CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,854 CVEs published, 323 critical, and 14 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,854
Show in the list
Critical, last 7 days
323
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2401 to 2450PreviousPage 49 of 91Next
CVESeverityTitlePublished
CVE-2026-31430High 7.1In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extensions Leo reports an out-of-bounds access when parsing a certificate with empty B…Apr 20, 2026
CVE-2026-31429Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKB_SMALL_HEAD_CACHE_SIZE is intentionally set to a non-power-of-2 valu…Apr 20, 2026
CVE-2026-31425Medium 5.5In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the rds_ib_connection from conn->c_t…Apr 13, 2026
CVE-2026-31420Medium 5.5In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test() accept the user-supplied i…Apr 13, 2026
CVE-2026-31428Medium 5.5netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
Assigned by Linux
Apr 13, 2026
CVE-2026-31427Medium 5.5netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
Assigned by Linux
Apr 13, 2026
CVE-2026-31426High 7.0ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
Assigned by Linux
Apr 13, 2026
CVE-2026-31424Medium 5.5netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
Assigned by Linux
Apr 13, 2026
CVE-2026-31423Medium 5.5net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
Assigned by Linux
Apr 13, 2026
CVE-2026-31422Medium 5.5net/sched: cls_flow: fix NULL pointer dereference on shared blocks
Assigned by Linux
Apr 13, 2026
CVE-2026-31421Medium 5.5net/sched: cls_fw: fix NULL pointer dereference on shared blocks
Assigned by Linux
Apr 13, 2026
CVE-2026-31419High 7.8net: bonding: fix use-after-free in bond_xmit_broadcast()
Assigned by Linux
Apr 13, 2026
CVE-2026-31418Medium 5.5netfilter: ipset: drop logically empty buckets in mtype_del
Assigned by Linux
Apr 13, 2026
CVE-2026-31417High 7.5net/x25: Fix overflow when accumulating packets
Assigned by Linux
Apr 13, 2026
CVE-2026-31416Medium 5.5netfilter: nfnetlink_log: account for netlink header size
Assigned by Linux
Apr 13, 2026
CVE-2026-31415Medium 5.5ipv6: avoid overflows in ip6_datagram_send_ctl()
Assigned by Linux
Apr 13, 2026
CVE-2026-31414Critical 9.8netfilter: nf_conntrack_expect: use expect->helper
Assigned by Linux
Apr 13, 2026
CVE-2026-31413High 7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR maybe_fork_scalars() is called for both BPF_AND and BPF_OR when…Apr 12, 2026
CVE-2026-31412Medium 5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() The `check_command_size_in_blocks()`…Apr 10, 2026
CVE-2026-31411Medium 5.5net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
Assigned by Linux
Apr 8, 2026
CVE-2026-31410Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Use sb->s_uuid for a proper volume identifier as the primary choice.Apr 6, 2026
CVE-2026-31409High 8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset conn->binding on failed binding request When a multichannel SMB2_SESSION_SETUP request with SMB2_SESSION_REQ_FLAG_BIND…Apr 6, 2026
CVE-2026-31406High 7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() After cancel_delayed_work_sync() is called from xfrm_nat_k…Apr 6, 2026
CVE-2026-31405Critical 9.8In the Linux kernel, the following vulnerability has been resolved: media: dvb-net: fix OOB access in ULE extension header tables The ule_mandatory_ext_handlers[] and ule_optional_ext_handlers[] tabl…Apr 6, 2026
CVE-2026-31408High 8.8Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
Assigned by Linux
Apr 6, 2026
CVE-2026-31407High 7.1netfilter: conntrack: add missing netlink policy validations
Assigned by Linux
Apr 6, 2026
CVE-2026-31400Medium 5.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_request leak in cache_release When a reader's file descriptor is closed while in the middle of reading a cache_re…Apr 3, 2026
CVE-2026-31399High 7.8In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix potential use after free in asynchronous initialization Dingisoul with KASAN reports a use after free if device_add…Apr 3, 2026
CVE-2026-31398High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix incorrect pte restoration for lazyfree folios We batch unmap anonymous lazyfree folios by folio_unmap_pte_batch.Apr 3, 2026
CVE-2026-31397High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() move_pages_huge_pmd() handles UFFDIO_MOVE for both normal THPs and h…Apr 3, 2026
CVE-2026-31395High 7.1In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler The ASYNC_EVENT_CMPL_EVENT_ID_DBG_BUF_PRODUCER handler in bnxt_asyn…Apr 3, 2026
CVE-2026-31394Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations ieee80211_chan_bw_change() iterates all stations and accesses…Apr 3, 2026
CVE-2026-31390Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xe_vm_madvise_ioctl When check_bo_args_are_sane() validation fails, jump to the new free_vmas cleanup la…Apr 3, 2026
CVE-2026-23472Medium 5.5In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write() behave inconsistently when xmit_…Apr 3, 2026
CVE-2026-23470Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix deadlock in soft reset sequence The soft reset sequence is currently executed from the threaded IRQ handler, h…Apr 3, 2026
CVE-2026-23469Medium 4.7In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Synchronize interrupts before suspending the GPU The runtime PM suspend callback doesn't know whether the IRQ hand…Apr 3, 2026
CVE-2026-23468Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrary number of BO list entries via…Apr 3, 2026
CVE-2026-23467Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Fix an unlikely NULL pointer deference at probe intel_dmc_update_dc6_allowed_count() oopses when DMC hasn't been init…Apr 3, 2026
CVE-2026-23465Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: log new dentries when logging parent dir of a conflicting inode If we log the parent directory of a conflicting inode, we ar…Apr 3, 2026
CVE-2026-23464Medium 5.5In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node()…Apr 3, 2026
CVE-2026-23460Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect syzkaller reported a bug [1], and the reproducer is avail…Apr 3, 2026
CVE-2026-23459High 8.2In the Linux kernel, the following vulnerability has been resolved: ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS Blamed commits forgot that vxlan/geneve use udp_tunnel[6]_xmit_sk…Apr 3, 2026
CVE-2026-23453High 7.5In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode Page recycling was removed from the XDP_DROP path in emac…Apr 3, 2026
CVE-2026-23451High 7.5In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_header_parse() can loop if a stack of two bonding devices is s…Apr 3, 2026
CVE-2026-23448High 7.8In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check cdc_ncm_rx_verify_ndp16() validates that the NDP header and its DPE…Apr 3, 2026
CVE-2026-23447High 7.8In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check The same bounds-check bug fixed for NDP16 in the previous patch also…Apr 3, 2026
CVE-2026-23443Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix After commi f132e089fe89 ("ACPI: processor: Fix NULL-pointer derefe…Apr 3, 2026
CVE-2026-23441Medium 4.7In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent concurrent access to IPSec ASO context The query or updating IPSec offload object is through Access ASO WQE.Apr 3, 2026
CVE-2026-23436Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops (pre- callbacks) and take a ref…Apr 3, 2026
CVE-2026-23435Medium 5.5In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86_pmu_enable() A production AMD EPYC system crashed with a NULL pointer dereference…Apr 3, 2026
PreviousPage 49 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.