CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,746 CVEs published, 329 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,746
Show in the list
Critical, last 7 days
329
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,636 CVEs, showing 3351 to 3400PreviousPage 68 of 93Next
CVESeverityTitlePublished
CVE-2025-39714Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV stan…Sep 5, 2025
CVE-2025-39713Medium 4.7In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() In the interrupt handler rain_interrupt(), the buffer full che…Sep 5, 2025
CVE-2025-39712Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval Getting / Setting the frame interval using the V4L2 subdev pa…Sep 5, 2025
CVE-2025-39711High 7.8In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Both the ACE and CSI driver are missing a mei_cldev_dis…Sep 5, 2025
CVE-2025-39710High 7.1In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to ensure that the packet size does not exce…Sep 5, 2025
CVE-2025-39709Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt handler is initialized before the interrupt…Sep 5, 2025
CVE-2025-39708Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatch indicated a possible null pointer dereference where one of t…Sep 5, 2025
CVE-2025-39707Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities HUBBUB structure is not initialized on DCE hardware, so check…Sep 5, 2025
CVE-2025-39706Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to kernel debugfs, we can't destroy KFD debug…Sep 5, 2025
CVE-2025-39704Medium 5.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in send_ipi_data() Function kvm_io_bus_read() is called in function send_ipi_data(), buff…Sep 5, 2025
CVE-2025-39701High 7.8In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version check The security-version-number check should be used rather than the runtime vers…Sep 5, 2025
CVE-2025-39700Medium 5.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to invalid nodes damon_migrate_pages() tries migration even if the target node is inv…Sep 5, 2025
CVE-2025-39699Medium 5.5In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iova_to_phys The riscv_iommu_pte_fetch() function returns either NULL for unmapped/never-mapped…Sep 5, 2025
CVE-2025-39698Medium 5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_…Sep 5, 2025
CVE-2025-39696Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv During the conversion to unify the calibration data management, the refer…Sep 5, 2025
CVE-2025-39695Medium 5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rx…Sep 5, 2025
CVE-2025-39694Medium 5.5In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associ…Sep 5, 2025
CVE-2025-39693Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_new_connector_state() or drm_atomic_get_ol…Sep 5, 2025
CVE-2025-39692Medium 5.5In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() We can't call destroy_workqueue(smb_direct_wq); before s…Sep 5, 2025
CVE-2025-39690Medium 5.5In the Linux kernel, the following vulnerability has been resolved: iio: accel: sca3300: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that t…Sep 5, 2025
CVE-2025-39687High 7.1In the Linux kernel, the following vulnerability has been resolved: iio: light: as73211: Ensure buffer holes are zeroed Given that the buffer is copied to a kfifo that ultimately user space can read,…Sep 5, 2025
CVE-2025-39686High 7.8In the Linux kernel, the following vulnerability has been resolved: comedi: Make insn_rw_emulate_bits() do insn->n samples The `insn_rw_emulate_bits()` function is used as a default handler for `INSN…Sep 5, 2025
CVE-2025-39685High 7.1In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number(0x80008000) that was too large, which triggered t…Sep 5, 2025
CVE-2025-39684Medium 5.5In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() syzbot reports a KMSAN kernel-infoleak in `do_in…Sep 5, 2025
CVE-2025-39680High 7.1In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer The data->block[0] variable comes from user.Sep 5, 2025
CVE-2025-39679Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().Sep 5, 2025
CVE-2025-39678Medium 5.5In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL If metric table address is not allocated, accessing metrics_bin wil…Sep 5, 2025
CVE-2025-39676Medium 5.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on error…Sep 5, 2025
CVE-2025-39675Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() The function mod_hdcp_hdcp1_create_session() calls the f…Sep 5, 2025
CVE-2025-39674Medium 5.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interru…Sep 5, 2025
CVE-2025-38737Medium 5.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before calling netfs_alloc_f…Sep 5, 2025
CVE-2025-38734High 7.8In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULL pointer dereferen…Sep 5, 2025
CVE-2025-38731High 7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vm_bind_ioctl double free bug If the argument check during an array bind fails, the bind_ops are freed twice as seen be…Sep 5, 2025
CVE-2025-39726Critical 9.8s390/ism: fix concurrency management in ism_cmd()
Assigned by Linux
Sep 5, 2025
CVE-2025-39724Medium 5.5serial: 8250: fix panic due to PSLVERR
Assigned by Linux
Sep 5, 2025
CVE-2025-39721Medium 5.5crypto: qat - flush misc workqueue during device shutdown
Assigned by Linux
Sep 5, 2025
CVE-2025-39718High 8.4vsock/virtio: Validate length in packet header before skb_put()
Assigned by Linux
Sep 5, 2025
CVE-2025-39705Medium 5.5drm/amd/display: fix a Null pointer dereference vulnerability
Assigned by Linux
Sep 5, 2025
CVE-2025-39703Critical 9.8net, hsr: reject HSR frame if skb can't hold tag
Assigned by Linux
Sep 5, 2025
CVE-2025-39702Critical 9.8ipv6: sr: Fix MAC comparison to be constant-time
Assigned by Linux
Sep 5, 2025
CVE-2025-39697High 7.8NFS: Fix a race when updating an existing write
Assigned by Linux
Sep 5, 2025
CVE-2025-39691High 7.8fs/buffer: fix use-after-free when call bh_read() helper
Assigned by Linux
Sep 5, 2025
CVE-2025-39689High 7.8ftrace: Also allocate and copy hash for reading of filter files
Assigned by Linux
Sep 5, 2025
CVE-2025-39683High 7.8tracing: Limit access to parser->buffer when trace_get_user failed
Assigned by Linux
Sep 5, 2025
CVE-2025-39682
Known exploited
Critical 9.8tls: fix handling of zero-length records on the rx_list
Assigned by Linux
Sep 5, 2025
CVE-2025-39681Medium 5.5x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
Assigned by Linux
Sep 5, 2025
CVE-2025-39677High 7.8net/sched: Fix backlog accounting in qdisc_dequeue_internal
Assigned by Linux
Sep 5, 2025
CVE-2025-39673Critical 9.8ppp: fix race conditions in ppp_fill_forward_path
Assigned by Linux
Sep 5, 2025
CVE-2025-38736High 7.1net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Assigned by Linux
Sep 5, 2025
CVE-2025-38735High 7.8gve: prevent ethtool ops after shutdown
Assigned by Linux
Sep 5, 2025
PreviousPage 68 of 93Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.