CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,868 CVEs published, 344 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,868
Show in the list
Critical, last 7 days
344
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 3101 to 3150PreviousPage 63 of 91Next
CVESeverityTitlePublished
CVE-2025-39943High 7.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer If data_offset and data_length of smb_dire…Oct 4, 2025
CVE-2025-39942Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size This is inspired by the check for data_offset + da…Oct 4, 2025
CVE-2025-39941Medium 4.7In the Linux kernel, the following vulnerability has been resolved: zram: fix slot write race condition Parallel concurrent writes to the same zram index result in leaked zsmalloc handles.Oct 4, 2025
CVE-2025-39940Medium 5.5In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripe_io_hints if we have too large chunk size.Oct 4, 2025
CVE-2025-39938Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source graph fails (e.g.Oct 4, 2025
CVE-2025-39937Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Since commit 7d5e9737efda ("net: rfkill: gpio: get the na…Oct 4, 2025
CVE-2025-39936Medium 5.5In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() When 9770b428b1a2 ("crypto: ccp - Move dev_info/e…Oct 4, 2025
CVE-2025-39935High 7.8In the Linux kernel, the following vulnerability has been resolved: ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded() The sma1307->set.header_size is how many integers are in th…Oct 4, 2025
CVE-2025-39934Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complet…Oct 4, 2025
CVE-2025-39933Medium 5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspired by the related server fixes.Oct 4, 2025
CVE-2025-39953Medium 5.5cgroup: split cgroup_destroy_wq into 3 workqueues
Assigned by Linux
Oct 4, 2025
CVE-2025-39944High 7.8octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
Assigned by Linux
Oct 4, 2025
CVE-2025-39939High 7.8iommu/s390: Fix memory corruption when using identity domain
Assigned by Linux
Oct 4, 2025
CVE-2025-39932Critical 9.8smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
Assigned by Linux
Oct 4, 2025
CVE-2025-39931High 7.8crypto: af_alg - Set merge to zero early in af_alg_sendmsg
Assigned by Linux
Oct 4, 2025
CVE-2025-39929High 7.5smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
Assigned by Linux
Oct 4, 2025
CVE-2023-53526High 7.8jbd2: check 'jh->b_transaction' before removing it from checkpoint
Assigned by Linux
Oct 1, 2025
CVE-2023-53520High 7.8Bluetooth: Fix hci_suspend_sync crash
Assigned by Linux
Oct 1, 2025
CVE-2023-53518High 7.8PM / devfreq: Fix leak in devfreq_dev_release()
Assigned by Linux
Oct 1, 2025
CVE-2023-53517Critical 9.8tipc: do not update mtu if msg_max is too small in mtu negotiation
Assigned by Linux
Oct 1, 2025
CVE-2023-53506High 7.8udf: Do not bother merging very long extents
Assigned by Linux
Oct 1, 2025
CVE-2023-53504High 7.8RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF
Assigned by Linux
Oct 1, 2025
CVE-2023-53500High 7.3xfrm: fix slab-use-after-free in decode_session6
Assigned by Linux
Oct 1, 2025
CVE-2023-53499High 7.0virtio_net: Fix error unwinding of XDP initialization
Assigned by Linux
Oct 1, 2025
CVE-2023-53492High 7.8netfilter: nf_tables: do not ignore genmask when looking up chain by id
Assigned by Linux
Oct 1, 2025
CVE-2023-53491High 7.5start_kernel: Add __no_stack_protector function attribute
Assigned by Linux
Oct 1, 2025
CVE-2023-53484High 7.8lib: cpu_rmap: Avoid use after free on rmap->obj array entries
Assigned by Linux
Oct 1, 2025
CVE-2023-53481High 7.8ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
Assigned by Linux
Oct 1, 2025
CVE-2023-53474High 7.8x86/MCE/AMD: Use an u64 for bank_map
Assigned by Linux
Oct 1, 2025
CVE-2023-53473High 7.8ext4: improve error handling from ext4_dirhash()
Assigned by Linux
Oct 1, 2025
CVE-2023-53463High 7.5ibmvnic: Do not reset dql stats on NON_FATAL err
Assigned by Linux
Oct 1, 2025
CVE-2023-53454High 8.8HID: multitouch: Correct devm device reference for hidinput input_dev name
Assigned by Linux
Oct 1, 2025
CVE-2022-50440High 7.8drm/vmwgfx: Validate the box size for the snooped cursor
Assigned by Linux
Oct 1, 2025
CVE-2022-50432High 7.8kernfs: fix use-after-free in __kernfs_remove
Assigned by Linux
Oct 1, 2025
CVE-2025-39928Medium 5.5In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: ensure data length is within supported range Add an explicit check for the xfer length to 'rtl9300_i2c_config_xfer' t…Oct 1, 2025
CVE-2025-39927Medium 4.7In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensure the cached parent directory inode match…Oct 1, 2025
CVE-2025-39926Medium 5.5In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genl_bind() invoking bind() after -EPERM Per family bind/unbind callbacks were introduced to allow families to track…Oct 1, 2025
CVE-2025-39925Medium 5.5In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEV_UNREGISTER notification handler syzbot is reporting unregister_netdevice: waiting for vcan0 to become…Oct 1, 2025
CVE-2025-39924Medium 5.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix invalid algorithm for encoded extents The current algorithm sanity checks do not properly apply to new encoded extents.Oct 1, 2025
CVE-2025-39923Medium 5.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees When we don't have a clock specified in the device tree, we ha…Oct 1, 2025
CVE-2025-39922High 7.1In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix incorrect map used in eee linkmode incorrectly used ixgbe_lp_map in loops intended to populate the supported and adverti…Oct 1, 2025
CVE-2025-39921Medium 5.5In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback In commit 13529647743d9 ("spi: microchip-…Oct 1, 2025
CVE-2025-39920Medium 5.5In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem(), the call to add_interval() does not ha…Oct 1, 2025
CVE-2025-39919Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid entries Non-station wcid entries must not be passed to the rx functions.Oct 1, 2025
CVE-2025-39918Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack listOct 1, 2025
CVE-2025-39917High 7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt Stanislav reported that in bpf_crypto_crypt() the destination dynptr's size…Oct 1, 2025
CVE-2025-39916Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() When creating a new scheme of DAMON_RECLAIM, the calcula…Oct 1, 2025
CVE-2025-39915Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: phy: transfer phy_config_inband() locking responsibility to phylink Problem description =================== Lockdep reports a…Oct 1, 2025
CVE-2025-39914Medium 5.5In the Linux kernel, the following vulnerability has been resolved: tracing: Silence warning when chunk allocation fails in trace_pid_write Syzkaller trigger a fault injection warning: WARNING: CPU:…Oct 1, 2025
CVE-2025-39913High 7.8In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.Oct 1, 2025
PreviousPage 63 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.