CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-22 19:10 UTC)

What this means for you

This week: 4,440 CVEs published, 302 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 4,440; Show in the list
Critical, last 7 days: 302; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,754; Show in the list

Showing CVEs that name the product linux:linux_kernel. Show all products

4,665 CVEs, showing 4601 to 4650PreviousPage 93 of 94Next

CVE	Severity	Title	Published
CVE-2021-20320	Medium 5.5	A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. Assigned by redhat	Feb 18, 2022
CVE-2021-4090	High 7.1	An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Assigned by redhat	Feb 18, 2022
CVE-2021-44879	Medium 5.5	In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. Assigned by mitre	Feb 13, 2022
CVE-2022-0185 Known exploited	High 8.4	A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. Assigned by redhat	Feb 11, 2022
CVE-2021-45402	Medium 5.5	The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain pote… Assigned by mitre	Feb 11, 2022
CVE-2022-0264	Medium 5.5	A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Assigned by redhat	Feb 4, 2022
CVE-2021-22600 Known exploited	Medium 6.6	Double Free in net/packet/af_packet.c leading to priviledge escalation Assigned by Google	Jan 26, 2022
CVE-2021-34866	High 8.8	This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. Assigned by zdi	Jan 25, 2022
CVE-2021-4001	Medium 4.1	A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. Assigned by redhat	Jan 21, 2022
CVE-2021-0920 Known exploited	Medium 6.4	In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. Assigned by google_android	Dec 15, 2021
CVE-2021-43975	Medium 6.7	In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-… Assigned by mitre	Nov 17, 2021
CVE-2021-38198	Medium 5.5	arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault. Assigned by mitre	Aug 8, 2021
CVE-2021-38199	Medium 6.5	fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arran… Assigned by mitre	Aug 8, 2021
CVE-2021-38202	High 7.5	fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is bei… Assigned by mitre	Aug 8, 2021
CVE-2021-38206	Medium 5.5	The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser)… Assigned by mitre	Aug 8, 2021
CVE-2021-38166	High 7.8	In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. Assigned by mitre	Aug 7, 2021
CVE-2021-3655	Low 3.3	A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Assigned by redhat	Aug 5, 2021
CVE-2021-34556	Medium 5.5	In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism… Assigned by mitre	Aug 2, 2021
CVE-2021-35477	Medium 5.5	In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting sto… Assigned by mitre	Aug 2, 2021
CVE-2021-37159	Medium 6.4	hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free. Assigned by mitre	Jul 21, 2021
CVE-2021-22555 Known exploited	High 8.3	Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Assigned by Google	Jul 7, 2021
CVE-2020-28097	Medium 5.9	The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. Assigned by mitre	Jun 24, 2021
CVE-2021-33624	Medium 4.7	In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory loca… Assigned by mitre	Jun 23, 2021
CVE-2021-34693	Medium 5.5	net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. Assigned by mitre	Jun 14, 2021
CVE-2020-36311	Medium 5.5	An issue was discovered in the Linux kernel before 5.9. Assigned by mitre	Apr 6, 2021
CVE-2021-28972	Medium 6.7	In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace… Assigned by mitre	Mar 22, 2021
CVE-2020-27171	Medium 6.0	An issue was discovered in the Linux kernel before 5.11.8. Assigned by mitre	Mar 20, 2021
CVE-2020-27170	Medium 4.7	An issue was discovered in the Linux kernel before 5.11.8. Assigned by mitre	Mar 20, 2021
CVE-2020-25639	Medium 4.4	A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. Assigned by redhat	Mar 4, 2021
CVE-2020-29374	Low 3.6	An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. Assigned by mitre	Nov 28, 2020
CVE-2020-14390	Medium 5.6	A flaw was found in the Linux kernel in versions before 5.9-rc6. Assigned by redhat	Sep 18, 2020
CVE-2020-10781	Medium 5.5	A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM devic… Assigned by redhat	Sep 16, 2020
CVE-2020-14304	Medium 4.4	A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device.	Sep 15, 2020
CVE-2020-14416	Medium 4.2	In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. Assigned by mitre	Jun 18, 2020
CVE-2020-12769	Medium 5.5	An issue was discovered in the Linux kernel before 5.4.17. Assigned by mitre	May 9, 2020
CVE-2019-20794	Medium 4.7	An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. Assigned by mitre	May 9, 2020
CVE-2020-11609	Medium 4.3	An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. Assigned by mitre	Apr 7, 2020
CVE-2020-11494	Medium 4.4	An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. Assigned by mitre	Apr 2, 2020
CVE-2019-20095	Medium 5.5	mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. Assigned by mitre	Dec 30, 2019
CVE-2019-19965	Medium 4.7	In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race… Assigned by mitre	Dec 25, 2019
CVE-2019-19530	Medium 4.6	In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. Assigned by mitre	Dec 3, 2019
CVE-2019-19462	Medium 5.5	relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result. Assigned by mitre	Nov 30, 2019
CVE-2019-19083	Medium 4.7	Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-19082	Medium 4.7	Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-19081	Medium 5.9	A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory… Assigned by mitre	Nov 18, 2019
CVE-2019-19080	Medium 5.9	Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memor… Assigned by mitre	Nov 18, 2019
CVE-2019-19066	Medium 4.7	A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering b… Assigned by mitre	Nov 18, 2019
CVE-2019-19054	Medium 4.7	A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by tri… Assigned by mitre	Nov 18, 2019
CVE-2019-18806	Medium 5.5	A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) b… Assigned by mitre	Nov 7, 2019
CVE-2019-16089	Medium 4.1	An issue was discovered in the Linux kernel through 5.2.13. Assigned by mitre	Sep 6, 2019

PreviousPage 93 of 94Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.