Brand
Linux: actively exploited vulnerabilities
31 vulnerabilities in Linux products (Kernel) are in CISA’s catalog of exploited vulnerabilities, 5 of them added in the last 90 days. Last added: September 18, 2026.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
9 vulnerabilities added in the last 12 months
-
31 exploited vulnerabilities in the catalog, in total
-
3 added in the last 30 days
By category
Add just one Linux category to your radar, or open its page.
- Operating systems 31 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Kernel31 vulnerabilities, Operating systems
Name used by CISA: Linux. Product families: indicative classification by this site.
Pace of additions
| Period | Vulnerabilities added |
|---|---|
| Sep 9, 2025 to Oct 8, 2025 | 1 |
| Oct 9, 2025 to Nov 7, 2025 | 0 |
| Nov 8, 2025 to Dec 7, 2025 | 0 |
| Dec 8, 2025 to Jan 6, 2026 | 0 |
| Jan 7, 2026 to Feb 5, 2026 | 1 |
| Feb 6, 2026 to Mar 7, 2026 | 0 |
| Mar 8, 2026 to Apr 6, 2026 | 0 |
| Apr 7, 2026 to May 6, 2026 | 1 |
| May 7, 2026 to Jun 5, 2026 | 1 |
| Jun 6, 2026 to Jul 5, 2026 | 0 |
| Jul 6, 2026 to Aug 4, 2026 | 0 |
| Aug 5, 2026 to Sep 3, 2026 | 2 |
| Sep 4, 2026 to Oct 3, 2026 (in progress) | 3 |
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Linux list.
- Rank 1
Linux KernelCVE-2025-39682
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 18, 2026
- Rank 2
Linux KernelCVE-2026-53266
Linux Kernel Out-of-Bounds Write Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 8.8high
Added Sep 18, 2026
- Rank 3
Linux KernelCVE-2025-39964
Linux Kernel Race Condition Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 5.5medium
Added Sep 18, 2026
- Rank 4
Linux KernelCVE-2026-53362
Linux Kernel Unspecified Vulnerability
Hunt for compromise (CISA)
CVSS severity 7.8high
Added Aug 27, 2026
- Rank 5
Linux KernelCVE-2022-0995
Linux Kernel Out-of-Bounds Write Vulnerability
CVE from 2022, added in 2026
CVSS severity 7.8high
Added Aug 26, 2026
- Rank 6
Linux KernelCVE-2022-0492
Linux Kernel Improper Authentication Vulnerability
CVE from 2022, added in 2026
CVSS severity 7.8high
Added Jun 2, 2026
- Rank 7
Linux KernelCVE-2026-31431
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
CVSS severity 7.8high
Added May 1, 2026
- Rank 8
Linux KernelCVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
CVE from 2018, added in 2026
CVSS severity 7.8high
Added Jan 26, 2026
- Rank 9
Linux KernelCVE-2021-22555
Linux Kernel Heap Out-of-Bounds Write Vulnerability
CVE from 2021, added in 2025
CVSS severity 7.8high
Added Oct 6, 2025
- Rank 10
Linux KernelCVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
CVE from 2013, added in 2022
CVSS severity 8.8high
Added Sep 15, 2022
Show 19 more vulnerabilities
- Rank 11
Linux KernelCVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
CVE from 2022, added in 2024
CVSS severity 8.4high
Added Aug 21, 2024
- Rank 12
Linux KernelCVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability
CVE from 2013, added in 2022
CVSS severity 8.4high
Added Sep 15, 2022
- Rank 13
Linux KernelCVE-2025-38352
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
CVSS severity 7.8high
Added Sep 4, 2025
- Rank 14
Linux KernelCVE-2023-0386
Linux Kernel Improper Ownership Management Vulnerability
CVE from 2023, added in 2025
CVSS severity 7.8high
Added Jun 17, 2025
- Rank 15
Linux KernelCVE-2024-53197
Linux Kernel Out-of-Bounds Access Vulnerability
CVSS severity 7.8high
Added Apr 9, 2025
- Rank 16
Linux KernelCVE-2024-53104
Linux Kernel Out-of-Bounds Write Vulnerability
CVSS severity 7.8high
Added Feb 5, 2025
- Rank 17
Linux KernelCVE-2017-1000253
Linux Kernel PIE Stack Buffer Corruption Vulnerability
RansomwareCVE from 2017, added in 2024
CVSS severity 7.8high
Added Sep 9, 2024
- Rank 18
Linux KernelCVE-2022-2586
Linux Kernel Use-After-Free Vulnerability
CVE from 2022, added in 2024
CVSS severity 7.8high
Added Jun 26, 2024
- Rank 19
Linux KernelCVE-2024-1086
Linux Kernel Use-After-Free Vulnerability
Ransomware
CVSS severity 7.8high
Added May 30, 2024
- Rank 20
Linux KernelCVE-2021-3493
Linux Kernel Privilege Escalation Vulnerability
CVSS severity 7.8high
Added Oct 20, 2022
- Rank 21
Linux KernelCVE-2013-2596
Linux Kernel Integer Overflow Vulnerability
CVE from 2013, added in 2022
CVSS severity 7.8high
Added Sep 15, 2022
- Rank 22
Linux KernelCVE-2014-3153
Linux Kernel Privilege Escalation Vulnerability
CVE from 2014, added in 2022
CVSS severity 7.8high
Added May 25, 2022
- Rank 23
Linux KernelCVE-2022-0847
Linux Kernel Privilege Escalation Vulnerability
CVSS severity 7.8high
Added Apr 25, 2022
- Rank 24
Linux KernelCVE-2019-13272
Linux Kernel Improper Privilege Management Vulnerability
CVE from 2019, added in 2021
CVSS severity 7.8high
Added Dec 10, 2021
- Rank 25
Linux KernelCVE-2024-53150
Linux Kernel Out-of-Bounds Read Vulnerability
CVSS severity 7.1high
Added Apr 9, 2025
- Rank 26
Linux KernelCVE-2023-0266
Linux Kernel Use-After-Free Vulnerability
CVSS severity 7.0high
Added Mar 30, 2023
- Rank 27
Linux KernelCVE-2021-22600
Linux Kernel Privilege Escalation Vulnerability
CVSS severity 7.0high
Added Apr 11, 2022
- Rank 28
Linux KernelCVE-2016-5195
Linux Kernel Race Condition Vulnerability
CVE from 2016, added in 2022
CVSS severity 7.0high
Added Mar 3, 2022
- Rank 29
Linux KernelCVE-2024-50302
Linux Kernel Use of Uninitialized Resource Vulnerability
CVSS severity 5.5medium
Added Mar 4, 2025
End of life: remove
These products are no longer supported: no patch is coming. Remove them or isolate them from the network.
Linux KernelCVE-2010-3904
Linux Kernel Improper Input Validation Vulnerability
End of lifeCVE from 2010, added in 2023
CVSS severity 7.8high
Added May 12, 2023
Linux KernelCVE-2014-0196
Linux Kernel Race Condition Vulnerability
End of lifeCVE from 2014, added in 2023
CVSS severity 5.5medium
Added May 12, 2023
Follow and verify
Get new Linux vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.