CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,475 CVEs published, 335 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,475
Show in the list
Critical, last 7 days
335
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,988 CVEs, showing 3601 to 3650PreviousPage 73 of 180Next
CVESeverityTitlePublished
CVE-2026-72422Critical 9.8ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
Assigned by Linux
Aug 15, 2026
CVE-2026-72421Critical 10.0ipv4: fib: Don't ignore error route in local/main tables.
Assigned by Linux
Aug 15, 2026
CVE-2026-72420High 8.8md/raid5: avoid R5_Overlap races while breaking stripe batches
Assigned by Linux
Aug 15, 2026
CVE-2026-72419High 7.8netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
Assigned by Linux
Aug 15, 2026
CVE-2026-72418High 7.5netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
Assigned by Linux
Aug 15, 2026
CVE-2026-72417Critical 9.8netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()
Assigned by Linux
Aug 15, 2026
CVE-2026-72416High 7.3netfilter: nft_compat: ebtables emulation must reject non-bridge targets
Assigned by Linux
Aug 15, 2026
CVE-2026-72415High 7.1ASoC: SDCA: Validate written enum value in ge_put_enum_double()
Assigned by Linux
Aug 15, 2026
CVE-2026-72414Not yet scorednet: dsa: sja1105: round up PTP perout pin duration
Assigned by Linux
Aug 15, 2026
CVE-2026-72413Not yet scoredsctp: fix err_chunk memory leaks in INIT handling
Assigned by Linux
Aug 15, 2026
CVE-2026-72412Critical 9.3s390/mm: Fix handling of _PAGE_UNUSED pte bit
Assigned by Linux
Aug 15, 2026
CVE-2026-72411High 7.8net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work
Assigned by Linux
Aug 15, 2026
CVE-2026-72410High 7.8octeontx2-af: Validate NIX maximum LFs correctly
Assigned by Linux
Aug 15, 2026
CVE-2026-72409High 7.5net: mvneta: re-enable percpu interrupt on resume
Assigned by Linux
Aug 15, 2026
CVE-2026-72408Critical 10.0geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
Assigned by Linux
Aug 15, 2026
CVE-2026-72407Critical 10.0geneve: validate inner network offset in geneve_gro_complete()
Assigned by Linux
Aug 15, 2026
CVE-2026-72406High 7.8net: sungem: fix probe error cleanup
Assigned by Linux
Aug 15, 2026
CVE-2026-72405High 7.8net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync
Assigned by Linux
Aug 15, 2026
CVE-2026-72404High 7.8tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
Assigned by Linux
Aug 15, 2026
CVE-2026-72403Not yet scoredALSA: FCP: Fix NULL pointer dereference in interface lookup
Assigned by Linux
Aug 15, 2026
CVE-2026-72402Not yet scoredbpf: Mask pseudo pointer values in verifier logs
Assigned by Linux
Aug 15, 2026
CVE-2026-72401Not yet scoredbpf: Fix insn_aux_data leak on verifier err_free_env path
Assigned by Linux
Aug 15, 2026
CVE-2026-72400High 7.8seg6: validate SRH length before reading fixed fields
Assigned by Linux
Aug 15, 2026
CVE-2026-72399Critical 9.8net: enetc: check the number of BDs needed for xdp_frame
Assigned by Linux
Aug 15, 2026
CVE-2026-72398Critical 9.8sctp: add INIT verification after cookie unpacking
Assigned by Linux
Aug 15, 2026
CVE-2026-72397High 7.1hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()
Assigned by Linux
Aug 15, 2026
CVE-2026-72396Not yet scoredhwmon: adm1275: Prevent reading uninitialized stack
Assigned by Linux
Aug 15, 2026
CVE-2026-72395High 7.1hwmon: (pmbus) Fix passing events to regulator core
Assigned by Linux
Aug 15, 2026
CVE-2026-72394Not yet scoredhwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero
Assigned by Linux
Aug 15, 2026
CVE-2026-72393Critical 9.8eth: fbnic: don't cache shinfo across skb realloc
Assigned by Linux
Aug 15, 2026
CVE-2026-72392Not yet scoredipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
Assigned by Linux
Aug 15, 2026
CVE-2026-72391Not yet scorednet: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
Assigned by Linux
Aug 15, 2026
CVE-2026-72390High 7.8net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
Assigned by Linux
Aug 15, 2026
CVE-2026-72389High 7.8bridge: stp: Fix a potential use-after-free when deleting a bridge
Assigned by Linux
Aug 15, 2026
CVE-2026-72388Not yet scoreddrm/panthor: Always use the IRQ-safe variant when acquiring the fence lock
Assigned by Linux
Aug 15, 2026
CVE-2026-72387Not yet scoreddrm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom()
Assigned by Linux
Aug 15, 2026
CVE-2026-72386Not yet scoreddrm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced
Assigned by Linux
Aug 15, 2026
CVE-2026-72385Not yet scoredtracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry()
Assigned by Linux
Aug 15, 2026
CVE-2026-72384Not yet scoredirqchip/ts4800: Fix missing chained handler cleanup on remove
Assigned by Linux
Aug 15, 2026
CVE-2026-72383High 7.8sctp: fix addr_wq_timer race in sctp_free_addr_wq()
Assigned by Linux
Aug 15, 2026
CVE-2026-72382High 8.8ksmbd: reject undersized DACLs before parsing ACEs
Assigned by Linux
Aug 15, 2026
CVE-2026-72381Critical 9.8ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
Assigned by Linux
Aug 15, 2026
CVE-2026-72380High 8.8xen/pvcalls: bound backend response req_id before indexing rsp[]
Assigned by Linux
Aug 15, 2026
CVE-2026-72379Not yet scoredfs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
Assigned by Linux
Aug 15, 2026
CVE-2026-72378High 7.5afs: Fix error code in afs_extract_vl_addrs()
Assigned by Linux
Aug 15, 2026
CVE-2026-72377Not yet scoredafs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints
Assigned by Linux
Aug 15, 2026
CVE-2026-72376Not yet scoredafs: Fix misplaced inc of net->cells_outstanding
Assigned by Linux
Aug 15, 2026
CVE-2026-72375High 7.8afs: Fix reinitialisation of the inode, in particular ->lock_work
Assigned by Linux
Aug 15, 2026
CVE-2026-72374High 7.5afs: Fix callback service message parsers to pass through -EAGAIN
Assigned by Linux
Aug 15, 2026
CVE-2026-72373High 7.5afs: Fix missing NULL pointer check in afs_break_some_callbacks()
Assigned by Linux
Aug 15, 2026
PreviousPage 73 of 180Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.