CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,654 CVEs published, 316 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,654
Show in the list
Critical, last 7 days
316
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,847 CVEs, showing 2451 to 2500PreviousPage 50 of 177Next
CVESeverityTitlePublished
CVE-2026-89509Not yet scoredRDMA/ionic: Embed counter driver data in rdma_counter allocation
Assigned by Linux
Sep 11, 2026
CVE-2026-89508High 7.8RDMA/ucma: Lock the handler in ucma_set_ib_path()
Assigned by Linux
Sep 11, 2026
CVE-2026-89507High 7.8RDMA/ucma: Lock the handler in ucma_write_cm_event()
Assigned by Linux
Sep 11, 2026
CVE-2026-89506Not yet scoredRDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR
Assigned by Linux
Sep 11, 2026
CVE-2026-89505Not yet scoredRDMA/uverbs: Guard legacy bundles without method_elm
Assigned by Linux
Sep 11, 2026
CVE-2026-89504High 8.4regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer
Assigned by Linux
Sep 11, 2026
CVE-2026-89503High 7.8ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()
Assigned by Linux
Sep 11, 2026
CVE-2026-89502Not yet scoredring-buffer: Free cpu_buffer::free_page with subbuf_order
Assigned by Linux
Sep 11, 2026
CVE-2026-89501High 7.8ring-buffer: Hold cpu_buffer::lock when resizing a subbuf
Assigned by Linux
Sep 11, 2026
CVE-2026-89500High 7.8ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page
Assigned by Linux
Sep 11, 2026
CVE-2026-89499High 7.8ring-buffer: Stop remote reader update when page swap fails
Assigned by Linux
Sep 11, 2026
CVE-2026-89498Not yet scoredorangefs: fix double-free of trailer_buf on readdir copy failure
Assigned by Linux
Sep 11, 2026
CVE-2026-89497High 7.8orangefs: skip leading spaces before parsing client debug masks
Assigned by Linux
Sep 11, 2026
CVE-2026-89496Not yet scoredocfs2: always run deallocs on copy-on-write completion
Assigned by Linux
Sep 11, 2026
CVE-2026-89495Critical 9.8ocfs2: bound namelen in dlm_migrate_request_handler
Assigned by Linux
Sep 11, 2026
CVE-2026-89494Critical 9.8ocfs2: validate lengths in dlm_mig_lockres_handler
Assigned by Linux
Sep 11, 2026
CVE-2026-89493High 8.8ocfs2: validate rl_used against rl_count in refcount block validator
Assigned by Linux
Sep 11, 2026
CVE-2026-89492Critical 9.8ocfs2: validate directory-index entry counts when reading metadata
Assigned by Linux
Sep 11, 2026
CVE-2026-89491Not yet scoredocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()
Assigned by Linux
Sep 11, 2026
CVE-2026-89490Not yet scoredocfs2: fix readdir position truncation on 32-bit kernels
Assigned by Linux
Sep 11, 2026
CVE-2026-89489High 7.8openrisc: fix arbitrary kernel memory access via or1k_atomic syscall
Assigned by Linux
Sep 11, 2026
CVE-2026-89488High 7.8openvswitch: Fix CT limit teardown use-after-free
Assigned by Linux
Sep 11, 2026
CVE-2026-89487High 7.8openvswitch: only skb_tx_error() a packet we are about to drop
Assigned by Linux
Sep 11, 2026
CVE-2026-89486High 7.8ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()
Assigned by Linux
Sep 11, 2026
CVE-2026-89485Critical 9.8lockd: pin next file across nlm_inspect_file lock-drop
Assigned by Linux
Sep 11, 2026
CVE-2026-89484Not yet scoredlockd: fix NULL dereference on lockowner allocation failure
Assigned by Linux
Sep 11, 2026
CVE-2026-89483High 7.5nvme: zero the discard fallback page
Assigned by Linux
Sep 11, 2026
CVE-2026-89482Critical 9.8nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone
Assigned by Linux
Sep 11, 2026
CVE-2026-89481High 7.5nvme-tcp: fix host memory disclosure on R2T for a read command
Assigned by Linux
Sep 11, 2026
CVE-2026-89480High 7.5nvme-tcp: reject a read that transferred too few bytes
Assigned by Linux
Sep 11, 2026
CVE-2026-89479Critical 9.8sctp: stop processing a packet once its association is deleted
Assigned by Linux
Sep 11, 2026
CVE-2026-89478Critical 9.8sctp: drop a chunk if its transport was removed
Assigned by Linux
Sep 11, 2026
CVE-2026-89477High 7.5sctp: fix NULL deref on untransmitted RECONF completion
Assigned by Linux
Sep 11, 2026
CVE-2026-89476High 7.5sctp: fix stream->outcnt underflow on duplicate RECONF responses
Assigned by Linux
Sep 11, 2026
CVE-2026-89475Not yet scoredpower: supply: bq24257: fix use-after-free on remove
Assigned by Linux
Sep 11, 2026
CVE-2026-89474Not yet scoredpower: supply: bq256xx: drain usb_work before freeing the charger
Assigned by Linux
Sep 11, 2026
CVE-2026-89473Not yet scoredpower: supply: bq25890: Fix power_supply reference leak
Assigned by Linux
Sep 11, 2026
CVE-2026-89472High 7.8power: supply: charger-manager: register regulators before exposing sysfs
Assigned by Linux
Sep 11, 2026
CVE-2026-89471High 8.4power: supply: cros_usbpd-charger: bound the EC-reported port count
Assigned by Linux
Sep 11, 2026
CVE-2026-89470High 8.4power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS
Assigned by Linux
Sep 11, 2026
CVE-2026-89469High 8.4power: supply: lp8727: fix use-after-free in lp8727_release_irq()
Assigned by Linux
Sep 11, 2026
CVE-2026-89468Not yet scoredpower: supply: lp8788-charger: fix use-after-free on remove
Assigned by Linux
Sep 11, 2026
CVE-2026-89467Not yet scoredpower: supply: qcom_battmgr: fix use-after-free
Assigned by Linux
Sep 11, 2026
CVE-2026-89466High 7.7power: supply: qcom_battmgr: terminate the strings from firmware
Assigned by Linux
Sep 11, 2026
CVE-2026-89465High 8.4power: supply: rt9455: quiesce delayed work before teardown
Assigned by Linux
Sep 11, 2026
CVE-2026-89464Not yet scoredpower: supply: twl4030_charger: cancel workers via devm
Assigned by Linux
Sep 11, 2026
CVE-2026-89463Not yet scoredpower: supply: ucs1002: fix use-after-free on remove
Assigned by Linux
Sep 11, 2026
CVE-2026-89462Not yet scoredpower: supply: max17040: propagate register read errors
Assigned by Linux
Sep 11, 2026
CVE-2026-89461Not yet scoredpower: supply: max17040: synchronize work cancellation on suspend
Assigned by Linux
Sep 11, 2026
CVE-2026-89460Not yet scoreds390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks
Assigned by Linux
Sep 11, 2026
PreviousPage 50 of 177Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.