CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,476 CVEs published, 336 critical, and 6 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,476
Show in the list
Critical, last 7 days
336
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux. Show all products

8,995 CVEs, showing 3701 to 3750PreviousPage 75 of 180Next
CVESeverityTitlePublished
CVE-2026-72322Critical 9.8ipv6: mcast: Fix potential UAF in MLD delayed work
Assigned by Linux
Aug 15, 2026
CVE-2026-72321Not yet scoredipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()
Assigned by Linux
Aug 15, 2026
CVE-2026-72320Critical 9.1netfilter: nft_lookup: fix catchall element handling with inverted lookups
Assigned by Linux
Aug 15, 2026
CVE-2026-72319Critical 9.8ipvs: ensure inner headers in ICMP errors are in headroom
Assigned by Linux
Aug 15, 2026
CVE-2026-72318Critical 9.4cifs: validate DFS referral string offsets
Assigned by Linux
Aug 15, 2026
CVE-2026-72317Critical 9.8SUNRPC: pin upper rpc_clnt across the TLS connect_worker
Assigned by Linux
Aug 15, 2026
CVE-2026-72316Not yet scoreddm era: fix NULL pointer dereference in metadata_open()
Assigned by Linux
Aug 15, 2026
CVE-2026-72315High 7.8smb: client: fix busy dentry warning on unmount after DIO
Assigned by Linux
Aug 15, 2026
CVE-2026-72314High 7.8regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
Assigned by Linux
Aug 15, 2026
CVE-2026-72313Not yet scoreddrm/fb-helper: Only consider active CRTCs for vblank sync
Assigned by Linux
Aug 15, 2026
CVE-2026-72312High 7.9octeontx2-af: fix VF bringup affecting PF promiscuous state
Assigned by Linux
Aug 15, 2026
CVE-2026-72311Not yet scoreddrm/xe: free madvise VMA array on L2 flush failure
Assigned by Linux
Aug 15, 2026
CVE-2026-72310High 8.1smb: client: fix overflow in passthrough ioctl bounds check
Assigned by Linux
Aug 15, 2026
CVE-2026-72309Not yet scoredtracing/remotes: Fix leak in trace_remote_alloc_buffer() error path
Assigned by Linux
Aug 15, 2026
CVE-2026-72308Not yet scoredmlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
Assigned by Linux
Aug 15, 2026
CVE-2026-72307Not yet scoredmlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
Assigned by Linux
Aug 15, 2026
CVE-2026-72306Not yet scoredvduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
Assigned by Linux
Aug 15, 2026
CVE-2026-72305Not yet scoredVDUSE: avoid leaking information to userspace
Assigned by Linux
Aug 15, 2026
CVE-2026-72304High 7.8ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
Assigned by Linux
Aug 15, 2026
CVE-2026-72303High 7.8ASoC: SOF: ipc4-control: Validate notification payload size
Assigned by Linux
Aug 15, 2026
CVE-2026-72302High 7.8ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
Assigned by Linux
Aug 15, 2026
CVE-2026-72301High 7.8ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
Assigned by Linux
Aug 15, 2026
CVE-2026-72300Not yet scoredASoC: SOF: topology: validate vendor array size before parsing
Assigned by Linux
Aug 15, 2026
CVE-2026-72299Critical 9.8tipc: restrict socket queue dumps in enqueue tracepoints
Assigned by Linux
Aug 15, 2026
CVE-2026-72298High 8.4net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
Assigned by Linux
Aug 15, 2026
CVE-2026-72297High 7.1net: atm: reject out-of-range traffic classes in QoS validation
Assigned by Linux
Aug 15, 2026
CVE-2026-72296Critical 9.1net: ife: require ETH_HLEN to be pullable in ife_decode()
Assigned by Linux
Aug 15, 2026
CVE-2026-72295High 8.8LoongArch: KVM: Validate irqchip index in irqfd routing
Assigned by Linux
Aug 15, 2026
CVE-2026-72294High 8.8LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
Assigned by Linux
Aug 15, 2026
CVE-2026-72293Not yet scoredKVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault()
Assigned by Linux
Aug 15, 2026
CVE-2026-72292Not yet scoredKVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory
Assigned by Linux
Aug 15, 2026
CVE-2026-72291Critical 9.3KVM: s390: Fix unlikely race in try_get_locked_pte()
Assigned by Linux
Aug 15, 2026
CVE-2026-72290Not yet scoredKVM: s390: pci: Fix GISC refcount leak on AIF enable failure
Assigned by Linux
Aug 15, 2026
CVE-2026-72289Critical 9.3KVM: arm64: vgic: Check the interrupt is still ours before migrating it
Assigned by Linux
Aug 15, 2026
CVE-2026-72288Critical 9.3KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling
Assigned by Linux
Aug 15, 2026
CVE-2026-72287High 7.8KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks
Assigned by Linux
Aug 15, 2026
CVE-2026-72286High 8.8KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs
Assigned by Linux
Aug 15, 2026
CVE-2026-72285High 7.8KVM: TDX: Reject concurrent change to CPUID entry count
Assigned by Linux
Aug 15, 2026
CVE-2026-72284High 7.1KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
Assigned by Linux
Aug 15, 2026
CVE-2026-72283High 8.8KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails
Assigned by Linux
Aug 15, 2026
CVE-2026-72282High 7.8KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
Assigned by Linux
Aug 15, 2026
CVE-2026-72281Not yet scoredKVM: arm64: account pKVM reclaim against the VM mm
Assigned by Linux
Aug 15, 2026
CVE-2026-72280High 7.1KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2
Assigned by Linux
Aug 15, 2026
CVE-2026-72279Critical 9.0KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR
Assigned by Linux
Aug 15, 2026
CVE-2026-72278Critical 9.3KVM: arm64: nv: Re-translate VNCR before injecting abort
Assigned by Linux
Aug 15, 2026
CVE-2026-72277Critical 9.3KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
Assigned by Linux
Aug 15, 2026
CVE-2026-72276Not yet scoredfbdev: metronomefb: fix potential memory leak in metronomefb_probe()
Assigned by Linux
Aug 15, 2026
CVE-2026-72275Not yet scoredfbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
Assigned by Linux
Aug 15, 2026
CVE-2026-72274Not yet scoredfbdev: hecubafb: fix potential memory leak in hecubafb_probe()
Assigned by Linux
Aug 15, 2026
CVE-2026-72273Not yet scoredfbdev: efifb: fix memory leak in efifb_probe()
Assigned by Linux
Aug 15, 2026
PreviousPage 75 of 180Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.