Linux · product
Linux
18,254 CVEs · 12 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 12
- likely to be exploited
- 13
Every one of the 18,254 is a mark on the map. Named now: 1 to 26, most at risk first.
- crypto: algif_aead - Revert to operating out-of-place
- net: skbuff: preserve shared-frag marker during coalescing
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- tls: fix handling of zero-length records on the rx_list
- net: fix __dst_negative_advice() race
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- netfilter: bridge: make ebt_snat ARP rewrite writable
- HID: core: zero-initialize the report buffer
- ipv6: account for fraggap on the paged allocation path
- xfrm: esp: avoid in-place decrypt on shared skb frags
CWE-1231 article1 article this week: Microsoft warns attackers use GSocket relay tool to retain access to Linux servers
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
- ksmbd: fix null pointer dereference in alloc_preauth_hash()
- ksmbd: validate mech token in session setup
- ndisc: extend RCU protection in ndisc_send_skb()
- ksmbd: validate session id and tree id in compound request
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- ksmbd: fix use-after-free in kerberos authentication
- ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
- ipv6: mcast: add RCU protection to mld_newpack()
- ksmbd: fix null pointer dereference error in generate_encryptionkey
- ksmbd: validate session id and tree id in the compound request
- tls: make sure to abort the stream if headers are bogus
- ipv6: mcast: extend RCU protection in igmp6_send()
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP