CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,885 CVEs published, 343 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,885
Show in the list
Critical, last 7 days
343
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,519 CVEs, showing 3201 to 3250PreviousPage 65 of 91Next
CVESeverityTitlePublished
CVE-2025-39852Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 When tcp_ao_copy_all_matching() fails in tcp_v6_syn_recv_sock()…Sep 19, 2025
CVE-2025-39849High 7.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) i…Sep 19, 2025
CVE-2025-39848Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25_kiss_rcv() Bernard Pidoux reported a regression apparently caused by commit c353e8983e0d ("net:…Sep 19, 2025
CVE-2025-39847Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in pad_compress_skb If alloc_skb() fails in pad_compress_skb(), it returns NULL without releasing the old skb.Sep 19, 2025
CVE-2025-39846Medium 5.5In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In __iodyn_find_io_region(), pcmcia_make_resource() is assigned…Sep 19, 2025
CVE-2025-39844Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm: move page table sync declarations to linux/pgtable.h During our internal testing, we started observing intermittent boot failur…Sep 19, 2025
CVE-2025-39843Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock recursion.Sep 19, 2025
CVE-2025-39842Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2_delete_osb(), ocfs2_journal_shutdown() has already…Sep 19, 2025
CVE-2025-39841High 7.8In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release seque…Sep 19, 2025
CVE-2025-39840High 7.1In the Linux kernel, the following vulnerability has been resolved: audit: fix out-of-bounds read in audit_compare_dname_path() When a watch on dir=/ is combined with an fsnotify event for a single-c…Sep 19, 2025
CVE-2025-39839High 7.1In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet() trusts coded_len and checks only against skb-…Sep 19, 2025
CVE-2025-39838Medium 5.5In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer dereference bug here.Sep 19, 2025
CVE-2025-39837High 7.8In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: Fix racy registrations asus_wmi_register_driver() may be called from multiple drivers concurrently, which c…Sep 19, 2025
CVE-2025-39866High 7.8fs: writeback: fix use-after-free in __mark_inode_dirty()
Assigned by Linux
Sep 19, 2025
CVE-2025-39863High 7.8wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
Assigned by Linux
Sep 19, 2025
CVE-2025-39862High 8.8wifi: mt76: mt7915: fix list corruption after hardware restart
Assigned by Linux
Sep 19, 2025
CVE-2025-39860High 8.0Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
Assigned by Linux
Sep 19, 2025
CVE-2025-39859High 7.8ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog
Assigned by Linux
Sep 19, 2025
CVE-2025-39857High 7.5net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
Assigned by Linux
Sep 19, 2025
CVE-2025-39851High 7.5vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
Assigned by Linux
Sep 19, 2025
CVE-2025-39850Medium 5.5vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
Assigned by Linux
Sep 19, 2025
CVE-2025-39845Medium 5.5x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
Assigned by Linux
Sep 19, 2025
CVE-2025-39836High 7.8In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation method The communication buffer allocated by setup_mm_hdr() is later on passed to tee_sh…Sep 16, 2025
CVE-2025-39835High 7.8In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code;…Sep 16, 2025
CVE-2025-39833Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitialized timer With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the…Sep 16, 2025
CVE-2025-39832Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event.Sep 16, 2025
CVE-2025-39831Medium 5.5In the Linux kernel, the following vulnerability has been resolved: fbnic: Move phylink resume out of service_task and into open/close The fbnic driver was presenting with the following locking asser…Sep 16, 2025
CVE-2025-39828High 7.8In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().Sep 16, 2025
CVE-2025-39825Medium 4.7In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also…Sep 16, 2025
CVE-2025-39824High 7.8In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called hidinput_connect() will eventually be called to…Sep 16, 2025
CVE-2025-39823High 7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices.Sep 16, 2025
CVE-2025-39822Medium 5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: fix signedness in this_len calculation When importing and using buffers, buf->len is considered unsigned.Sep 16, 2025
CVE-2025-39821High 7.8In the Linux kernel, the following vulnerability has been resolved: perf: Avoid undefined behavior from stopping/starting inactive events Calling pmu->start()/stop() on perf events in PERF_EVENT_STAT…Sep 16, 2025
CVE-2025-39820Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add a null ptr check for dpu_encoder_needs_modeset The drm_atomic_get_new_connector_state() can return NULL if the con…Sep 16, 2025
CVE-2025-39819Medium 5.5In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`.Sep 16, 2025
CVE-2025-39818High 7.8In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save Improper use of secondary pointer (&dev->i2c_subip…Sep 16, 2025
CVE-2025-39817High 7.1In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-…Sep 16, 2025
CVE-2025-39816Medium 5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths Since the buffers are mapped from userspace, it is prude…Sep 16, 2025
CVE-2025-39815Medium 5.5In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb The userspace load can put up to 2048 bits into an xlen bit stack buffer.Sep 16, 2025
CVE-2025-39814Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset Issuing a reset when the driver is loaded without RDMA support,…Sep 16, 2025
CVE-2025-39813Medium 4.7In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace…Sep 16, 2025
CVE-2025-39812Medium 5.5In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialized, leading to undefine…Sep 16, 2025
CVE-2025-39811Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Clear the scratch_pt pointer on error Avoid triggering a dereference of an error pointer on cleanup in xe_vm_free_scratc…Sep 16, 2025
CVE-2025-39809High 7.8In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length The QuickI2C ACPI _DSD methods return ICRS and ISUB data with a t…Sep 16, 2025
CVE-2025-39808Medium 5.5In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameter passed from hid…Sep 16, 2025
CVE-2025-39807Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add error handling for old state CRTC in atomic_disable Introduce error handling to address an issue where, after a h…Sep 16, 2025
CVE-2025-39806High 7.1In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during…Sep 16, 2025
CVE-2025-39805Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: macb: fix unregister_netdev call order in macb_remove() When removing a macb device, the driver calls phy_exit() before unregi…Sep 16, 2025
CVE-2025-39834Medium 5.5net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow
Assigned by Linux
Sep 16, 2025
CVE-2025-39830Medium 5.5net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path
Assigned by Linux
Sep 16, 2025
PreviousPage 65 of 91Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.