CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,702 CVEs published, 326 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,702
Show in the list
Critical, last 7 days
326
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,636 CVEs, showing 3401 to 3450PreviousPage 69 of 93Next
CVESeverityTitlePublished
CVE-2025-38733High 7.8s390/mm: Do not map lowcore with identity mapping
Assigned by Linux
Sep 5, 2025
CVE-2025-38732Medium 5.5netfilter: nf_reject: don't leak dst refcount for loopback packets
Assigned by Linux
Sep 5, 2025
CVE-2025-38729High 7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bL…Sep 4, 2025
CVE-2025-38726Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect After the call to phy_disconnect() netdev->phydev is…Sep 4, 2025
CVE-2025-38723Medium 5.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpf_int_jit_compile() skips JIT context initialization wh…Sep 4, 2025
CVE-2025-38720Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: hibmcge: fix rtnl deadlock issue Currently, the hibmcge netdev acquires the rtnl_lock in pci_error_handlers.reset_prepare() an…Sep 4, 2025
CVE-2025-38719Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net: hibmcge: fix the division by zero issue When the network port is down, the queue is released, and ring->len is 0.Sep 4, 2025
CVE-2025-38718High 7.8In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist with the original head sk…Sep 4, 2025
CVE-2025-38717Medium 4.7In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcm_unattach() syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are exec…Sep 4, 2025
CVE-2025-38716Medium 5.5In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfs_find_init() The hfs_find_init() method can trigger the crash if tree pointer is NULL: [ 45…Sep 4, 2025
CVE-2025-38715High 7.1In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces is_bnode_offset_valid() method that checks the requested offs…Sep 4, 2025
CVE-2025-38714High 7.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The hfsplus_bnode_read() method can trigger the issue: [ 174.852007][ T9784…Sep 4, 2025
CVE-2025-38713High 7.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_readdir() method is capable to crash by calling hfsplus_uni2a…Sep 4, 2025
CVE-2025-38712Medium 5.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header contains erroneous values that do not reflec…Sep 4, 2025
CVE-2025-38711Medium 5.5In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is called with ReplaceIfExists set and the name…Sep 4, 2025
CVE-2025-38709Medium 5.5In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up with a reproducer where a loop device block size is changed un…Sep 4, 2025
CVE-2025-38707High 7.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name should be smaller than the directory entry size.Sep 4, 2025
CVE-2025-38706Medium 5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runtime() might be called with rtd == NULL whi…Sep 4, 2025
CVE-2025-38703High 7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports.Sep 4, 2025
CVE-2025-38700Medium 5.5In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_reg_mr allocation failure during i…Sep 4, 2025
CVE-2025-38699High 7.8In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe() function fails during initialization, the memory pointed to by bfad->im is free…Sep 4, 2025
CVE-2025-38698Medium 5.5In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative i_size value.Sep 4, 2025
CVE-2025-38697High 7.8In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bound…Sep 4, 2025
CVE-2025-38696Medium 5.5In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kth…Sep 4, 2025
CVE-2025-38695Medium 5.5In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_setu…Sep 4, 2025
CVE-2025-38694Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() In dib7090p_rw_on_apb, msg is controlled by user.Sep 4, 2025
CVE-2025-38693Medium 5.5In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar In w7090p_tuner_write_se…Sep 4, 2025
CVE-2025-38692Medium 5.5In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur if the following conditions occur due to file system corrupt…Sep 4, 2025
CVE-2025-38690Medium 5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent infinite recursion If the buf + offset is not aligned to XE_CAHELINE_BYTES we fallback to using a bounce bu…Sep 4, 2025
CVE-2025-38689Medium 5.5In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512_status() Problem ------- With CONFIG_X86_DEBUG_FPU enabled, reading /proc/[kthread]/arch_st…Sep 4, 2025
CVE-2025-38687Medium 4.7In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi in the below link, which is due to comedi…Sep 4, 2025
CVE-2025-38686Medium 5.5In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry When UFFDIO_MOVE encounters a migration PMD entry, it proceed…Sep 4, 2025
CVE-2025-38684Medium 5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets test-case [1] crashing in ets_class_qlen_noti…Sep 4, 2025
CVE-2025-38683Medium 5.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NETDEV_REGISTER is r…Sep 4, 2025
CVE-2025-38682High 7.8In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2c_unregister_device() Before commit df6d7277e552 ("i2c: core: Do not dereference fwnode i…Sep 4, 2025
CVE-2025-38680High 7.1In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() The buffer length check before calling uvc_parse_format() only…Sep 4, 2025
CVE-2025-38679High 7.1In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The event_seq_changed() handler processes a variable numbe…Sep 4, 2025
CVE-2025-38730High 7.8io_uring/net: commit partial buffers on retry
Assigned by Linux
Sep 4, 2025
CVE-2025-38728Critical 9.1smb3: fix for slab out of bounds on mount to ksmbd
Assigned by Linux
Sep 4, 2025
CVE-2025-38727Medium 5.5netlink: avoid infinite retry looping in netlink_unicast()
Assigned by Linux
Sep 4, 2025
CVE-2025-38725Medium 5.5net: usb: asix_devices: add phy_mask for ax88772 mdio bus
Assigned by Linux
Sep 4, 2025
CVE-2025-38724Critical 9.8nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
Assigned by Linux
Sep 4, 2025
CVE-2025-38722High 7.8habanalabs: fix UAF in export_dmabuf()
Assigned by Linux
Sep 4, 2025
CVE-2025-38721Medium 5.5netfilter: ctnetlink: fix refcount leak on table dump
Assigned by Linux
Sep 4, 2025
CVE-2025-38710High 7.8gfs2: Validate i_depth for exhash directories
Assigned by Linux
Sep 4, 2025
CVE-2025-38708Critical 9.8drbd: add missing kref_get in handle_write_conflicts
Assigned by Linux
Sep 4, 2025
CVE-2025-38705Medium 5.5drm/amd/pm: fix null pointer access
Assigned by Linux
Sep 4, 2025
CVE-2025-38704High 7.8rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
Assigned by Linux
Sep 4, 2025
CVE-2025-38702High 7.8fbdev: fix potential buffer overflow in do_register_framebuffer()
Assigned by Linux
Sep 4, 2025
CVE-2025-38701Medium 5.5ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Assigned by Linux
Sep 4, 2025
PreviousPage 69 of 93Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.