Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Linux: actively exploited vulnerabilities

31 vulnerabilities in Linux products (Kernel) are in CISA’s catalog of exploited vulnerabilities, 5 of them added in the last 90 days. Last added: September 18, 2026.

Linux security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Linux category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Kernel 31 vulnerabilities · Operating systems

Name used by CISA: Linux. Product families: indicative classification by this site.

Pace of additions

Number of Linux vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on September 28, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 4, 2025 to Oct 3, 20251
Oct 4, 2025 to Nov 2, 20251
Nov 3, 2025 to Dec 2, 20250
Dec 3, 2025 to Jan 1, 20260
Jan 2, 2026 to Jan 31, 20261
Feb 1, 2026 to Mar 2, 20260
Mar 3, 2026 to Apr 1, 20260
Apr 2, 2026 to May 1, 20261
May 2, 2026 to May 31, 20260
Jun 1, 2026 to Jun 30, 20261
Jul 1, 2026 to Jul 30, 20260
Jul 31, 2026 to Aug 29, 20262
Aug 30, 2026 to Sep 28, 2026 (in progress)3

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Linux list.

  1. Rank 1Linux Kernel

    CVE-2025-39682

    Recently addedHunt for compromise (CISA)

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 18, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Linux Kernel

    CVE-2026-53266

    Recently addedHunt for compromise (CISA)

    Linux Kernel Out-of-Bounds Write Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 18, 2026
    CISA deadline
    3 days
    CVSS severity
    8.8 (high)

  3. Rank 3Linux Kernel

    CVE-2025-39964

    Recently addedHunt for compromise (CISA)

    Linux Kernel Race Condition Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 18, 2026
    CISA deadline
    3 days
    CVSS severity
    5.5 (medium)

  4. Rank 4Linux Kernel

    CVE-2026-53362

    Hunt for compromise (CISA)

    Linux Kernel Unspecified Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 27, 2026
    CISA deadline
    3 days
    CVSS severity
    7.8 (high)

  5. Rank 5Linux Kernel

    CVE-2022-0995

    CVE from 2022, added in 2026

    Linux Kernel Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 26, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  6. Rank 6Linux Kernel

    CVE-2022-0492

    CVE from 2022, added in 2026

    Linux Kernel Improper Authentication Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jun 2, 2026
    CISA deadline
    3 days
    CVSS severity
    7.8 (high)

  7. Rank 7Linux Kernel

    CVE-2026-31431

    Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 1, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  8. Rank 8Linux Kernel

    CVE-2018-14634

    CVE from 2018, added in 2026

    Linux Kernel Integer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 26, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  9. Rank 9Linux Kernel

    CVE-2021-22555

    CVE from 2021, added in 2025

    Linux Kernel Heap Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 6, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  10. Rank 10Linux Kernel

    CVE-2013-6282

    CVE from 2013, added in 2022

    Linux Kernel Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)
Show 19 more vulnerabilities

  1. Rank 11Linux Kernel

    CVE-2022-0185

    CVE from 2022, added in 2024

    Linux Kernel Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 21, 2024
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)

  2. Rank 12Linux Kernel

    CVE-2013-2094

    CVE from 2013, added in 2022

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)

  3. Rank 13Linux Kernel

    CVE-2025-38352

    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 4, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  4. Rank 14Linux Kernel

    CVE-2023-0386

    CVE from 2023, added in 2025

    Linux Kernel Improper Ownership Management Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 17, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  5. Rank 15Linux Kernel

    CVE-2024-53197

    Linux Kernel Out-of-Bounds Access Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 9, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  6. Rank 16Linux Kernel

    CVE-2024-53104

    Linux Kernel Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 5, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  7. Rank 17Linux Kernel

    CVE-2017-1000253

    RansomwareCVE from 2017, added in 2024

    Linux Kernel PIE Stack Buffer Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 9, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  8. Rank 18Linux Kernel

    CVE-2022-2586

    CVE from 2022, added in 2024

    Linux Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 26, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  9. Rank 19Linux Kernel

    CVE-2024-1086

    Ransomware

    Linux Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 30, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  10. Rank 20Linux Kernel

    CVE-2021-3493

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 20, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  11. Rank 21Linux Kernel

    CVE-2013-2596

    CVE from 2013, added in 2022

    Linux Kernel Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  12. Rank 22Linux Kernel

    CVE-2014-3153

    CVE from 2014, added in 2022

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  13. Rank 23Linux Kernel

    CVE-2022-0847

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  14. Rank 24Linux Kernel

    CVE-2019-13272

    CVE from 2019, added in 2021

    Linux Kernel Improper Privilege Management Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 10, 2021
    CISA deadline
    182 days
    CVSS severity
    7.8 (high)

  15. Rank 25Linux Kernel

    CVE-2024-53150

    Linux Kernel Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 9, 2025
    CISA deadline
    21 days
    CVSS severity
    7.1 (high)

  16. Rank 26Linux Kernel

    CVE-2023-0266

    Linux Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  17. Rank 27Linux Kernel

    CVE-2021-22600

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 11, 2022
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  18. Rank 28Linux Kernel

    CVE-2016-5195

    CVE from 2016, added in 2022

    Linux Kernel Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  19. Rank 29Linux Kernel

    CVE-2024-50302

    Linux Kernel Use of Uninitialized Resource Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 4, 2025
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

  1. Linux Kernel

    CVE-2010-3904

    End of lifeCVE from 2010, added in 2023

    Linux Kernel Improper Input Validation Vulnerability

    End-of-life product: no patch is coming; remove or isolate it.

    Added
    May 12, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  2. Linux Kernel

    CVE-2014-0196

    End of lifeCVE from 2014, added in 2023

    Linux Kernel Race Condition Vulnerability

    End-of-life product: no patch is coming; remove or isolate it.

    Added
    May 12, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

Follow and verify

Get new Linux vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.