Vendor
Linux
- CVEs tracked · all time
- 78
- in CISA KEV · all time
- 11
- articles · since 11 Sep
- 21
- articles · all time
- 120
21 articles since 11 Sep; 4 CISA notices, marked below the bars.
Show as table
| Day (UTC) | Articles |
|---|---|
| Thu 17 Sep | 1 |
| Fri 18 Sep | 6 |
| Sun 20 Sep | 1 |
| Mon 21 Sep | 1 |
| Fri 25 Sep | 2 |
| Mon 28 Sep | 1 |
| Tue 29 Sep | 1 |
| Wed 30 Sep | 1 |
| Wed 7 Oct | 1 |
| Wed 14 Oct | 2 |
| Thu 15 Oct | 1 |
| Mon 19 Oct | 2 |
| Sun 25 Oct | 1 |
Products: Kernel, Linux
CVEs
78 CVEs, the 40 listed known exploited firstCVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityCVSS9.8CriticalExploited3.3%EPSS3articles
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityCVSS7.8HighExploited3.4%EPSS18articles
CVE-2022-0492Linux Kernel Improper Authentication VulnerabilityCVSS7.8HighExploited5.5%EPSS5articles
CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write VulnerabilityCVSS8.3HighExploited79%EPSS1article
CVE-2019-13272Linux Kernel Improper Privilege Management VulnerabilityCVSS7.8HighExploited52%EPSS1article
28 more CVEs
CVE-2026-80841net/packet: defer vmalloc TX_RING free until skbs finishCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-99999ipv4: validate checksum_start before completing checksumCVSS9.3Critical–Not in KEV0.8%EPSS2articles
CVE-2026-97941mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid raceCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-89754mm/pagewalk: fix stale walk->action escaping walk_pmd_range()CVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-98260exec: Cleanup POSIX timers right after de_thread()CVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-98385sched/cache: Decouple sched_cache_group from mm to fix UAFCVSSUnrated–Not in KEV0.1%EPSS1article
CVE-2026-80775futex: Fix race on the initial mm->futex.phash.ref allocationCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-74580vhost: reset the vring metadata cache on vring reconfigurationCVSS8.8High–Not in KEV0.1%EPSS2articles
CVE-2026-64563rhashtable: clear stale iter->p on table restartCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-64508bpf: Support for hardening against JIT sprayingCVSSUnrated–Not in KEV0.2%EPSS2articles
CVE-2026-64507x86/bugs: Enable IBPB flush on BPF JIT allocationCVSSUnrated–Not in KEV0.2%EPSS2articles
CVE-2025-68788fsnotify: do not generate ACCESS/MODIFY events on child for special filesCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-23239espintcp: Fix race condition in espintcp_close()CVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-68121pppoe: reload header pointer after dev_hard_header()CVSS7.8High–Not in KEV0.3%EPSS1article
CVE-2026-80844xfrm: ah6: validate routing header segments_leftCVSSUnrated–Not in KEV0.4%EPSS1article
CVE-2026-89775KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluationCVSS9.3Critical–Not in KEV0.2%EPSS1article
CVE-2026-31629nfc: llcp: add missing return after LLCP_CLOSED checksCVSS8.8High–Not in KEV0.4%EPSS0articles
CVE-2026-43502net/rds: handle zerocopy send cleanup before the message is queuedCVSS7.8High–Not in KEV0.3%EPSS1article
CVE-2026-80714ipvs: do not propagate one-packet flag to synced connsCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-68162sctp: avoid auth_enable sysctl UAF during netns teardownCVSS7.8High–Not in KEV0.2%EPSS1article
- OpenAI Paused AI Training After Model Broached Internet DefencesSecurityOnline
- Critical Linux Flaw Could Let Virtual Machines Write to Host MemorySecurityOnline
- Six Linux Kernel Flaws Have Public PoCs for Root Access and EscapeSecurityOnline
- Critical Linux Flaw Lets Virtual Machines Read Host MemoryThe Hacker News
