CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,848 CVEs published, 323 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,848
Show in the list
Critical, last 7 days
323
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2451 to 2500PreviousPage 50 of 91Next
CVESeverityTitlePublished
CVE-2026-23433Medium 5.5In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix null pointer dereference when restoring bandwidth counters When an MSC supporting memory bandwidth monitoring is brou…Apr 3, 2026
CVE-2026-23432High 7.8In the Linux kernel, the following vulnerability has been resolved: mshv: Fix use-after-free in mshv_map_user_memory error path In the error path of mshv_map_user_memory(), calling vfree() directly o…Apr 3, 2026
CVE-2026-23431Medium 5.5In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is allocated by spi_alloc_target()/spi_alloc_ho…Apr 3, 2026
CVE-2026-23430Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causing a memory leak.Apr 3, 2026
CVE-2026-23429Medium 5.5In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommu_sva_unbind_device() domain->mm->iommu_mm can be freed by iommu_domain_free(): iommu_domain_free() mmd…Apr 3, 2026
CVE-2026-23427High 7.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parse_durable_handle_context() unconditionally assigns dh_inf…Apr 3, 2026
CVE-2026-31403High 7.8NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
Assigned by Linux
Apr 3, 2026
CVE-2026-31402Critical 9.8nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
Assigned by Linux
Apr 3, 2026
CVE-2026-31401High 7.8HID: bpf: prevent buffer overflow in hid_hw_request
Assigned by Linux
Apr 3, 2026
CVE-2026-31396High 7.8net: macb: fix use-after-free access to PTP clock
Assigned by Linux
Apr 3, 2026
CVE-2026-31393High 8.1Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
Assigned by Linux
Apr 3, 2026
CVE-2026-31392High 8.1smb: client: fix krb5 mount with username option
Assigned by Linux
Apr 3, 2026
CVE-2026-31391Medium 5.5crypto: atmel-sha204a - Fix OOM ->tfm_count leak
Assigned by Linux
Apr 3, 2026
CVE-2026-31389High 7.8spi: fix use-after-free on controller registration failure
Assigned by Linux
Apr 3, 2026
CVE-2026-23475Medium 5.5spi: fix statistics allocation
Assigned by Linux
Apr 3, 2026
CVE-2026-23474Medium 5.5mtd: Avoid boot crash in RedBoot partition table parser
Assigned by Linux
Apr 3, 2026
CVE-2026-23466High 7.8drm/xe: Open-code GGTT MMIO access protection
Assigned by Linux
Apr 3, 2026
CVE-2026-23463Medium 4.7soc: fsl: qbman: fix race condition in qman_destroy_fq
Assigned by Linux
Apr 3, 2026
CVE-2026-23462High 8.8Bluetooth: HIDP: Fix possible UAF
Assigned by Linux
Apr 3, 2026
CVE-2026-23461High 8.8Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
Assigned by Linux
Apr 3, 2026
CVE-2026-23458High 7.8netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
Assigned by Linux
Apr 3, 2026
CVE-2026-23457High 8.6netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
Assigned by Linux
Apr 3, 2026
CVE-2026-23456High 8.2netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
Assigned by Linux
Apr 3, 2026
CVE-2026-23455Critical 9.1netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
Assigned by Linux
Apr 3, 2026
CVE-2026-23454High 7.0net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
Assigned by Linux
Apr 3, 2026
CVE-2026-23452Medium 4.7PM: runtime: Fix a race condition related to device removal
Assigned by Linux
Apr 3, 2026
CVE-2026-23450Critical 9.8net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
Assigned by Linux
Apr 3, 2026
CVE-2026-23449High 7.8net/sched: teql: Fix double-free in teql_master_xmit
Assigned by Linux
Apr 3, 2026
CVE-2026-23446Medium 5.5net: usb: aqc111: Do not perform PM inside suspend callback
Assigned by Linux
Apr 3, 2026
CVE-2026-23445High 7.8igc: fix page fault in XDP TX timestamps handling
Assigned by Linux
Apr 3, 2026
CVE-2026-23444High 7.8wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
Assigned by Linux
Apr 3, 2026
CVE-2026-23442Medium 5.5ipv6: add NULL checks for idev in SRv6 paths
Assigned by Linux
Apr 3, 2026
CVE-2026-23440High 7.5net/mlx5e: Fix race condition during IPSec ESN update
Assigned by Linux
Apr 3, 2026
CVE-2026-23439Medium 5.5udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
Assigned by Linux
Apr 3, 2026
CVE-2026-23438Medium 5.5net: mvpp2: guard flow control update with global_tx_fc in buffer switching
Assigned by Linux
Apr 3, 2026
CVE-2026-23437High 7.8net: shaper: protect late read accesses to the hierarchy
Assigned by Linux
Apr 3, 2026
CVE-2026-23434High 7.1mtd: rawnand: serialize lock/unlock against other NAND operations
Assigned by Linux
Apr 3, 2026
CVE-2026-23428Critical 9.8ksmbd: fix use-after-free of share_conf in compound request
Assigned by Linux
Apr 3, 2026
CVE-2026-23426Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() The logicvc_drm_config_parse() function calls of_get_chil…Apr 3, 2026
CVE-2026-23425Medium 5.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix ID register initialization for non-protected pKVM guests In protected mode, the hypervisor maintains a separate ins…Apr 3, 2026
CVE-2026-23424Medium 5.5In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determine the valid payload s…Apr 3, 2026
CVE-2026-23423Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: free pages on error in btrfs_uring_read_extent() In this function the 'pages' object is never freed in the hopes that it is…Apr 3, 2026
CVE-2026-23421Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/configfs: Free ctx_restore_mid_bb in release ctx_restore_mid_bb memory is allocated in wa_bb_store(), but xe_config_device_r…Apr 3, 2026
CVE-2026-23420Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl->mutex is locked before it is unlocked.Apr 3, 2026
CVE-2026-23419Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rds_tcp_tune syzbot reported a circular locking dependency in rds_tcp_tune() where sk_n…Apr 3, 2026
CVE-2026-23418Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Fix leak on xa_store failure Free the newly allocated entry when xa_store() fails to avoid a memory leak on the erro…Apr 3, 2026
CVE-2026-23422High 7.8dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
Assigned by Linux
Apr 3, 2026
CVE-2026-23417Medium 5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBE_MEM32 stores BPF_ST | BPF_PROBE_MEM32 immediate stores are not handled by bpf_jit_blind_insn()…Apr 2, 2026
CVE-2026-23416Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in curr_end, and then upon iterating to…Apr 2, 2026
CVE-2026-23415High 7.8futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()
Assigned by Linux
Apr 2, 2026
PreviousPage 50 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.