CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,878 CVEs published, 345 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,878
Show in the list
Critical, last 7 days
345
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 3001 to 3050PreviousPage 61 of 91Next
CVESeverityTitlePublished
CVE-2025-71076Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized allocations The OA open parameters did not validate num_syncs, allowing userspace t…Jan 13, 2026
CVE-2025-71074Medium 4.7In the Linux kernel, the following vulnerability has been resolved: functionfs: fix the open/removal races ffs_epfile_open() can race with removal, ending up with file->private_data pointing to freed…Jan 13, 2026
CVE-2025-71073High 7.8In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() schedules lk->tq via schedule_work(), and the work hand…Jan 13, 2026
CVE-2025-71072Medium 5.5In the Linux kernel, the following vulnerability has been resolved: shmem: fix recovery on rename failures maple_tree insertions can fail if we are seriously short on memory; simple_offset_rename() d…Jan 13, 2026
CVE-2025-71071High 7.8In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the references taken to the larb devices during probe a…Jan 13, 2026
CVE-2025-68823Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such as udev) opens ublk block device (e.g., to read the partition…Jan 13, 2026
CVE-2025-68817High 7.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurrency, A tree-connection object (tcon) is fr…Jan 13, 2026
CVE-2025-71100High 7.6wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()
Assigned by Linux
Jan 13, 2026
CVE-2025-71099High 7.8drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl()
Assigned by Linux
Jan 13, 2026
CVE-2025-71098Medium 5.5ip6_gre: make ip6gre_header() robust
Assigned by Linux
Jan 13, 2026
CVE-2025-71097Medium 5.5ipv4: Fix reference count leak when using error routes with nexthop objects
Assigned by Linux
Jan 13, 2026
CVE-2025-71096Medium 5.5RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
Assigned by Linux
Jan 13, 2026
CVE-2025-71095Critical 9.1net: stmmac: fix the crash issue for zero copy XDP_TX action
Assigned by Linux
Jan 13, 2026
CVE-2025-71094Medium 5.5net: usb: asix: validate PHY address before use
Assigned by Linux
Jan 13, 2026
CVE-2025-71093Critical 9.1e1000: fix OOB in e1000_tbi_should_accept()
Assigned by Linux
Jan 13, 2026
CVE-2025-71091High 7.8team: fix check for port enabled in team_queue_override_port_prio_changed()
Assigned by Linux
Jan 13, 2026
CVE-2025-71089High 7.8iommu: disable SVA when CONFIG_X86 is set
Assigned by Linux
Jan 13, 2026
CVE-2025-71088Medium 5.5mptcp: fallback earlier on simult connection
Assigned by Linux
Jan 13, 2026
CVE-2025-71087Medium 5.5iavf: fix off-by-one issues in iavf_config_rss_reg()
Assigned by Linux
Jan 13, 2026
CVE-2025-71086High 7.8net: rose: fix invalid array index in rose_kill_by_device()
Assigned by Linux
Jan 13, 2026
CVE-2025-71085High 7.5ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
Assigned by Linux
Jan 13, 2026
CVE-2025-71084Medium 5.5RDMA/cm: Fix leaking the multicast GID table reference
Assigned by Linux
Jan 13, 2026
CVE-2025-71083Medium 5.5drm/ttm: Avoid NULL pointer deref for evicted BOs
Assigned by Linux
Jan 13, 2026
CVE-2025-71082High 7.8Bluetooth: btusb: revert use of devm_kzalloc in btusb
Assigned by Linux
Jan 13, 2026
CVE-2025-71079Medium 5.5net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
Assigned by Linux
Jan 13, 2026
CVE-2025-71078High 7.8powerpc/64s/slb: Fix SLB multihit issue during SLB preload
Assigned by Linux
Jan 13, 2026
CVE-2025-71077Medium 5.5tpm: Cap the number of PCR banks
Assigned by Linux
Jan 13, 2026
CVE-2025-71075High 7.8scsi: aic94xx: fix use-after-free in device removal path
Assigned by Linux
Jan 13, 2026
CVE-2025-71068Critical 9.8svcrdma: bound check rq_pages index in inline path
Assigned by Linux
Jan 13, 2026
CVE-2023-54321Medium 5.5In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in device_add() I got the following null-ptr-deref report while doing fault injection tes…Dec 30, 2025
CVE-2023-54207High 7.8In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hidinput input_dev name Reference the HID device rather than the input device for t…Dec 30, 2025
CVE-2023-54285High 7.1iomap: Fix possible overflow condition in iomap_write_delalloc_scan
Assigned by Linux
Dec 30, 2025
CVE-2025-68749Medium 4.7In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_…Dec 24, 2025
CVE-2025-68365Medium 5.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in nt…Dec 24, 2025
CVE-2025-68358Medium 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() From the memory-barriers.txt document regarding memory barrier orde…Dec 24, 2025
CVE-2025-68351Medium 5.5In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in `exfat_find` related to `exfat_get_dentry_set`.Dec 24, 2025
CVE-2025-68725Medium 5.5bpf: Do not let BPF test infra emit invalid GSO types to stack
Assigned by Linux
Dec 24, 2025
CVE-2025-68340High 7.8team: Move team device type change at the end of team_port_add
Assigned by Linux
Dec 23, 2025
CVE-2025-68333Medium 5.5In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix possible deadlock in the deferred_irq_workfn() For PREEMPT_RT=y kernels, the deferred_irq_workfn() is executed in th…Dec 22, 2025
CVE-2025-68223Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to progress the queue when checking if fence…Dec 16, 2025
CVE-2025-68214Medium 4.7In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between timer_shutdown_sync() and timer e…Dec 16, 2025
CVE-2025-68211Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page ad…Dec 16, 2025
CVE-2025-40251Medium 5.5In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function devl_rate_nodes_destroy is documented to "Unset parent…Dec 4, 2025
CVE-2025-40164Medium 5.5In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible code warnings Syzbot reported the following warning: BUG: using smp_processor_i…Nov 12, 2025
CVE-2025-40149High 7.8tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
Assigned by Linux
Nov 12, 2025
CVE-2025-40090Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 ("ksmbd: Fix race condition in RPC handle list ac…Oct 30, 2025
CVE-2025-40039Medium 4.7In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session.Oct 28, 2025
CVE-2025-40082High 7.1hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
Assigned by Linux
Oct 28, 2025
CVE-2025-40040High 7.8mm/ksm: fix flag-dropping behavior in ksm_madvise
Assigned by Linux
Oct 28, 2025
CVE-2025-40005Medium 5.5In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation wit…Oct 20, 2025
PreviousPage 61 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.