- Linux Vhost Flaw Vghost Lets Local Users Read and Write Kernel MemoryThe Hacker News
- Vghost Linux Flaw Enables Root Access and Virtual Machine EscapesSecurityOnline
- Microsoft’s AI Research Uncovered 140 Windows Vulnerabilities and Spurred Linux FixesMicrosoft
- VUSec Details BTR Spectre Attack That Can Leak Linux Kernel SecretsSecurityOnline
- New Spectre Variant Lets Attackers Recover Linux Root Hashes in MinutesThe Hacker News
- Linux Kernel Flaw Lets Attackers Escape Containers and Run CodeSecurityOnline
- Linux and Android File Notifications Expose User Activity Without PermissionsSecurityWeek
- RustyTux Exploit Turns Linux Kernel Race Into Root AccessSecurityOnline
- CISA Flags Three Exploited Linux Kernel Flaws for Urgent FixesSecurityWeek
- CISA Flags Three Exploited Linux Kernel Flaws for Urgent PatchingSecurity Affairs
- CISA Warns of Actively Exploited Critical Linux Kernel FlawCISA · official notice
- CISA Warns of Active Exploitation in Two Linux Kernel FlawsSecurityOnline
- CISA Flags Two Linux Kernel Flaws Under Active ExploitationCISA · official notice
- CISA Warns of Actively Exploited Linux Kernel Memory FlawCISA · official notice
- CISA Flags Actively Exploited Linux Kernel Race ConditionCISA · official notice
- Four Linux Kernel Flaws Expose Systems to Root Takeover AttacksSecurityOnline
- Critical Linux KVM Flaw Lets arm64 Guests Escape Virtual MachinesSecurityOnline
- Android 17 Exploit Chain Gives Untrusted Apps Kernel ControlSecurityOnline
- ICS Patch Tuesday Fixes Critical Schneider, Siemens FlawsSecurityWeek
- Google Fixes Critical Android Flaws Enabling Remote Code ExecutionSecurityOnline
- Linux Kernel Flaw Lets Local Users Gain Root Through RDS PoCSecurityOnline
- Linux Kernel Flaw Gets Working PoC for Local Root AccessSecurityOnline
- CVE-2026-80714 (CVSS 9.8): Linux Root Escalation PoC OutSecurityOnline
- CVE-2026-68162: Linux Kernel Root Escalation PoC PublicSecurityOnline
- CVE-2026-52933 Flaw Lets Attackers Gain Root Access on LinuxSecurityOnline
- CISA Adds ownCloud Linux Kernel and Artifactory Flaws to KEV ListSecurity Affairs
- OpenAI AI Agents Exploit Linux Kernel Flaw in Coordinated AttackSecurityWeek
- CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.Security Affairs
- CISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog ArtifactorySecurityOnline
- CISA adds Linux kernel CVE‑2026-53362 to KEV as exploitedCISA · official notice
- uBlock Origin v1.74.0 Chrome release to be delisted amid CVEsSecurityOnline
- WeedHack malware steals data from over 116,000 Minecraft gamersSecurityOnline
- Linux Kernel Double Free Flaw CVE-2026-72137 Allows Root AccessSecurityOnline
- CISA adds CVE-2022-0995 Linux kernel flaw to KEV catalogueCISA · official notice
- Linux flaw CVE-2026-53361 lets local users escape containersSecurityOnline
- CISA Flags Linux Kernel Bug CVE-2022-0995, Urges Immediate PatchCISA · official notice
- Linux Kernel Flaw CVE-2026-52923 Lets Attackers Gain RootSecurityOnline
- CVE-2026-53365 Vsock flaw allows privilege escalation on LinuxSecurityOnline
- CVE-2026-74480: Linux kernel bridge flaw grants local rootSecurityOnline
- CVE-2026-52912 Flaw in Linux Kernel nf_queue Allows Local RootSecurityOnline
- CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege EscalationSecurityOnline
- Attackers Can Exploit Linux Kernel Flaw CVE-2026-68138 for RootSecurityOnline
- Linux Kernel RDMA Bug Allows Local Users to Gain RootSecurityOnline
- Hitachi Energy APM Edge flaws let local users gain root accessCISA · official notice
- Linux Kernel CPU Timer Flaw Lets Local Users Gain Root AccessSecurityOnline
- Kernel Eventpoll Bug CVE-2026-43074 Grants Local Root AccessSecurityOnline
The latest 50 are listed. Every article is in the RSS feed.