CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,934 CVEs published, 353 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,934
Show in the list
Critical, last 7 days
353
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2551 to 2600PreviousPage 52 of 91Next
CVESeverityTitlePublished
CVE-2026-23342Medium 4.7In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_bulk_queue (bq) can be accessed concurrently by multip…Mar 25, 2026
CVE-2026-23338Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too smal…Mar 25, 2026
CVE-2026-23337Medium 5.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf_generic_parse_dt_config(), if parse_dt_cf…Mar 25, 2026
CVE-2026-23334Medium 5.5In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: handle short interrupt urb messages properly If an interrupt urb is received that is not the correct length, prop…Mar 25, 2026
CVE-2026-23332Medium 5.5In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix crash during turbo disable When the system is booted with kernel command line argument "nosmt" or "maxcp…Mar 25, 2026
CVE-2026-23331Medium 5.5In the Linux kernel, the following vulnerability has been resolved: udp: Unhash auto-bound connected sk from 4-tuple hash table when disconnected.Mar 25, 2026
CVE-2026-23330Medium 5.5In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete any pending data exchange before closing.Mar 25, 2026
CVE-2026-23329Medium 5.5In the Linux kernel, the following vulnerability has been resolved: libie: don't unroll if fwlog isn't supported The libie_fwlog_deinit() function can be called during driver unload even when firmwar…Mar 25, 2026
CVE-2026-23327High 7.1In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() cxl_payload_from_user_allowed() casts…Mar 25, 2026
CVE-2026-23326High 7.8In the Linux kernel, the following vulnerability has been resolved: xsk: Fix fragment node deletion to prevent buffer leak After commit b692bf9a7543 ("xsk: Get rid of xdp_buff_xsk::xskb_list_node"),…Mar 25, 2026
CVE-2026-23325High 7.1In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Check frame length before accessing the mgmt fields in…Mar 25, 2026
CVE-2026-23324Medium 5.5In the Linux kernel, the following vulnerability has been resolved: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern,…Mar 25, 2026
CVE-2026-23323High 7.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical…Mar 25, 2026
CVE-2026-23322High 7.8In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on sender error The analysis from Breno: When the SMI sender returns an error, smi_wor…Mar 25, 2026
CVE-2026-23316Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix ARM64 alignment fault in multipath hash seed `struct sysctl_fib_multipath_hash_seed` contains two u32 fields (user_s…Mar 25, 2026
CVE-2026-23314Medium 5.5In the Linux kernel, the following vulnerability has been resolved: regulator: bq257xx: Fix device node reference leak in bq257xx_reg_dt_parse_gpio() In bq257xx_reg_dt_parse_gpio(), if fails to get s…Mar 25, 2026
CVE-2026-23313Medium 5.5In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint assignment causes an obvious preempt count l…Mar 25, 2026
CVE-2026-23311Medium 5.5In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix invalid wait context in ctx_sched_in() Lockdep found a bug in the event scheduling when a pinned event was failed an…Mar 25, 2026
CVE-2026-23309Medium 5.5In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to trigger_data_free() If trigger_data_alloc() fails and returns NULL, event_hist_trigger_parse() j…Mar 25, 2026
CVE-2026-23308Medium 5.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: equilibrium: fix warning trace on load The callback functions 'eqbr_irq_mask()' and 'eqbr_irq_ack()' are also called in th…Mar 25, 2026
CVE-2026-23307Medium 5.5In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message When looking at the data in a USB urb, the actual_…Mar 25, 2026
CVE-2026-23306High 7.8In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free in pm8001_queue_command() Commit e29c47fe8946 ("scsi: pm8001: Simplify pm8001_task_exec()") refact…Mar 25, 2026
CVE-2026-23305High 7.1In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocket_probe When rocket_core_init() fails (as could be the case with EPROBE_DEFER), w…Mar 25, 2026
CVE-2026-23301Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add allocation failure check for Entity name Currently find_sdca_entity_iot() can allocate a string for the Entity name…Mar 25, 2026
CVE-2026-23299Medium 5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: purge error queues in socket destructors When TX timestamping is enabled via SO_TIMESTAMPING, SKBs may be queued into sk…Mar 25, 2026
CVE-2026-23298Medium 5.5In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop from zero-length messages If a broken ucan device gets a message with the message length field set to…Mar 25, 2026
CVE-2026-23297Medium 5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit().Mar 25, 2026
CVE-2026-23294High 7.0In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPT_RT On PREEMPT_RT kernels, the per-CPU xdp_dev_bulk_queue (bq) can be accessed concurrently by mu…Mar 25, 2026
CVE-2026-23289Medium 5.5In the Linux kernel, the following vulnerability has been resolved: IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Fix a user triggerable leak on the system call failure path.Mar 25, 2026
CVE-2026-23288High 7.8In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a command slot may be smaller than the size…Mar 25, 2026
CVE-2026-23286Medium 5.5In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix null-ptr-deref in lec_arp_clear_vccs syzkaller reported a null-ptr-deref in lec_arp_clear_vccs().Mar 25, 2026
CVE-2026-23285Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMPLETED_WITH_ERROR is passed to __req_mod()…Mar 25, 2026
CVE-2026-23283Medium 5.5In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix PM runtime reference leak in fp9931_hwmon_read() In fp9931_hwmon_read(), if regmap_read() failed, the functi…Mar 25, 2026
CVE-2026-23282Medium 5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to uninitialised var in smb2_unlink() If SMB2_open_init() or SMB2_close_init() fails (e.g.Mar 25, 2026
CVE-2026-23280High 7.8In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent ubuf size overflow The ubuf size calculation may overflow, resulting in an undersized allocation and possibl…Mar 25, 2026
CVE-2026-23395High 8.8Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
Assigned by Linux
Mar 25, 2026
CVE-2026-23392High 7.8netfilter: nf_tables: release flowtable after rcu grace period on error
Assigned by Linux
Mar 25, 2026
CVE-2026-23391High 7.8netfilter: xt_CT: drop pending enqueued packets on template removal
Assigned by Linux
Mar 25, 2026
CVE-2026-23389Medium 5.5ice: Fix memory leak in ice_set_ringparam()
Assigned by Linux
Mar 25, 2026
CVE-2026-23388High 7.1Squashfs: check metadata block offset is within range
Assigned by Linux
Mar 25, 2026
CVE-2026-23382Medium 5.5HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
Assigned by Linux
Mar 25, 2026
CVE-2026-23381Medium 5.5net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
Assigned by Linux
Mar 25, 2026
CVE-2026-23379Medium 5.5net/sched: ets: fix divide by zero in the offload path
Assigned by Linux
Mar 25, 2026
CVE-2026-23378High 7.8net/sched: act_ife: Fix metalist update behavior
Assigned by Linux
Mar 25, 2026
CVE-2026-23374Medium 5.5blktrace: fix __this_cpu_read/write in preemptible context
Assigned by Linux
Mar 25, 2026
CVE-2026-23372High 7.8nfc: rawsock: cancel tx_work before socket teardown
Assigned by Linux
Mar 25, 2026
CVE-2026-23370Medium 5.5platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
Assigned by Linux
Mar 25, 2026
CVE-2026-23368Medium 5.5net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
Assigned by Linux
Mar 25, 2026
CVE-2026-23367Medium 5.5wifi: radiotap: reject radiotap with unknown bits
Assigned by Linux
Mar 25, 2026
CVE-2026-23365Medium 5.5net: usb: kalmia: validate USB endpoints
Assigned by Linux
Mar 25, 2026
PreviousPage 52 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.