CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,553 CVEs published, 305 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,553
Show in the list
Critical, last 7 days
305
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,964 CVEs, showing 3151 to 3200PreviousPage 64 of 180Next
CVESeverityTitlePublished
CVE-2026-74626High 7.5NTB: ntb_netdev: Preserve RX queue depth on allocation failure
Assigned by Linux
Aug 22, 2026
CVE-2026-74625High 7.5netfilter: bridge: release template ct on non-IP path
Assigned by Linux
Aug 22, 2026
CVE-2026-74624High 7.5netfilter: nf_conntrack: defer invalid log until after unlock
Assigned by Linux
Aug 22, 2026
CVE-2026-74623Not yet scorednet: atlantic: free stranded TX buffers on ring deinit
Assigned by Linux
Aug 22, 2026
CVE-2026-74622Not yet scorednet: atlantic: free RX pages of consumed but not refilled buffers
Assigned by Linux
Aug 22, 2026
CVE-2026-74621High 7.5net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
Assigned by Linux
Aug 22, 2026
CVE-2026-74620Not yet scorednet/sched: act_gact, act_police: range check the fallback control action
Assigned by Linux
Aug 22, 2026
CVE-2026-74619Not yet scoredovl: don't warn when the mount is completed from another user namespace
Assigned by Linux
Aug 22, 2026
CVE-2026-74618Not yet scoredbinfmt_misc: don't warn when the mount is completed from another user namespace
Assigned by Linux
Aug 22, 2026
CVE-2026-74617Critical 9.8dibs: initialise dibs->lock in dibs_dev_alloc()
Assigned by Linux
Aug 22, 2026
CVE-2026-74616Critical 9.8xdp: reject clones that overrun skb_shared_info tailroom
Assigned by Linux
Aug 22, 2026
CVE-2026-74615High 8.8vxlan: do not arm the ageing timer on a device that is down
Assigned by Linux
Aug 22, 2026
CVE-2026-74614High 8.4vsock/virtio: read virtqueues under worker locks
Assigned by Linux
Aug 22, 2026
CVE-2026-74613High 7.8vsock/virtio: avoid refilling the RX queue after teardown
Assigned by Linux
Aug 22, 2026
CVE-2026-74612Critical 10.0veth: fix skb length accounting after XDP frag adjustment
Assigned by Linux
Aug 22, 2026
CVE-2026-74611Critical 9.8tls: rx: restore msg_iter before TLS 1.3 optimistic retry
Assigned by Linux
Aug 22, 2026
CVE-2026-74610High 7.8tls: don't leave a full plaintext sk_msg ring unpushed
Assigned by Linux
Aug 22, 2026
CVE-2026-74609High 7.8tipc: read le->link under the node lock in tipc_node_link_down()
Assigned by Linux
Aug 22, 2026
CVE-2026-74608Critical 9.8smb: client: Fix use-after-free in cifs_try_adding_channels()
Assigned by Linux
Aug 22, 2026
CVE-2026-74607High 8.8KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
Assigned by Linux
Aug 22, 2026
CVE-2026-74606High 7.8eventfs: Fix use-after-free in eventfs_remove_rec()
Assigned by Linux
Aug 22, 2026
CVE-2026-74605High 7.8eventfs: Use children field for rcu head and add memory barriers
Assigned by Linux
Aug 22, 2026
CVE-2026-74604High 8.4Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
Assigned by Linux
Aug 22, 2026
CVE-2026-74603High 7.1ptp: ocp: Fix board ID over-read
Assigned by Linux
Aug 22, 2026
CVE-2026-74602Not yet scoredring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
Assigned by Linux
Aug 22, 2026
CVE-2026-74601High 7.8ring-buffer: Use current_context for safe per-CPU buffer swap
Assigned by Linux
Aug 22, 2026
CVE-2026-74600Not yet scoredmm/page_table_check: skip special zero mappings
Assigned by Linux
Aug 22, 2026
CVE-2026-74599Not yet scoredmm/ptdump: always stabilise against page table freeing using init_mm
Assigned by Linux
Aug 22, 2026
CVE-2026-74598High 7.5ipv6: fix Route Information option length validation
Assigned by Linux
Aug 22, 2026
CVE-2026-74597Critical 9.8ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
Assigned by Linux
Aug 22, 2026
CVE-2026-74596Not yet scoredfs,fsverity: remove check for fsverity being enabled in setattr_prepare()
Assigned by Linux
Aug 22, 2026
CVE-2026-74595High 7.8fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
Assigned by Linux
Aug 22, 2026
CVE-2026-74594High 7.8sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
Assigned by Linux
Aug 22, 2026
CVE-2026-74593Not yet scoredsched_ext: Take cgroup_lock() first in scx_cgroup_lock()
Assigned by Linux
Aug 22, 2026
CVE-2026-74592High 8.1ima: Instantiate file_truncate and path_truncate hooks
Assigned by Linux
Aug 22, 2026
CVE-2026-74591Critical 9.8mm/filemap: __filemap_add_folio() restore index before retrying
Assigned by Linux
Aug 22, 2026
CVE-2026-74590High 7.8fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
Assigned by Linux
Aug 22, 2026
CVE-2026-74589High 8.4bpf, sockmap: Fix sk_redir use-after-free in send verdict
Assigned by Linux
Aug 22, 2026
CVE-2026-74588Critical 9.8sctp: keep chunk->transport in step with the list it is queued on
Assigned by Linux
Aug 22, 2026
CVE-2026-74587Critical 9.8sctp: fix use-after-free of cached ASCONF chunk
Assigned by Linux
Aug 22, 2026
CVE-2026-74586Critical 9.8sctp: clear new_transport when removing a peer
Assigned by Linux
Aug 22, 2026
CVE-2026-74585Not yet scoredthunderbolt: Bound the DROM dual link port number before indexing sw->ports
Assigned by Linux
Aug 22, 2026
CVE-2026-74584High 7.1RDMA/bnxt_re: zero shared page before exposing to userspace
Assigned by Linux
Aug 22, 2026
CVE-2026-74583High 7.8net/sched: cls_route: fix fastmap use-after-free on filter
Assigned by Linux
Aug 21, 2026
CVE-2026-74582High 7.8packet: use consistent hard_header_len in non-ring send paths
Assigned by Linux
Aug 21, 2026
CVE-2026-74581Critical 9.8net: ipv6: clear suppressed fib6 rule result
Assigned by Linux
Aug 21, 2026
CVE-2026-74580High 8.8vhost: reset the vring metadata cache on vring reconfiguration
Assigned by Linux
Aug 21, 2026
CVE-2026-74579High 7.1netfilter: nft_payload: fix mask build for partial field offload
Assigned by Linux
Aug 17, 2026
CVE-2026-74578High 7.1crypto: algif_skcipher - force synchronous processing on trees without ctx->state
Assigned by Linux
Aug 16, 2026
CVE-2026-74577Not yet scorednet: mpls: initialize rtm_tos in mpls_getroute()
Assigned by Linux
Aug 15, 2026
PreviousPage 64 of 180Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.