CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,576 CVEs published, 317 critical, and 9 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,576
Show in the list
Critical, last 7 days
317
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,644 CVEs, showing 3501 to 3550PreviousPage 71 of 93Next
CVESeverityTitlePublished
CVE-2025-38505High 7.1wifi: mwifiex: discard erroneous disassoc frames on STA interface
Assigned by Linux
Aug 16, 2025
CVE-2025-38502High 7.8bpf: Fix oob access in cgroup local storage
Assigned by Linux
Aug 16, 2025
CVE-2025-38499High 7.8clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
Assigned by Linux
Aug 11, 2025
CVE-2024-58238High 7.1Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
Assigned by Linux
Aug 9, 2025
CVE-2022-50233High 7.8Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
Assigned by Linux
Aug 9, 2025
CVE-2025-38491High 8.2mptcp: make fallback action and fallback decision atomic
Assigned by Linux
Jul 28, 2025
CVE-2025-38478High 7.8comedi: Fix initialization of data for instructions that write to subdevice
Assigned by Linux
Jul 28, 2025
CVE-2025-38472Critical 9.8netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
Assigned by Linux
Jul 28, 2025
CVE-2025-38470High 7.8net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Assigned by Linux
Jul 28, 2025
CVE-2025-38466High 7.8perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Assigned by Linux
Jul 25, 2025
CVE-2025-38460High 7.0atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Assigned by Linux
Jul 25, 2025
CVE-2025-38455High 7.8KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
Assigned by Linux
Jul 25, 2025
CVE-2025-38449High 7.8drm/gem: Acquire references on GEM handles for framebuffers
Assigned by Linux
Jul 25, 2025
CVE-2025-38440High 7.8net/mlx5e: Fix race between DIM disable and net_dim()
Assigned by Linux
Jul 25, 2025
CVE-2025-38439Critical 9.8bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Assigned by Linux
Jul 25, 2025
CVE-2025-38430Critical 9.8nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
Assigned by Linux
Jul 25, 2025
CVE-2025-38424High 7.8perf: Fix sample vs do_exit()
Assigned by Linux
Jul 25, 2025
CVE-2025-38421High 7.8platform/x86/amd: pmf: Use device managed allocations
Assigned by Linux
Jul 25, 2025
CVE-2025-38414Medium 5.5wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
Assigned by Linux
Jul 25, 2025
CVE-2025-38412High 7.8platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
Assigned by Linux
Jul 25, 2025
CVE-2025-38408High 7.8genirq/irq_sim: Initialize work context pointers properly
Assigned by Linux
Jul 25, 2025
CVE-2025-38405High 7.5nvmet: fix memory leak of bio integrity
Assigned by Linux
Jul 25, 2025
CVE-2025-38399High 7.5scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
Assigned by Linux
Jul 25, 2025
CVE-2025-38386High 7.8ACPICA: Refuse to evaluate a method if arguments are missing
Assigned by Linux
Jul 25, 2025
CVE-2025-38375High 8.4virtio-net: ensure the received length does not exceed allocated size
Assigned by Linux
Jul 25, 2025
CVE-2025-38372High 7.8RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
Assigned by Linux
Jul 25, 2025
CVE-2025-38359Medium 5.5s390/mm: Fix in_atomic() handling in do_secure_storage_access()
Assigned by Linux
Jul 25, 2025
CVE-2025-38352
Known exploited
High 7.8posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
Assigned by Linux
Jul 22, 2025
CVE-2025-38346High 7.8ftrace: Fix UAF when lookup kallsym after ftrace disabled
Assigned by Linux
Jul 10, 2025
CVE-2025-38342High 7.0software node: Correct a OOB check in software_node_get_reference_args()
Assigned by Linux
Jul 10, 2025
CVE-2025-38322Medium 5.5perf/x86/intel: Fix crash in icl_update_topdown_event()
Assigned by Linux
Jul 10, 2025
CVE-2025-38321High 7.8smb: Log an error when close_all_cached_dirs fails
Assigned by Linux
Jul 10, 2025
CVE-2025-38317High 7.8wifi: ath12k: Fix buffer overflow in debugfs
Assigned by Linux
Jul 10, 2025
CVE-2025-38303High 7.8Bluetooth: eir: Fix possible crashes on eir_create_adv_data
Assigned by Linux
Jul 10, 2025
CVE-2025-38293High 8.8wifi: ath11k: fix node corruption in ar->arvifs list
Assigned by Linux
Jul 10, 2025
CVE-2025-38292High 8.8wifi: ath12k: fix invalid access to memory
Assigned by Linux
Jul 10, 2025
CVE-2025-38291High 8.8wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash
Assigned by Linux
Jul 10, 2025
CVE-2025-38290High 8.8wifi: ath12k: fix node corruption in ar->arvifs list
Assigned by Linux
Jul 10, 2025
CVE-2025-38284Medium 5.5wifi: rtw89: pci: configure manual DAC mode via PCI config API only
Assigned by Linux
Jul 10, 2025
CVE-2025-38279High 7.8bpf: Do not include stack ptr register in precision backtracking bookkeeping
Assigned by Linux
Jul 10, 2025
CVE-2025-38278High 7.8octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
Assigned by Linux
Jul 10, 2025
CVE-2025-38272Medium 5.5net: dsa: b53: do not enable EEE on bcm63xx
Assigned by Linux
Jul 10, 2025
CVE-2025-38270High 7.8net: drv: netdevsim: don't napi_complete() from netpoll
Assigned by Linux
Jul 10, 2025
CVE-2025-38264Critical 9.8nvme-tcp: sanitize request list handling
Assigned by Linux
Jul 9, 2025
CVE-2025-38262High 7.8tty: serial: uartlite: register uart driver in init
Assigned by Linux
Jul 9, 2025
CVE-2025-38261High 7.8riscv: save the SR_SUM status over switches
Assigned by Linux
Jul 9, 2025
CVE-2025-38257High 7.3s390/pkey: Prevent overflow in size calculation for memdup_user()
Assigned by Linux
Jul 9, 2025
CVE-2025-38253High 8.8HID: wacom: fix crash in wacom_aes_battery_handler()
Assigned by Linux
Jul 9, 2025
CVE-2025-38250High 7.8Bluetooth: hci_core: Fix use-after-free in vhci_flush()
Assigned by Linux
Jul 9, 2025
CVE-2025-38246Critical 9.8bnxt: properly flush XDP redirect lists
Assigned by Linux
Jul 9, 2025
PreviousPage 71 of 93Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.