Skip to content

Products › Brands

Brand

Linux: actively exploited vulnerabilities

31 vulnerabilities in Linux products (Kernel) are in CISA’s catalog of exploited vulnerabilities, 5 of them added in the last 90 days. Last added: September 18, 2026.

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Linux category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Kernel31 vulnerabilities, Operating systems

Name used by CISA: Linux. Product families: indicative classification by this site.

Pace of additions

Number of Linux vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on October 3, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 9, 2025 to Oct 8, 20251
Oct 9, 2025 to Nov 7, 20250
Nov 8, 2025 to Dec 7, 20250
Dec 8, 2025 to Jan 6, 20260
Jan 7, 2026 to Feb 5, 20261
Feb 6, 2026 to Mar 7, 20260
Mar 8, 2026 to Apr 6, 20260
Apr 7, 2026 to May 6, 20261
May 7, 2026 to Jun 5, 20261
Jun 6, 2026 to Jul 5, 20260
Jul 6, 2026 to Aug 4, 20260
Aug 5, 2026 to Sep 3, 20262
Sep 4, 2026 to Oct 3, 2026 (in progress)3

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Linux list.

  1. Rank 1

    Linux KernelCVE-2025-39682

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 18, 2026

  2. Rank 2

    Linux KernelCVE-2026-53266

    Linux Kernel Out-of-Bounds Write Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 18, 2026

  3. Rank 3

    Linux KernelCVE-2025-39964

    Linux Kernel Race Condition Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 5.5medium

    Added Sep 18, 2026

  4. Rank 4

    Linux KernelCVE-2026-53362

    Linux Kernel Unspecified Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 7.8high

    Added Aug 27, 2026

  5. Rank 5

    Linux KernelCVE-2022-0995

    Linux Kernel Out-of-Bounds Write Vulnerability

    CVE from 2022, added in 2026

    CVSS severity 7.8high

    Added Aug 26, 2026

  6. Rank 6

    Linux KernelCVE-2022-0492

    Linux Kernel Improper Authentication Vulnerability

    CVE from 2022, added in 2026

    CVSS severity 7.8high

    Added Jun 2, 2026

  7. Rank 7

    Linux KernelCVE-2026-31431

    Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

    CVSS severity 7.8high

    Added May 1, 2026

  8. Rank 8

    Linux KernelCVE-2018-14634

    Linux Kernel Integer Overflow Vulnerability

    CVE from 2018, added in 2026

    CVSS severity 7.8high

    Added Jan 26, 2026

  9. Rank 9

    Linux KernelCVE-2021-22555

    Linux Kernel Heap Out-of-Bounds Write Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 7.8high

    Added Oct 6, 2025

  10. Rank 10

    Linux KernelCVE-2013-6282

    Linux Kernel Improper Input Validation Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.8high

    Added Sep 15, 2022

Show 19 more vulnerabilities
  1. Rank 11

    Linux KernelCVE-2022-0185

    Linux Kernel Heap-Based Buffer Overflow Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 8.4high

    Added Aug 21, 2024

  2. Rank 12

    Linux KernelCVE-2013-2094

    Linux Kernel Privilege Escalation Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 8.4high

    Added Sep 15, 2022

  3. Rank 13

    Linux KernelCVE-2025-38352

    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

    CVSS severity 7.8high

    Added Sep 4, 2025

  4. Rank 14

    Linux KernelCVE-2023-0386

    Linux Kernel Improper Ownership Management Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 7.8high

    Added Jun 17, 2025

  5. Rank 15

    Linux KernelCVE-2024-53197

    Linux Kernel Out-of-Bounds Access Vulnerability

    CVSS severity 7.8high

    Added Apr 9, 2025

  6. Rank 16

    Linux KernelCVE-2024-53104

    Linux Kernel Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Feb 5, 2025

  7. Rank 17

    Linux KernelCVE-2017-1000253

    Linux Kernel PIE Stack Buffer Corruption Vulnerability

    RansomwareCVE from 2017, added in 2024

    CVSS severity 7.8high

    Added Sep 9, 2024

  8. Rank 18

    Linux KernelCVE-2022-2586

    Linux Kernel Use-After-Free Vulnerability

    CVE from 2022, added in 2024

    CVSS severity 7.8high

    Added Jun 26, 2024

  9. Rank 19

    Linux KernelCVE-2024-1086

    Linux Kernel Use-After-Free Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added May 30, 2024

  10. Rank 20

    Linux KernelCVE-2021-3493

    Linux Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Oct 20, 2022

  11. Rank 21

    Linux KernelCVE-2013-2596

    Linux Kernel Integer Overflow Vulnerability

    CVE from 2013, added in 2022

    CVSS severity 7.8high

    Added Sep 15, 2022

  12. Rank 22

    Linux KernelCVE-2014-3153

    Linux Kernel Privilege Escalation Vulnerability

    CVE from 2014, added in 2022

    CVSS severity 7.8high

    Added May 25, 2022

  13. Rank 23

    Linux KernelCVE-2022-0847

    Linux Kernel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 25, 2022

  14. Rank 24

    Linux KernelCVE-2019-13272

    Linux Kernel Improper Privilege Management Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Dec 10, 2021

  15. Rank 25

    Linux KernelCVE-2024-53150

    Linux Kernel Out-of-Bounds Read Vulnerability

    CVSS severity 7.1high

    Added Apr 9, 2025

  16. Rank 26

    Linux KernelCVE-2023-0266

    Linux Kernel Use-After-Free Vulnerability

    CVSS severity 7.0high

    Added Mar 30, 2023

  17. Rank 27

    Linux KernelCVE-2021-22600

    Linux Kernel Privilege Escalation Vulnerability

    CVSS severity 7.0high

    Added Apr 11, 2022

  18. Rank 28

    Linux KernelCVE-2016-5195

    Linux Kernel Race Condition Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 7.0high

    Added Mar 3, 2022

  19. Rank 29

    Linux KernelCVE-2024-50302

    Linux Kernel Use of Uninitialized Resource Vulnerability

    CVSS severity 5.5medium

    Added Mar 4, 2025

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

  1. Linux KernelCVE-2010-3904

    Linux Kernel Improper Input Validation Vulnerability

    End of lifeCVE from 2010, added in 2023

    CVSS severity 7.8high

    Added May 12, 2023

  2. Linux KernelCVE-2014-0196

    Linux Kernel Race Condition Vulnerability

    End of lifeCVE from 2014, added in 2023

    CVSS severity 5.5medium

    Added May 12, 2023

Follow and verify

Get new Linux vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.