CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,897 CVEs published, 348 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,897
Show in the list
Critical, last 7 days
348
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2851 to 2900PreviousPage 58 of 91Next
CVESeverityTitlePublished
CVE-2026-23105High 7.8net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
Assigned by Linux
Feb 4, 2026
CVE-2026-23103High 7.8ipvlan: Make the addrs_lock be per port
Assigned by Linux
Feb 4, 2026
CVE-2026-23101Medium 4.7leds: led-class: Only Add LED to leds_list when it is fully ready
Assigned by Linux
Feb 4, 2026
CVE-2026-23100Medium 5.5mm/hugetlb: fix hugetlb_pmd_shared()
Assigned by Linux
Feb 4, 2026
CVE-2026-23099High 7.1bonding: limit BOND_MODE_8023AD to Ethernet devices
Assigned by Linux
Feb 4, 2026
CVE-2026-23097Medium 5.5migrate: correct lock ordering for hugetlb file folios
Assigned by Linux
Feb 4, 2026
CVE-2026-23095High 7.5gue: Fix skb memleak with inner IP protocol 0.
Assigned by Linux
Feb 4, 2026
CVE-2026-23091Medium 5.5intel_th: fix device leak on output open()
Assigned by Linux
Feb 4, 2026
CVE-2026-23089High 7.8ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
Assigned by Linux
Feb 4, 2026
CVE-2026-23087Medium 5.5scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
Assigned by Linux
Feb 4, 2026
CVE-2026-23086Medium 5.5vsock/virtio: cap TX credit to local buffer size
Assigned by Linux
Feb 4, 2026
CVE-2026-23085Medium 5.5irqchip/gic-v3-its: Avoid truncating memory addresses
Assigned by Linux
Feb 4, 2026
CVE-2026-23084Medium 5.5be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
Assigned by Linux
Feb 4, 2026
CVE-2026-23083High 7.8fou: Don't allow 0 for FOU_ATTR_IPPROTO.
Assigned by Linux
Feb 4, 2026
CVE-2026-23076High 7.1ALSA: ctxfi: Fix potential OOB access in audio mixer handling
Assigned by Linux
Feb 4, 2026
CVE-2026-23074High 7.8net/sched: Enforce that teql can only be used as root qdisc
Assigned by Linux
Feb 4, 2026
CVE-2026-23073High 7.8wifi: rsi: Fix memory corruption due to not set vif driver data size
Assigned by Linux
Feb 4, 2026
CVE-2026-23071Medium 4.7regmap: Fix race condition in hwspinlock irqsave routine
Assigned by Linux
Feb 4, 2026
CVE-2026-23069Medium 5.5vsock/virtio: fix potential underflow in virtio_transport_get_credit()
Assigned by Linux
Feb 4, 2026
CVE-2026-23066High 7.8rxrpc: Fix recvmsg() unconditional requeue
Assigned by Linux
Feb 4, 2026
CVE-2026-23061Medium 5.5can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
Assigned by Linux
Feb 4, 2026
CVE-2026-23060Medium 5.5crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
Assigned by Linux
Feb 4, 2026
CVE-2026-23025High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: prevent pcp corruption with SMP=n The kernel test robot has reported: BUG: spinlock trylock failure on UP on CPU#0,…Jan 31, 2026
CVE-2026-23024Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmod The flow steering list maintains entries that are added and removed as ethtool cr…Jan 31, 2026
CVE-2026-23023Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vport_rel() Free vport->rx_ptype_lkup in idpf_vport_rel() to avoid leaking memory during a reset.Jan 31, 2026
CVE-2026-23022Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vc_core_deinit() Make sure to free hw->lan_regs.Jan 31, 2026
CVE-2026-23020Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: 3com: 3c59x: fix possible null dereference in vortex_probe1() pdev can be null and free_ring: can be called in 1297 with a nul…Jan 31, 2026
CVE-2026-23018Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfs_read_locked_inode() In btrfs_read_locked_inode() we are calling btrfs_…Jan 31, 2026
CVE-2026-23017Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the init_task on load If the init_task fails during a driver load, we end up without vports and netdevs…Jan 31, 2026
CVE-2026-23016Medium 5.5In the Linux kernel, the following vulnerability has been resolved: inet: frags: drop fraglist conntrack references Jakub added a warning in nf_conntrack_cleanup_net_list() to make debugging leaked s…Jan 31, 2026
CVE-2026-23015Medium 5.5In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix reference leak in gpio_mpsse_probe() error paths The reference obtained by calling usb_get_dev() is not released i…Jan 31, 2026
CVE-2025-71188Medium 5.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix device leak on route allocation Make sure to drop the reference taken when looking up the DMA mux pl…Jan 31, 2026
CVE-2025-71187Medium 5.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: fix device leak on probe failure Make sure to drop the reference taken when looking up the ICU device durin…Jan 31, 2026
CVE-2025-71184Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL dereference on root when tracing inode eviction When evicting an inode the first thing we do is to setup tracing fo…Jan 31, 2026
CVE-2025-71181Medium 5.5In the Linux kernel, the following vulnerability has been resolved: rust_binder: remove spin_lock() in rust_shrink_free_page() When forward-porting Rust Binder to 6.18, I neglected to take commit fb5…Jan 31, 2026
CVE-2025-71180Medium 5.5In the Linux kernel, the following vulnerability has been resolved: counter: interrupt-cnt: Drop IRQF_NO_THREAD flag An IRQ handler can either be IRQF_NO_THREAD or acquire spinlock_t, as CONFIG_PROVE…Jan 31, 2026
CVE-2026-23026Medium 5.5dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
Assigned by Linux
Jan 31, 2026
CVE-2025-71191Medium 5.5dmaengine: at_hdmac: fix device leak on of_dma_xlate()
Assigned by Linux
Jan 31, 2026
CVE-2025-71190Medium 5.5dmaengine: bcm-sba-raid: fix device leak on probe
Assigned by Linux
Jan 31, 2026
CVE-2025-71189Medium 5.5dmaengine: dw: dmamux: fix OF node leak on route allocation failure
Assigned by Linux
Jan 31, 2026
CVE-2025-71186Medium 5.5dmaengine: stm32: dmamux: fix device leak on route allocation
Assigned by Linux
Jan 31, 2026
CVE-2025-71185Medium 5.5dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
Assigned by Linux
Jan 31, 2026
CVE-2026-23021Medium 5.5net: usb: pegasus: fix memory leak in update_eth_regs_async()
Assigned by Linux
Jan 31, 2026
CVE-2026-23019Medium 5.5net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
Assigned by Linux
Jan 31, 2026
CVE-2025-71183Critical 9.1btrfs: always detect conflicting inodes when logging inode refs
Assigned by Linux
Jan 31, 2026
CVE-2025-71182Medium 5.5can: j1939: make j1939_session_activate() fail if device is no longer registered
Assigned by Linux
Jan 31, 2026
CVE-2026-23014Medium 5.5In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimer_try_to_cancel() in perf_swevent_cancel_hrtimer() it a…Jan 28, 2026
CVE-2026-23012High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: remove call_control in inactive contexts If damon_call() is executed against a DAMON context that is not running, th…Jan 25, 2026
CVE-2026-23009Medium 5.5In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhci_sideband_remove_endpoint() incorrecly assumes tha…Jan 25, 2026
CVE-2026-23008Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface back…Jan 25, 2026
PreviousPage 58 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.