CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,886 CVEs published, 347 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,886
Show in the list
Critical, last 7 days
347
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2901 to 2950PreviousPage 59 of 91Next
CVESeverityTitlePublished
CVE-2026-23007Medium 5.5In the Linux kernel, the following vulnerability has been resolved: block: zero non-PI portion of auto integrity buffer The auto-generated integrity buffer for writes needs to be fully initialized be…Jan 25, 2026
CVE-2026-23006Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null pointer The "snd_soc_component" in "adcx140_priv" was only used once but never set.Jan 25, 2026
CVE-2026-23002Medium 5.5In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use __kernel_read() for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemap_…Jan 25, 2026
CVE-2026-23000Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5e_netdev_change_profile can fail to attach a new profile and can fail t…Jan 25, 2026
CVE-2026-22996Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv mlx5e_priv is an unstable structure that can be memset(0) if profile at…Jan 25, 2026
CVE-2026-23013High 7.0net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
Assigned by Linux
Jan 25, 2026
CVE-2026-23011Medium 5.5ipv4: ip_gre: make ipgre_header() robust
Assigned by Linux
Jan 25, 2026
CVE-2026-23010High 7.8ipv6: Fix use-after-free in inet6_addr_del().
Assigned by Linux
Jan 25, 2026
CVE-2026-23005Medium 5.5x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
Assigned by Linux
Jan 25, 2026
CVE-2026-23004High 7.8dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
Assigned by Linux
Jan 25, 2026
CVE-2026-23003High 7.5ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
Assigned by Linux
Jan 25, 2026
CVE-2026-23001High 7.8macvlan: fix possible UAF in macvlan_forward_source()
Assigned by Linux
Jan 25, 2026
CVE-2026-22999High 7.8net/sched: sch_qfq: do not free existing class in qfq_change_class()
Assigned by Linux
Jan 25, 2026
CVE-2026-22998High 7.5nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
Assigned by Linux
Jan 25, 2026
CVE-2026-22997High 7.5net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
Assigned by Linux
Jan 25, 2026
CVE-2025-71163Medium 5.5dmaengine: idxd: fix device leaks on compat bind and unbind
Assigned by Linux
Jan 25, 2026
CVE-2025-71162High 7.8dmaengine: tegra-adma: Fix use-after-free
Assigned by Linux
Jan 25, 2026
CVE-2026-22995High 7.8In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublk_partition_scan_work A race condition exists between the async partition scan work and device teard…Jan 23, 2026
CVE-2026-22993Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unless the interface is…Jan 23, 2026
CVE-2026-22989Medium 5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlock_filesystem If we are trying to unlock the filesystem via an administrative interface a…Jan 23, 2026
CVE-2026-22988Medium 5.5In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not change skb->head arp_create() is the only dev_hard_header() caller making assumption…Jan 23, 2026
CVE-2026-22987Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy syzbot reported a crash in tc_act_in_hw() during netns teard…Jan 23, 2026
CVE-2026-22986Medium 4.7In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev->srcu If two drivers were calling gpiochip_add_data_with_key(), one may be traversing the srcu…Jan 23, 2026
CVE-2026-22985Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causi…Jan 23, 2026
CVE-2026-22983Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: do not write to msg_get_inq in callee NULL pointer dereference fix.Jan 23, 2026
CVE-2026-22981Medium 5.5In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdevs to detached stat…Jan 23, 2026
CVE-2026-22978Low 3.3In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches.Jan 23, 2026
CVE-2025-71160Medium 5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: avoid chain re-validation if possible Hamza Mahfooz reports cpu soft lock-ups in nft_chain_validate(): watchd…Jan 23, 2026
CVE-2025-71159High 7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs_get_or_create_delayed_node() set the dela…Jan 23, 2026
CVE-2025-71158Medium 5.5In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the device would cause a crash.Jan 23, 2026
CVE-2026-22994Medium 5.5bpf: Fix reference count leak in bpf_prog_test_run_xdp()
Assigned by Linux
Jan 23, 2026
CVE-2026-22992High 7.5libceph: return the handler error from mon_handle_auth_done()
Assigned by Linux
Jan 23, 2026
CVE-2026-22991High 7.5libceph: make free_choose_arg_map() resilient to partial allocation
Assigned by Linux
Jan 23, 2026
CVE-2026-22990High 7.5libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
Assigned by Linux
Jan 23, 2026
CVE-2026-22984Critical 9.8libceph: prevent potential out-of-bounds reads in handle_auth_done()
Assigned by Linux
Jan 23, 2026
CVE-2026-22982Medium 5.5net: mscc: ocelot: Fix crash when adding interface under a lag
Assigned by Linux
Jan 23, 2026
CVE-2026-22980High 7.8nfsd: provide locking for v4_end_grace
Assigned by Linux
Jan 23, 2026
CVE-2026-22979Medium 5.5net: fix memory leak in skb_segment_list for GRO packets
Assigned by Linux
Jan 23, 2026
CVE-2025-71161High 7.5dm-verity: disable recursive forward error correction
Assigned by Linux
Jan 23, 2026
CVE-2025-71157High 7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDM…Jan 23, 2026
CVE-2025-71156High 7.8In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatically enabled immediately upon request.Jan 23, 2026
CVE-2025-71155High 7.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix gmap_helper_zap_one_page() again A few checks were missing in gmap_helper_zap_one_page(), which can lead to memory c…Jan 23, 2026
CVE-2025-71153Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), if vfs_getattr() fails, the function returns immediately with…Jan 23, 2026
CVE-2025-71152High 7.8In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit reference Problem description ------------------- DSA has a mumbo-jumbo of reference handl…Jan 23, 2026
CVE-2025-71151Medium 5.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix memory and information leak in smb3_reconfigure() In smb3_reconfigure(), if smb3_sync_session_ctx_passwords() fails, the…Jan 23, 2026
CVE-2025-71150Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix refcount leak when invalid session is found on session lookup When a session is found but its state is not SMB2_SESSION_…Jan 23, 2026
CVE-2025-71148Low 3.3In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when subm…Jan 23, 2026
CVE-2025-71146Medium 5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct might be leaked as error paths are skippin…Jan 23, 2026
CVE-2025-71154Medium 5.5net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
Assigned by Linux
Jan 23, 2026
CVE-2025-71145High 7.8In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced…Jan 23, 2026
PreviousPage 59 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.