Skip to content

The Linux Kernel Organization · weakness class

Memory Corruption

8 CVEs · 1 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

exploited in the wild
1

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.CVE-2022-2586The Linux Kernel Organization · CVSS 5.3 · 10% likely

    CWE-416

  2. It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.CVE-2022-2588The Linux Kernel Organization · CVSS 5.3 · 5.9% likely

    CWE-416

  3. io_uring UAF, Unix SCM garbage collectionCVE-2022-2602The Linux Kernel Organization · CVSS 5.3 · 1.4% likely

    CWE-416

  4. It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.CVE-2022-2585The Linux Kernel Organization · CVSS 5.3 · 1.3% likely

    CWE-416

  5. A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kerne…CVE-2018-1068Linux Kernel Organization, Inc. · 0.4% likely

    CWE-119

  6. An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)CVE-2023-6040The Linux Kernel Organization · CVSS 7.8 · 0.3% likely

    CWE-125

  7. It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local a…CVE-2021-3600The Linux Kernel Organization · CVSS 7.8 · 0.3% likely

    CWE-125

  8. The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e…CVE-2023-1032The Linux Kernel Organization · CVSS 4.7 · 0.3% likely

    CWE-415

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in