CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,540 CVEs published, 327 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,540
Show in the list
Critical, last 7 days
327
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,755
Show in the list

Showing CVEs that name the product linux:linux. Show all products

9,454 CVEs, showing 4701 to 4750PreviousPage 95 of 190Next
CVESeverityTitlePublished
CVE-2026-64538Not yet scoredipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
Assigned by Linux
Jul 27, 2026
CVE-2026-64537Not yet scoredbridge: cfm: reject invalid CCM interval at configuration time
Assigned by Linux
Jul 27, 2026
CVE-2026-17523High 7.8can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
Assigned by redhat
Jul 27, 2026
CVE-2026-64536High 8.1staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Assigned by Linux
Jul 27, 2026
CVE-2026-64535Critical 9.8nvmet-tcp: Fix potential UAF when ddgst mismatch
Assigned by Linux
Jul 27, 2026
CVE-2026-64534Critical 9.8nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
Assigned by Linux
Jul 27, 2026
CVE-2026-64533High 7.8fs/ntfs3: validate lcns_follow in log_replay conversion
Assigned by Linux
Jul 27, 2026
CVE-2026-64532High 7.8fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
Assigned by Linux
Jul 27, 2026
CVE-2026-64531High 7.8net: openvswitch: reject oversized nested action attrs
Assigned by Linux
Jul 27, 2026
CVE-2024-14040High 7.8net: nexthop: Increase weight to u16
Assigned by Linux
Jul 26, 2026
CVE-2026-64530Critical 9.8net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Assigned by Linux
Jul 26, 2026
CVE-2026-64529High 7.8crypto: qat - remove unused character device and IOCTLs
Assigned by Linux
Jul 25, 2026
CVE-2026-64528Not yet scoredtty: serial: samsung: Remove redundant port lock acquisition in rx helpers
Assigned by Linux
Jul 25, 2026
CVE-2026-64527Not yet scoreddrm/hyperv: validate VMBus packet size in receive callback
Assigned by Linux
Jul 25, 2026
CVE-2026-64526Not yet scoredethtool: tsconfig: fix missing ethnl_ops_complete()
Assigned by Linux
Jul 25, 2026
CVE-2026-64525Not yet scoredxfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit
Assigned by Linux
Jul 25, 2026
CVE-2026-64524High 7.7drm/hyperv: validate resolution_count and fix WIN8 fallback
Assigned by Linux
Jul 25, 2026
CVE-2026-64523Critical 9.8net/handshake: Take a long-lived file reference at submit
Assigned by Linux
Jul 25, 2026
CVE-2026-64522High 8.8net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
Assigned by Linux
Jul 25, 2026
CVE-2026-64521Not yet scoredpinctrl: meson: amlogic-a4: fix deadlock issue
Assigned by Linux
Jul 25, 2026
CVE-2026-64520High 8.4firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
Assigned by Linux
Jul 25, 2026
CVE-2026-64519Not yet scoredNFSD: Fix infinite loop in layout state revocation
Assigned by Linux
Jul 25, 2026
CVE-2026-64518Not yet scoredtcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().
Assigned by Linux
Jul 25, 2026
CVE-2026-64517Not yet scoreddrm/xe/gsc: Fix double-free of managed BO in error path
Assigned by Linux
Jul 25, 2026
CVE-2026-64516High 8.8drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
Assigned by Linux
Jul 25, 2026
CVE-2026-64515High 8.3wifi: mac80211: fix MLE defragmentation
Assigned by Linux
Jul 25, 2026
CVE-2026-64514Not yet scoreduserfaultfd: gate must_wait writability check on pte_present()
Assigned by Linux
Jul 25, 2026
CVE-2026-64513Not yet scoredKVM: x86: Unconditionally recompute CR8 intercept on PPR update
Assigned by Linux
Jul 25, 2026
CVE-2026-64512Not yet scoredACPI: CPPC: Suppress UBSAN warning caused by field misuse
Assigned by Linux
Jul 25, 2026
CVE-2026-64511Not yet scoredACPI: NFIT: core: Fix possible NULL pointer dereference
Assigned by Linux
Jul 25, 2026
CVE-2026-64510High 7.0ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Assigned by Linux
Jul 25, 2026
CVE-2026-64509Not yet scoredrust: block: fix GenDisk cleanup paths
Assigned by Linux
Jul 25, 2026
CVE-2026-64508Not yet scoredbpf: Support for hardening against JIT spraying
Assigned by Linux
Jul 25, 2026
CVE-2026-64507Not yet scoredx86/bugs: Enable IBPB flush on BPF JIT allocation
Assigned by Linux
Jul 25, 2026
CVE-2026-64506Not yet scoredwifi: rtw89: correct drop logic for malformed AMPDU frames
Assigned by Linux
Jul 25, 2026
CVE-2026-64505Not yet scoredusb: gadget: function: rndis: add length check for header
Assigned by Linux
Jul 25, 2026
CVE-2026-64504Not yet scorediio: accel: bmc150: clamp the device-reported FIFO frame count
Assigned by Linux
Jul 25, 2026
CVE-2026-64503Not yet scorediio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
Assigned by Linux
Jul 25, 2026
CVE-2026-64502High 7.8iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices
Assigned by Linux
Jul 25, 2026
CVE-2026-64501High 7.1iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
Assigned by Linux
Jul 25, 2026
CVE-2026-64500Not yet scorediio: adc: lpc32xx: Initialize completion before requesting IRQ
Assigned by Linux
Jul 25, 2026
CVE-2026-64499Not yet scorediio: adc: ti-ads1119: fix PM reference leak in buffer preenable
Assigned by Linux
Jul 25, 2026
CVE-2026-64498Not yet scorediio: buffer: hw-consumer: free scan_mask on buffer release
Assigned by Linux
Jul 25, 2026
CVE-2026-64497Not yet scorediio: chemical: scd30: Cleanup initializations and fix sign-extension bug
Assigned by Linux
Jul 25, 2026
CVE-2026-64496High 7.1iio: event: Fix event FIFO reset race
Assigned by Linux
Jul 25, 2026
CVE-2026-64495Not yet scorediio: gyro: bmg160: bail out when bandwidth/filter is not in table
Assigned by Linux
Jul 25, 2026
CVE-2026-64494Not yet scorediio: light: gp2ap002: fix runtime PM leak on read error
Assigned by Linux
Jul 25, 2026
CVE-2026-64493Not yet scorediio: pressure: mpl115: fix runtime PM leak on read error
Assigned by Linux
Jul 25, 2026
CVE-2026-64492Not yet scorediio: temperature: tmp006: use devm_iio_trigger_register
Assigned by Linux
Jul 25, 2026
CVE-2026-64491Not yet scoredALSA: usx2y: us144mkii: fix work UAF on disconnect
Assigned by Linux
Jul 25, 2026
PreviousPage 95 of 190Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.