CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,761 CVEs published, 330 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,761
Show in the list
Critical, last 7 days
330
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,636 CVEs, showing 3301 to 3350PreviousPage 67 of 93Next
CVESeverityTitlePublished
CVE-2025-39760High 7.1In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usb_parse_ss_endpoint_companion() checks descriptor type befor…Sep 11, 2025
CVE-2025-39759High 7.0In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There's a race between a task disabling quotas and another run…Sep 11, 2025
CVE-2025-39758Medium 5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages Ever since commit c2ff29e99a76 ("siw: Inline do_tcp_sendpages()"), we hav…Sep 11, 2025
CVE-2025-39757High 7.1In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes m…Sep 11, 2025
CVE-2025-39753Medium 5.5In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops Clears up the warning added in 7ee3647243e5 ("migrate: Remove call to ->writepage…Sep 11, 2025
CVE-2025-39752Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM.Sep 11, 2025
CVE-2025-39749High 7.0In the Linux kernel, the following vulnerability has been resolved: rcu: Protect ->defer_qs_iw_pending from data race On kernels built with CONFIG_IRQ_WORK=y, when rcu_read_unlock() is invoked within…Sep 11, 2025
CVE-2025-39747Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msm_ioctl_gem_info_set_metadata() now checks for krealloc failu…Sep 11, 2025
CVE-2025-39746Medium 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: shutdown driver when hardware is unreliable In rare cases, ath10k may lose connection with the PCIe bus due to some u…Sep 11, 2025
CVE-2025-39745Medium 5.5In the Linux kernel, the following vulnerability has been resolved: rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels For built with CONFIG_PREEMPT_RT=y kernels, running rcutorture te…Sep 11, 2025
CVE-2025-39744High 7.1In the Linux kernel, the following vulnerability has been resolved: rcu: Fix rcu_read_unlock() deadloop due to IRQ work During rcu_read_unlock_special(), if this happens during irq_exit(), we can loc…Sep 11, 2025
CVE-2025-39743High 7.8In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of the inode copy from the disk by the reproducer is AGGR_RESE…Sep 11, 2025
CVE-2025-39742Medium 5.5In the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() The function divides number of online CPUs by num_core_siblings, a…Sep 11, 2025
CVE-2025-39741Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: don't overflow max copy size With non-page aligned copy, we need to use 4 byte aligned pitch, however the size itse…Sep 11, 2025
CVE-2025-39740High 7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent potential UAF If we hit the error path, the previous fence (if there is one) has already been put() prior t…Sep 11, 2025
CVE-2025-39739Medium 5.5In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible Add the SM6115 MDSS compatible to clients compatible list, as it also needs that wo…Sep 11, 2025
CVE-2025-39737Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockup warning was observed on a relative small system x86-64 syst…Sep 11, 2025
CVE-2025-39736Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is enabled, calling pr_warn_once() while holding…Sep 11, 2025
CVE-2025-39791High 7.8dm: dm-crypt: Do not partially accept write BIOs with zoned targets
Assigned by Linux
Sep 11, 2025
CVE-2025-39790High 8.4bus: mhi: host: Detect events pointing to unexpected TREs
Assigned by Linux
Sep 11, 2025
CVE-2025-39789High 7.3crypto: x86/aegis - Add missing error checks
Assigned by Linux
Sep 11, 2025
CVE-2025-39787High 7.8soc: qcom: mdt_loader: Ensure we don't read past the ELF header
Assigned by Linux
Sep 11, 2025
CVE-2025-39783High 7.8PCI: endpoint: Fix configfs group list head handling
Assigned by Linux
Sep 11, 2025
CVE-2025-39782Medium 5.5jbd2: prevent softlockup in jbd2_log_do_checkpoint()
Assigned by Linux
Sep 11, 2025
CVE-2025-39776High 7.0mm/debug_vm_pgtable: clear page table entries at destroy_args()
Assigned by Linux
Sep 11, 2025
CVE-2025-39775Medium 5.5mm/mremap: fix WARN with uffd that has remap events disabled
Assigned by Linux
Sep 11, 2025
CVE-2025-39773Medium 5.5net: bridge: fix soft lockup in br_multicast_query_expired()
Assigned by Linux
Sep 11, 2025
CVE-2025-39770High 7.5net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Assigned by Linux
Sep 11, 2025
CVE-2025-39764Medium 5.5netfilter: ctnetlink: remove refcounting in expectation dumpers
Assigned by Linux
Sep 11, 2025
CVE-2025-39756Medium 5.5fs: Prevent file descriptor table allocations exceeding INT_MAX
Assigned by Linux
Sep 11, 2025
CVE-2025-39754Medium 4.7mm/smaps: fix race between smaps_hugetlb_range and migration
Assigned by Linux
Sep 11, 2025
CVE-2025-39750High 8.8wifi: ath12k: Correct tid cleanup when tid setup fails
Assigned by Linux
Sep 11, 2025
CVE-2025-39748Medium 5.5bpf: Forget ranges when refining tnum after JSET
Assigned by Linux
Sep 11, 2025
CVE-2025-39738High 7.3btrfs: do not allow relocation of partially dropped subvolumes
Assigned by Linux
Sep 11, 2025
CVE-2025-40300Medium 5.5x86/vmscape: Add conditional IBPB mitigation
Assigned by Linux
Sep 11, 2025
CVE-2025-39734Medium 5.5In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inode_trylock with inode_lock" This reverts commit 69505fe98f198ee813898cbcaf6770949636430b.Sep 7, 2025
CVE-2025-39733Medium 5.5In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various ordering issues for lower instance locks and team lock.Sep 7, 2025
CVE-2025-39731Medium 5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testing F2FS with xfstests using UFS backed virtual disks the kerne…Sep 7, 2025
CVE-2025-39730High 7.8In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() The function needs to check the minimal filehandle length before it can a…Sep 7, 2025
CVE-2025-39729Medium 5.5In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings: drivers/crypto/ccp/sev-dev.c:1312 __sev_plat…Sep 7, 2025
CVE-2025-39727High 7.8In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_clusters() In setup_swap_map(), we only ensure badpages are in range (0, last_page…Sep 7, 2025
CVE-2025-39732High 7.8wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
Assigned by Linux
Sep 7, 2025
CVE-2025-39725Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list In shrink_folio_list(), the hwpoisoned folio may be large folio…Sep 5, 2025
CVE-2025-39723High 7.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix unbuffered write error handling If all the subrequests in an unbuffered write stream fail, the subrequest collector does…Sep 5, 2025
CVE-2025-39722Medium 5.5In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP Since the CAAM on these SoCs is managed by another ARM core, called t…Sep 5, 2025
CVE-2025-39720Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix refcount leak causing resource not released When ksmbd_conn_releasing(opinfo->conn) returns true,the refcount was not de…Sep 5, 2025
CVE-2025-39719High 7.1In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hw_xlate array Fix a potential out-of-bounds array access of the hw_xlate array in bno055.c.Sep 5, 2025
CVE-2025-39717High 7.8In the Linux kernel, the following vulnerability has been resolved: open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE As described in commit 7a54947e727b ('Merge patch series "f…Sep 5, 2025
CVE-2025-39716Medium 5.5In the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read access Because of the way read access support is implemented, read access interrupti…Sep 5, 2025
CVE-2025-39715Medium 5.5In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to trigger memory reference interru…Sep 5, 2025
PreviousPage 67 of 93Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.