Linux
Apr 22, 2026
CVE-2026-31507High 7.8net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
Assigned by Linux
Apr 22, 2026
CVE-2026-31505High 7.8iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
Assigned by Linux
Apr 22, 2026
CVE-2026-31504High 7.8net: fix fanout UAF in packet_release() via NETDEV_UP race
Assigned by Linux
Apr 22, 2026
CVE-2026-31503Medium 5.5udp: Fix wildcard bind conflict check when using hash2
Assigned by Linux
Apr 22, 2026
CVE-2026-31502High 7.8team: fix header_ops type confusion with non-Ethernet ports
Assigned by Linux
Apr 22, 2026
CVE-2026-31501Critical 9.8net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path
Assigned by Linux
Apr 22, 2026
CVE-2026-31500High 7.8Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
Assigned by Linux
Apr 22, 2026
CVE-2026-31496Medium 5.5netfilter: nf_conntrack_expect: skip expectations in other netns via proc
Assigned by Linux
Apr 22, 2026
CVE-2026-31495Medium 5.5netfilter: ctnetlink: use netlink policy range checks
Assigned by Linux
Apr 22, 2026
CVE-2026-31494High 7.8net: macb: use the current queue number for stats
Assigned by Linux
Apr 22, 2026
CVE-2026-31488High 7.8drm/amd/display: Do not skip unrelated mode changes in DSC validation
Assigned by Linux
Apr 22, 2026
CVE-2026-31486High 7.1hwmon: (pmbus/core) Protect regulator operations with mutex
Assigned by Linux
Apr 22, 2026
CVE-2026-31485High 7.8spi: spi-fsl-lpspi: fix teardown order issue (UAF)
Assigned by Linux
Apr 22, 2026
CVE-2026-31479High 7.8drm/xe: always keep track of remap prev/next
Assigned by Linux
Apr 22, 2026
CVE-2026-31478Critical 9.8ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
Assigned by Linux
Apr 22, 2026
CVE-2026-31474High 7.8can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
Assigned by Linux
Apr 22, 2026
CVE-2026-31473High 7.8media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
Assigned by Linux
Apr 22, 2026
CVE-2026-31470High 7.1virt: tdx-guest: Fix handling of host controlled 'quote' buffer length
Assigned by Linux
Apr 22, 2026
CVE-2026-31469High 7.8virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
Assigned by Linux
Apr 22, 2026
CVE-2026-31468High 7.8vfio/pci: Fix double free in dma-buf feature
Assigned by Linux
Apr 22, 2026
CVE-2026-31466Medium 4.7mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
Assigned by Linux
Apr 22, 2026
CVE-2026-31464High 8.1scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
Assigned by Linux
Apr 22, 2026
CVE-2026-31454High 7.8xfs: save ailp before dropping the AIL lock in push callbacks
Assigned by Linux
Apr 22, 2026
CVE-2026-31453High 7.8xfs: avoid dereferencing log items after push callbacks
Assigned by Linux
Apr 22, 2026
CVE-2026-31452High 7.8ext4: convert inline data to extents when truncate exceeds inline size
Assigned by Linux
Apr 22, 2026
CVE-2026-31451Medium 5.5ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
Assigned by Linux
Apr 22, 2026
CVE-2026-31450High 8.8ext4: publish jinode after initialization
Assigned by Linux
Apr 22, 2026
CVE-2026-31449High 7.8ext4: validate p_idx bounds in ext4_ext_correct_indexes
Assigned by Linux
Apr 22, 2026
CVE-2026-31448Critical 9.4ext4: avoid infinite loops caused by residual data
Assigned by Linux
Apr 22, 2026
CVE-2026-31447High 7.8ext4: reject mount if bigalloc with s_first_data_block != 0
Assigned by Linux
Apr 22, 2026
CVE-2026-31446High 7.8ext4: fix use-after-free in update_super_work when racing with umount
Assigned by Linux
Apr 22, 2026
CVE-2026-31442High 7.8dmaengine: idxd: Fix possible invalid memory access after FLR
Assigned by Linux
Apr 22, 2026
CVE-2026-31441Medium 5.5dmaengine: idxd: Fix memory leak when a wq is reset
Assigned by Linux
Apr 22, 2026
CVE-2026-31436Critical 9.8dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
Assigned by Linux
Apr 22, 2026
CVE-2026-31435High 8.8netfs: Fix read abandonment during retry
Assigned by Linux
Apr 22, 2026
CVE-2026-31433High 8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial OOB in get_file_all_info() for compound requests When a compound request consists of QUERY_DIRECTORY + QUERY_I…Apr 22, 2026
CVE-2026-31432High 8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound requests When a compound request such as READ + QUERY_INFO(Security) is received, a…Apr 22, 2026
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
PreviousPage 48 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.