CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,870 CVEs published, 346 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,870
Show in the list
Critical, last 7 days
346
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 2951 to 3000PreviousPage 60 of 91Next
CVESeverityTitlePublished
CVE-2025-71147Medium 5.5KEYS: trusted: Fix a memory leak in tpm2_load_cmd
Assigned by Linux
Jan 23, 2026
CVE-2026-22977Medium 5.5net: sock: fix hardened usercopy panic in sock_recv_errqueue
Assigned by Linux
Jan 21, 2026
CVE-2026-22976Medium 5.5net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
Assigned by Linux
Jan 21, 2026
CVE-2025-71144Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on disconnect() After the blamed commit below, if the MPC subflow is already in TCP_CLOSE status or has…Jan 14, 2026
CVE-2025-71143High 7.8In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate struct clk_hw_onecell_data with…Jan 14, 2026
CVE-2025-71142Medium 5.5In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at rem…Jan 14, 2026
CVE-2025-71141Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drm_kms_helper_poll_fini() and drm_atomic_helper_shutdown() helpers sho…Jan 14, 2026
CVE-2025-71139Medium 5.5In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CMA area *** Bug description *** When I tested kexec with the latest kernel, I ran…Jan 14, 2026
CVE-2025-71138Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost always in dpu_encoder_phys_wb_setup_ctl(),…Jan 14, 2026
CVE-2025-71137High 7.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size (rx_pending) is not set below the per…Jan 14, 2026
CVE-2025-71136High 7.1In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It's possible for cp_read() and hdmi_read()…Jan 14, 2026
CVE-2025-71135Medium 5.5In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() The variable mddev->private is first assigned to…Jan 14, 2026
CVE-2025-71134Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: change all pageblocks migrate type on coalescing When a page is freed it coalesces with a buddy into a higher order…Jan 14, 2026
CVE-2025-71129Medium 5.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they should follow LoongArch calling conventio…Jan 14, 2026
CVE-2025-71124Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: move preempt_prepare_postamble after error check Move the call to preempt_prepare_postamble() after verifying that pr…Jan 14, 2026
CVE-2025-71122High 7.8In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED syzkaller found it could overflow math in the test infrastructur…Jan 14, 2026
CVE-2025-71121Medium 5.5In the Linux kernel, the following vulnerability has been resolved: parisc: Do not reprogram affinitiy on ASP chip The ASP chip is a very old variant of the GSP chip and is used e.g.Jan 14, 2026
CVE-2025-71119Medium 5.5In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPUs If SMT is disabled or a partial SMT state is enabled, when a new kernel image…Jan 14, 2026
CVE-2025-71117Medium 5.5In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the request queue from inside sysfs store callbacks may ca…Jan 14, 2026
CVE-2025-71115Medium 5.5In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently done in uml_finishsetup(), but e.g.Jan 14, 2026
CVE-2025-71110High 7.8In the Linux kernel, the following vulnerability has been resolved: mm/slub: reset KASAN tag in defer_free() before accessing freed memory When CONFIG_SLUB_TINY is enabled, kfree_nolock() calls kasan…Jan 14, 2026
CVE-2025-71109Medium 5.5In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit e424054000878 ("MIPS: Tracing: Reduce the ov…Jan 14, 2026
CVE-2025-71107Medium 5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: ensure node page reads complete before f2fs_put_super() finishes Xfstests generic/335, generic/336 sometimes crash with the f…Jan 14, 2026
CVE-2025-71106Medium 5.5In the Linux kernel, the following vulnerability has been resolved: fs: PM: Fix reverse check in filesystems_freeze_callback() The freeze_all_ptr check in filesystems_freeze_callback() introduced by…Jan 14, 2026
CVE-2025-71105Medium 5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inline_xattr_slab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity chan…Jan 14, 2026
CVE-2025-71103Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpc_reglist when not declared On plaforms with an a7xx GPU not supporting IFPC, the ifpc_reglist…Jan 14, 2026
CVE-2025-71102Medium 5.5In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in __scs_magic __scs_magic() needs a 'void *' variable, but a 'struct task_struct *' is given.Jan 14, 2026
CVE-2025-71133High 7.1RDMA/irdma: avoid invalid read in irdma_net_event
Assigned by Linux
Jan 14, 2026
CVE-2025-71132High 7.5smc91x: fix broken irq-context in PREEMPT_RT
Assigned by Linux
Jan 14, 2026
CVE-2025-71131High 7.5crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
Assigned by Linux
Jan 14, 2026
CVE-2025-71130High 7.8drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
Assigned by Linux
Jan 14, 2026
CVE-2025-71128High 7.5erspan: Initialize options_len before referencing options.
Assigned by Linux
Jan 14, 2026
CVE-2025-71127High 7.1wifi: mac80211: Discard Beacon frames to non-broadcast address
Assigned by Linux
Jan 14, 2026
CVE-2025-71126High 7.5mptcp: avoid deadlock on fallback while reinjecting
Assigned by Linux
Jan 14, 2026
CVE-2025-71125Medium 5.5tracing: Do not register unsupported perf events
Assigned by Linux
Jan 14, 2026
CVE-2025-71123High 7.8ext4: fix string copying in parse_apply_sb_mount_options()
Assigned by Linux
Jan 14, 2026
CVE-2025-71120High 7.5SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
Assigned by Linux
Jan 14, 2026
CVE-2025-71118Medium 5.5ACPICA: Avoid walking the Namespace if start_node is NULL
Assigned by Linux
Jan 14, 2026
CVE-2025-71116Critical 9.1libceph: make decode_pool() more resilient against corrupted osdmaps
Assigned by Linux
Jan 14, 2026
CVE-2025-71114Medium 5.5via_wdt: fix critical boot hang due to unnamed resource allocation
Assigned by Linux
Jan 14, 2026
CVE-2025-71113Medium 5.5crypto: af_alg - zero initialize memory allocated via sock_kmalloc
Assigned by Linux
Jan 14, 2026
CVE-2025-71112High 8.8net: hns3: add VLAN id validation before using
Assigned by Linux
Jan 14, 2026
CVE-2025-71111Medium 4.7hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
Assigned by Linux
Jan 14, 2026
CVE-2025-71108Medium 5.5usb: typec: ucsi: Handle incorrect num_connectors capability
Assigned by Linux
Jan 14, 2026
CVE-2025-71104Medium 5.5KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
Assigned by Linux
Jan 14, 2026
CVE-2025-71101High 7.1In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing The hp_populate_*_elements_from_package() function…Jan 13, 2026
CVE-2025-71092High 7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() Commit ef56081d1864 ("RDMA/bnxt_re: RoCE related hardware counters update")…Jan 13, 2026
CVE-2025-71090Medium 5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() nfsd4_add_rdaccess_to_wrdeleg() unconditionally overwrites fp…Jan 13, 2026
CVE-2025-71081Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is cu…Jan 13, 2026
CVE-2025-71080Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT On PREEMPT_RT kernels, after rt6_get_pcpu_route() returns NULL, the curren…Jan 13, 2026
PreviousPage 60 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.