CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,585 CVEs published, 338 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,585
Show in the list
Critical, last 7 days
338
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,987 CVEs, showing 3301 to 3350PreviousPage 67 of 180Next
CVESeverityTitlePublished
CVE-2026-74475Critical 10.0vxlan: use neigh_ha_snapshot() in route_shortcircuit()
Assigned by Linux
Aug 15, 2026
CVE-2026-74474Critical 9.8vxlan: use pskb_network_may_pull() for transmit path header pulls
Assigned by Linux
Aug 15, 2026
CVE-2026-74473Critical 9.8vxlan: use pskb_network_may_pull() in route_shortcircuit()
Assigned by Linux
Aug 15, 2026
CVE-2026-74472Not yet scoredublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()
Assigned by Linux
Aug 15, 2026
CVE-2026-74471High 7.8tracing: Check return value of __register_event() in trace_module_add_events()
Assigned by Linux
Aug 15, 2026
CVE-2026-74470High 7.8scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write
Assigned by Linux
Aug 15, 2026
CVE-2026-74469High 8.8sctp: prevent peer transport count overflow
Assigned by Linux
Aug 15, 2026
CVE-2026-74468Not yet scoredgpio: pch: use raw_spinlock_t for the register lock
Assigned by Linux
Aug 15, 2026
CVE-2026-74467High 7.8s390/qeth: Check CAP_NET_ADMIN for private ioctls
Assigned by Linux
Aug 15, 2026
CVE-2026-74466Not yet scoreds390/zcrypt: Close speculative mem read possibility
Assigned by Linux
Aug 15, 2026
CVE-2026-74465High 7.8net: openvswitch: fix potential UAF on meter attach failure
Assigned by Linux
Aug 15, 2026
CVE-2026-74464Not yet scorednet: openvswitch: fix skb leak on flow key update failure during ct
Assigned by Linux
Aug 15, 2026
CVE-2026-74463Not yet scoredi2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock
Assigned by Linux
Aug 15, 2026
CVE-2026-74462Not yet scoredi2c: imx: mark I2C adapter when hardware is powered down
Assigned by Linux
Aug 15, 2026
CVE-2026-74461High 8.4i2c: imx: Cancel hrtimer before clearing slave pointer
Assigned by Linux
Aug 15, 2026
CVE-2026-74460Not yet scoredcan: ems_usb: validate CPC message lengths
Assigned by Linux
Aug 15, 2026
CVE-2026-74459Not yet scoredcan: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure
Assigned by Linux
Aug 15, 2026
CVE-2026-74458Not yet scoredcan: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents
Assigned by Linux
Aug 15, 2026
CVE-2026-74457Not yet scoredcan: peak_usb: add bounds check for USB channel index
Assigned by Linux
Aug 15, 2026
CVE-2026-74456High 7.8can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error
Assigned by Linux
Aug 15, 2026
CVE-2026-74455Not yet scoredcan: peak_usb: validate uCAN receive record lengths
Assigned by Linux
Aug 15, 2026
CVE-2026-74454High 7.8drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
Assigned by Linux
Aug 15, 2026
CVE-2026-74453High 7.8drm/vc4: Zero the tile state data array before each BIN job
Assigned by Linux
Aug 15, 2026
CVE-2026-74452High 7.8drm/panthor: reject firmware sections with oversized data
Assigned by Linux
Aug 15, 2026
CVE-2026-74451High 7.8drm/panthor: validate firmware interface structure sizes
Assigned by Linux
Aug 15, 2026
CVE-2026-74450High 7.8drm/amd/pm: fix pptable use-after-free
Assigned by Linux
Aug 15, 2026
CVE-2026-74449High 7.8drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport
Assigned by Linux
Aug 15, 2026
CVE-2026-74448Not yet scoreddrm/amdkfd: fix QID bit leak in pqm_create_queue()
Assigned by Linux
Aug 15, 2026
CVE-2026-74447High 7.8drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment
Assigned by Linux
Aug 15, 2026
CVE-2026-74446High 7.8drm/amdkfd: hold event_mutex while checkpointing CRIU events
Assigned by Linux
Aug 15, 2026
CVE-2026-74445Not yet scoreddrm/vmwgfx: reject DX_BIND_QUERY without a DX context
Assigned by Linux
Aug 15, 2026
CVE-2026-74444High 7.8drm/vmwgfx: validate DRAW_PRIMITIVES header size before division
Assigned by Linux
Aug 15, 2026
CVE-2026-74443High 8.8drm/vmwgfx: bound DMA command body size against suffix pointer
Assigned by Linux
Aug 15, 2026
CVE-2026-74442Not yet scoreddrm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure
Assigned by Linux
Aug 15, 2026
CVE-2026-74441Not yet scoredusb: typec: ucsi: Fix race condition and ordering in port unregistration
Assigned by Linux
Aug 15, 2026
CVE-2026-74440High 7.8drm/xe: Wait on external BO kernel fences in exec IOCTL
Assigned by Linux
Aug 15, 2026
CVE-2026-74439Critical 9.3iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry
Assigned by Linux
Aug 15, 2026
CVE-2026-74438High 7.8crypto: sun4i-ss - Remove insecure and unused rng_alg
Assigned by Linux
Aug 15, 2026
CVE-2026-74437Not yet scoredmedia: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work
Assigned by Linux
Aug 15, 2026
CVE-2026-74436Critical 9.8rxrpc: serialize kernel accept preallocation with socket teardown
Assigned by Linux
Aug 15, 2026
CVE-2026-74435High 7.5rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
Assigned by Linux
Aug 15, 2026
CVE-2026-74434Critical 9.8rxrpc: Don't move a peeked OOB message onto the pending queue
Assigned by Linux
Aug 15, 2026
CVE-2026-74433Critical 9.8rxrpc: Fix UAF in rxgk_issue_challenge()
Assigned by Linux
Aug 15, 2026
CVE-2026-74432Not yet scoredrxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
Assigned by Linux
Aug 15, 2026
CVE-2026-74431High 7.5rxrpc: Fix potential infinite loop in rxrpc_recvmsg()
Assigned by Linux
Aug 15, 2026
CVE-2026-74430High 7.5rxrpc: Fix ACKALL packet handling
Assigned by Linux
Aug 15, 2026
CVE-2026-74429High 7.5rxrpc: Fix the reception of a reply packet before data transmission
Assigned by Linux
Aug 15, 2026
CVE-2026-74428Critical 9.8rxrpc: Fix double unlock in rxrpc_recvmsg()
Assigned by Linux
Aug 15, 2026
CVE-2026-74427Critical 9.8afs: Fix netns teardown to cancel the preallocation charger
Assigned by Linux
Aug 15, 2026
CVE-2026-74426Not yet scoredafs: fix NULL pointer dereference in afs_get_tree()
Assigned by Linux
Aug 15, 2026
PreviousPage 67 of 180Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.