CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,658 CVEs published, 318 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,658
Show in the list
Critical, last 7 days
318
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,644 CVEs, showing 3751 to 3800PreviousPage 76 of 93Next
CVESeverityTitlePublished
CVE-2025-21942Medium 5.5btrfs: zoned: fix extent range end unlock in cow_file_range()
Assigned by Linux
Apr 1, 2025
CVE-2025-21939High 7.8drm/xe/hmm: Don't dereference struct page pointers without notifier lock
Assigned by Linux
Apr 1, 2025
CVE-2025-21938High 7.5mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
Assigned by Linux
Apr 1, 2025
CVE-2025-21927Critical 9.8nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
Assigned by Linux
Apr 1, 2025
CVE-2025-21926High 7.8net: gso: fix ownership in __udp_gso_segment
Assigned by Linux
Apr 1, 2025
CVE-2025-21925Medium 5.5llc: do not use skb_get() before dev_queue_xmit()
Assigned by Linux
Apr 1, 2025
CVE-2025-21924High 7.8net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
Assigned by Linux
Apr 1, 2025
CVE-2025-21919High 7.8sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
Assigned by Linux
Apr 1, 2025
CVE-2025-21913Medium 5.5x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
Assigned by Linux
Apr 1, 2025
CVE-2025-21906High 7.6wifi: iwlwifi: mvm: clean up ROC on failure
Assigned by Linux
Apr 1, 2025
CVE-2025-21899High 7.8tracing: Fix bad hist from corrupting named_triggers list
Assigned by Linux
Apr 1, 2025
CVE-2023-53009High 7.8drm/amdkfd: Add sync after creating vram bo
Assigned by Linux
Mar 27, 2025
CVE-2023-53006Critical 9.8cifs: Fix oops due to uncleared server->smbd_conn in reconnect
Assigned by Linux
Mar 27, 2025
CVE-2023-52987High 7.8ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
Assigned by Linux
Mar 27, 2025
CVE-2023-52981High 7.8drm/i915: Fix request ref counting during error capture & debugfs dump
Assigned by Linux
Mar 27, 2025
CVE-2022-49760High 7.8mm/hugetlb: fix PTE marker handling in hugetlb_change_protection()
Assigned by Linux
Mar 27, 2025
CVE-2022-49743High 7.5ovl: Use "buf" flexible array for memcpy() destination
Assigned by Linux
Mar 27, 2025
CVE-2021-4454High 7.5can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
Assigned by Linux
Mar 27, 2025
CVE-2025-21892Medium 4.7RDMA/mlx5: Fix the recovery flow of the UMR QP
Assigned by Linux
Mar 27, 2025
CVE-2025-21890High 8.2idpf: fix checksums set in idpf_rx_rsc()
Assigned by Linux
Mar 27, 2025
CVE-2025-21889High 7.8perf/core: Add RCU read lock protection to perf_iterate_ctx()
Assigned by Linux
Mar 27, 2025
CVE-2025-21888Medium 5.5RDMA/mlx5: Fix a WARN during dereg_mr for DM type
Assigned by Linux
Mar 27, 2025
CVE-2025-21887High 7.8ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
Assigned by Linux
Mar 27, 2025
CVE-2025-21886Medium 5.5RDMA/mlx5: Fix implicit ODP hang on parent deregistration
Assigned by Linux
Mar 27, 2025
CVE-2025-21885High 7.5RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
Assigned by Linux
Mar 27, 2025
CVE-2025-21884High 7.8net: better track kernel sockets lifetime
Assigned by Linux
Mar 27, 2025
CVE-2025-21876High 8.8iommu/vt-d: Fix suspicious RCU usage
Assigned by Linux
Mar 27, 2025
CVE-2025-21875High 7.8mptcp: always handle address removal under msk socket lock
Assigned by Linux
Mar 27, 2025
CVE-2025-21870High 7.8ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Assigned by Linux
Mar 27, 2025
CVE-2025-21867High 7.8bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
Assigned by Linux
Mar 27, 2025
CVE-2023-52927High 7.8netfilter: allow exp not to be removed in nf_ct_find_expectation
Assigned by Linux
Mar 14, 2025
CVE-2025-21865Medium 5.5gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
Assigned by Linux
Mar 12, 2025
CVE-2025-21864High 7.8tcp: drop secpath at the same time as we currently drop dst
Assigned by Linux
Mar 12, 2025
CVE-2025-21863High 7.8io_uring: prevent opcode speculation
Assigned by Linux
Mar 12, 2025
CVE-2025-21862Medium 5.5drop_monitor: fix incorrect initialization order
Assigned by Linux
Mar 12, 2025
CVE-2025-21861Medium 5.5mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
Assigned by Linux
Mar 12, 2025
CVE-2025-21859Medium 5.5USB: gadget: f_midi: f_midi_complete to call queue_work
Assigned by Linux
Mar 12, 2025
CVE-2025-21858High 7.8geneve: Fix use-after-free in geneve_find_dev().
Assigned by Linux
Mar 12, 2025
CVE-2025-21853Medium 5.5bpf: avoid holding freeze_mutex during mmap operation
Assigned by Linux
Mar 12, 2025
CVE-2025-21846Medium 5.5acct: perform last write from workqueue
Assigned by Linux
Mar 12, 2025
CVE-2025-21844High 7.5smb: client: Add check for next_buffer in receive_encrypted_standard()
Assigned by Linux
Mar 12, 2025
CVE-2025-21839High 7.3KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
Assigned by Linux
Mar 7, 2025
CVE-2025-21838Medium 5.5usb: gadget: core: flush gadget workqueue after device removal
Assigned by Linux
Mar 7, 2025
CVE-2025-21836High 7.8io_uring/kbuf: reallocate buf lists on upgrade
Assigned by Linux
Mar 7, 2025
CVE-2025-21835Medium 5.5usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
Assigned by Linux
Mar 7, 2025
CVE-2024-58086High 7.8drm/v3d: Stop active perfmon if it is being destroyed
Assigned by Linux
Mar 6, 2025
CVE-2025-21832High 7.8block: don't revert iter for -EIOCBQUEUED
Assigned by Linux
Mar 6, 2025
CVE-2024-58085Medium 5.5tomoyo: don't emit warning in tomoyo_write_control()
Assigned by Linux
Mar 6, 2025
CVE-2024-58083High 7.8KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
Assigned by Linux
Mar 6, 2025
CVE-2024-58079High 7.8media: uvcvideo: Fix crash during unbind if gpio unit is in use
Assigned by Linux
Mar 6, 2025
PreviousPage 76 of 93Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.