CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,655 CVEs published, 316 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,655
Show in the list
Critical, last 7 days
316
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,644 CVEs, showing 3801 to 3850PreviousPage 77 of 93Next
CVESeverityTitlePublished
CVE-2024-58077Medium 5.5ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
Assigned by Linux
Mar 6, 2025
CVE-2025-21830High 7.3landlock: Handle weird files
Assigned by Linux
Mar 6, 2025
CVE-2025-21827High 7.8Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()
Assigned by Linux
Mar 6, 2025
CVE-2025-21825High 7.8bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
Assigned by Linux
Mar 6, 2025
CVE-2024-58074Medium 5.5drm/i915: Grab intel_display from the encoder to avoid potential oopsies
Assigned by Linux
Mar 6, 2025
CVE-2024-58072High 7.8wifi: rtlwifi: remove unused check_buddy_priv
Assigned by Linux
Mar 6, 2025
CVE-2024-58071Medium 5.5team: prevent adding a device which is already a team device lower
Assigned by Linux
Mar 6, 2025
CVE-2024-58068Medium 5.5OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
Assigned by Linux
Mar 6, 2025
CVE-2024-58063Medium 5.5wifi: rtlwifi: fix memory leaks and invalid access at probe error path
Assigned by Linux
Mar 6, 2025
CVE-2024-58061Medium 5.5wifi: mac80211: prohibit deactivating all links
Assigned by Linux
Mar 6, 2025
CVE-2024-58058Medium 5.5ubifs: skip dumping tnc tree when zroot is null
Assigned by Linux
Mar 6, 2025
CVE-2024-58056Medium 5.5remoteproc: core: Fix ida_free call while not allocated
Assigned by Linux
Mar 6, 2025
CVE-2024-58053High 7.5rxrpc: Fix handling of received connection abort
Assigned by Linux
Mar 6, 2025
CVE-2024-58051Medium 5.5ipmi: ipmb: Add check devm_kasprintf() returned value
Assigned by Linux
Mar 6, 2025
CVE-2025-21814Medium 5.5ptp: Ensure info->enable callback is always set
Assigned by Linux
Feb 27, 2025
CVE-2025-21810High 7.8driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()
Assigned by Linux
Feb 27, 2025
CVE-2025-21808High 7.8net: xdp: Disallow attaching device-bound programs in generic mode
Assigned by Linux
Feb 27, 2025
CVE-2025-21806Medium 5.5net: let net.core.dev_weight always be non-zero
Assigned by Linux
Feb 27, 2025
CVE-2025-21802Medium 5.5net: hns3: fix oops when unload drivers paralleling
Assigned by Linux
Feb 27, 2025
CVE-2025-21801High 7.8net: ravb: Fix missing rtnl lock in suspend/resume path
Assigned by Linux
Feb 27, 2025
CVE-2025-21796Critical 9.8nfsd: clear acl_access/acl_default after releasing them
Assigned by Linux
Feb 27, 2025
CVE-2025-21795High 7.5NFSD: fix hang in nfsd4_shutdown_callback
Assigned by Linux
Feb 27, 2025
CVE-2025-21791High 7.8vrf: use RCU protection in l3mdev_l3_out()
Assigned by Linux
Feb 27, 2025
CVE-2025-21790Medium 5.5vxlan: check vxlan_vnigroup_init() return value
Assigned by Linux
Feb 27, 2025
CVE-2025-21787Medium 5.5team: better TEAM_OPTION_TYPE_STRING validation
Assigned by Linux
Feb 27, 2025
CVE-2025-21785High 7.8arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
Assigned by Linux
Feb 27, 2025
CVE-2025-21780High 7.8drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
Assigned by Linux
Feb 27, 2025
CVE-2025-21779Medium 5.5KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
Assigned by Linux
Feb 27, 2025
CVE-2025-21776Medium 5.5USB: hub: Ignore non-compliant devices with too many configs or interfaces
Assigned by Linux
Feb 27, 2025
CVE-2025-21772High 7.8partitions: mac: fix handling of bogus partition table
Assigned by Linux
Feb 27, 2025
CVE-2025-21768Medium 5.5net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
Assigned by Linux
Feb 27, 2025
CVE-2025-21767Medium 5.5clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
Assigned by Linux
Feb 27, 2025
CVE-2025-21766High 8.1ipv4: use RCU protection in __ip_rt_update_pmtu()
Assigned by Linux
Feb 27, 2025
CVE-2025-21765High 8.1ipv6: use RCU protection in ip6_default_advmss()
Assigned by Linux
Feb 27, 2025
CVE-2025-21764High 7.8ndisc: use RCU protection in ndisc_alloc_skb()
Assigned by Linux
Feb 27, 2025
CVE-2025-21763High 7.8neighbour: use RCU protection in __neigh_notify()
Assigned by Linux
Feb 27, 2025
CVE-2025-21762High 8.1arp: use RCU protection in arp_xmit()
Assigned by Linux
Feb 27, 2025
CVE-2025-21761High 7.8openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
Assigned by Linux
Feb 27, 2025
CVE-2025-21760High 8.1ndisc: extend RCU protection in ndisc_send_skb()
Assigned by Linux
Feb 27, 2025
CVE-2025-21758High 7.8ipv6: mcast: add RCU protection to mld_newpack()
Assigned by Linux
Feb 27, 2025
CVE-2025-21756High 7.8vsock: Keep the binding until socket destruction
Assigned by Linux
Feb 27, 2025
CVE-2024-58020Medium 5.5HID: multitouch: Add NULL check in mt_input_configured
Assigned by Linux
Feb 27, 2025
CVE-2024-54458High 7.8scsi: ufs: bsg: Set bsg_queue to NULL after removal
Assigned by Linux
Feb 27, 2025
CVE-2025-21753High 7.8btrfs: fix use-after-free when attempting to join an aborted transaction
Assigned by Linux
Feb 27, 2025
CVE-2025-21745Medium 5.5blk-cgroup: Fix class @block_class's subsystem refcount leakage
Assigned by Linux
Feb 27, 2025
CVE-2025-21744Medium 5.5wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
Assigned by Linux
Feb 27, 2025
CVE-2025-21738High 7.8ata: libata-sff: Ensure that we cannot write outside the allocated buffer
Assigned by Linux
Feb 27, 2025
CVE-2025-21735High 8.8NFC: nci: Add bounds checking in nci_hci_create_pipe()
Assigned by Linux
Feb 27, 2025
CVE-2024-58017Medium 5.5printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
Assigned by Linux
Feb 27, 2025
CVE-2024-58016Medium 5.5safesetid: check size of policy writes
Assigned by Linux
Feb 27, 2025
PreviousPage 77 of 93Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.