U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
Icon for NVD Communications and Status Updates Page
Communications Page
The NVD now supports CVSS version 4.0!
CVSS v4.0 Support
The letters N V D typed out in binary
2.0 APIs

The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics.

For information on how to cite the NVD, including the database's Digital Object Identifier (DOI), please consult NIST's Public Data Repository.

Last 20 Scored Vulnerability IDs & Summaries CVSS Severity

  • CVE-2026-53329 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why & How] dal_vector_reserve() computes the allocation size as "capacity * vector->struct_size" using uint32_t ar... read CVE-2026-53329
    Published: July 01, 2026; 10:16:40 AM -0400

  • CVE-2026-53330 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() [Why & How] The aux_rd_interval array in struct dc_lttpr_caps is declared with MAX_REPEATER_CNT - 1 (7) el... read CVE-2026-53330
    Published: July 01, 2026; 10:16:40 AM -0400

    V3.1: 7.1 HIGH

  • CVE-2026-53331 - In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock During the SSR/PDR down notification the tx_lock is taken with the intent to provide synchronization with active DMA tra... read CVE-2026-53331
    Published: July 01, 2026; 10:16:40 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53332 - In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with the NGD driver being probed, or the remoteproc is already up when t... read CVE-2026-53332
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53333 - In the Linux kernel, the following vulnerability has been resolved: mm/mincore: handle non-swap entries before !CONFIG_SWAP guard mincore_swap() also fields migration/hwpoison entries (and shmem swapin-error entries), which can exist on !CONFIG_... read CVE-2026-53333
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53334 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure Patch series "mm/damon/{reclaim,lru_sort}: handle ctx allocation failures". DAMON_RECLAIM and DAMON_LRU_SORT could dereference N... read CVE-2026-53334
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53335 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure DAMON_LRU_SORT allocates the damon_ctx object for its kdamond in its init function. damon_lru_sort_enabled_store() wrongly assu... read CVE-2026-53335
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53336 - In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless lo... read CVE-2026-53336
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53337 - In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bond_do_ioctl() In bond_do_ioctl(), slave_dev is obtained via __dev_get_by_name() which can return NULL if the requested interface ... read CVE-2026-53337
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53338 - In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues() of_reserved_mem_lookup() may return NULL if the reserved memory region referenced by t... read CVE-2026-53338
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53339 - In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C maste... read CVE-2026-53339
    Published: July 01, 2026; 10:16:41 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53340 - In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2c_imx_runtime_suspend(), the clock is disabled before switching the pinctrl state to sleep. If pinctrl_pm_... read CVE-2026-53340
    Published: July 01, 2026; 10:16:42 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53341 - In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() may_decode_fh() accesses mount::mnt_ns without holding any locks; that means the mount can concurrently be unmo... read CVE-2026-53341
    Published: July 01, 2026; 10:16:42 AM -0400

  • CVE-2026-53342 - In the Linux kernel, the following vulnerability has been resolved: arm64: mm: call pagetable dtor when freeing hot-removed page tables Since 5e8eb9aeeda3 ("arm64: mm: always call PTE/PMD ctor in __create_pgd_mapping()") page-table allocation on... read CVE-2026-53342
    Published: July 01, 2026; 10:16:42 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53343 - In the Linux kernel, the following vulnerability has been resolved: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow Commit 44e9a3bb76e5 ("ARM: 9430/1: entry: Do a dummy read from VMAP shadow") added a dummy read from the KASAN VMAP... read CVE-2026-53343
    Published: July 01, 2026; 10:16:42 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53344 - In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init Regmap initialization triggers regcache_maple_populate() which attempts SPI read to populate cache. SPI r... read CVE-2026-53344
    Published: July 01, 2026; 10:16:42 AM -0400

    V3.1: 5.5 MEDIUM

  • CVE-2026-53119 - In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thu... read CVE-2026-53119
    Published: June 24, 2026; 1:17:26 PM -0400

    V3.1: 7.8 HIGH

  • CVE-2026-53118 - In the Linux kernel, the following vulnerability has been resolved: vdpa: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus access... read CVE-2026-53118
    Published: June 24, 2026; 1:17:26 PM -0400

    V3.1: 7.8 HIGH

  • CVE-2026-53117 - In the Linux kernel, the following vulnerability has been resolved: s390/cio: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus ac... read CVE-2026-53117
    Published: June 24, 2026; 1:17:26 PM -0400

    V3.1: 7.8 HIGH

  • CVE-2026-53116 - In the Linux kernel, the following vulnerability has been resolved: s390/ap: use generic driver_override infrastructure When the AP masks are updated via apmask_store() or aqmask_store(), ap_bus_revise_bindings() is called after ap_attr_mutex ha... read CVE-2026-53116
    Published: June 24, 2026; 1:17:25 PM -0400

    V3.1: 7.8 HIGH

Created September 20, 2022 , Updated August 27, 2024