CyberSIXT Search
Linux product

Several products

← All Linux products

No Several products CVE is in the CISA KEV catalogue.

Tracked since 22 Jan · latest article Mon 26 Oct · RSS

High exploit odds · current
3
high · not in KEV

Exploited, by due date

CSV download

No Several products CVE is in the CISA KEV catalogue.

Coverage

78 articles · all timeFull timeline →

78 articles from 9 outlets; 2 in the last 7 days.

Several products: coverage over time78 articles from 9 outlets. Busiest week: 9 articles, week of 6 Jul. 2 in the last 7 days. Several products: coverage over time78 articles from 9 outlets. Busiest week: 9 articles, week of 6 Jul. 2 in the last 7 days.
  • Article
  • Official notice
Show as table
Several products: articles
Published (UTC)OutletHeadline
Mon 26 Oct · 01:31 UTCSecurityOnlineLinux kernel IPv6 flaw enables container escape via RPL
Sun 25 Oct · 11:01 UTCSecurityOnlineOpenAI Paused AI Training After Model Broached Internet Defences
Mon 19 Oct · 03:30 UTCSecurityOnlineCritical Linux Flaw Could Let Virtual Machines Write to Host Memory
Mon 19 Oct · 01:44 UTCSecurityOnlineSix Linux Kernel Flaws Have Public PoCs for Root Access and Escape
Thu 15 Oct · 21:13 UTCThe Hacker NewsCritical Linux Flaw Lets Virtual Machines Read Host Memory
Wed 14 Oct · 09:52 UTCThe Hacker NewsLinux Vhost Flaw Vghost Lets Local Users Read and Write Kernel Memory
Wed 14 Oct · 04:36 UTCSecurityOnlineVghost Linux Flaw Enables Root Access and Virtual Machine Escapes
Wed 7 Oct · 17:30 UTCMicrosoftMicrosoft’s AI Research Uncovered 140 Windows Vulnerabilities and Spurred Linux Fixes
Wed 30 Sep · 03:01 UTCSecurityOnlineVUSec Details BTR Spectre Attack That Can Leak Linux Kernel Secrets
Tue 29 Sep · 17:11 UTCThe Hacker NewsNew Spectre Variant Lets Attackers Recover Linux Root Hashes in Minutes
Mon 28 Sep · 15:00 UTCSecurityOnlineLinux Kernel Flaw Lets Attackers Escape Containers and Run Code
Fri 25 Sep · 11:11 UTCSecurityWeekLinux and Android File Notifications Expose User Activity Without Permissions
Fri 25 Sep · 02:00 UTCSecurityOnlineRustyTux Exploit Turns Linux Kernel Race Into Root Access
Fri 18 Sep · 09:01 UTCSecurityOnlineFour Linux Kernel Flaws Expose Systems to Root Takeover Attacks
Thu 17 Sep · 11:55 UTCSecurityOnlineCritical Linux KVM Flaw Lets arm64 Guests Escape Virtual Machines
Wed 9 Sep · 10:01 UTCSecurityOnlineGoogle Fixes Critical Android Flaws Enabling Remote Code Execution
Tue 8 Sep · 06:13 UTCSecurityOnlineLinux Kernel Flaw Lets Local Users Gain Root Through RDS PoC
Fri 4 Sep · 04:35 UTCSecurityOnlineLinux Kernel Flaw Gets Working PoC for Local Root Access
Thu 3 Sep · 17:37 UTCSecurityOnlineCVE-2026-80714 (CVSS 9.8): Linux Root Escalation PoC Out
Wed 2 Sep · 04:30 UTCSecurityOnlineCVE-2026-68162: Linux Kernel Root Escalation PoC Public
Mon 31 Aug · 14:58 UTCSecurityOnlineCVE-2026-52933 Flaw Lets Attackers Gain Root Access on Linux
Thu 27 Aug · 04:50 UTCSecurityOnlineLinux Kernel Double Free Flaw CVE-2026-72137 Allows Root Access
Thu 27 Aug · 01:00 UTCSecurityOnlineLinux flaw CVE-2026-53361 lets local users escape containers
Tue 25 Aug · 13:30 UTCSecurityOnlineLinux Kernel Flaw CVE-2026-52923 Lets Attackers Gain Root
Tue 25 Aug · 03:01 UTCSecurityOnlineCVE-2026-53365 Vsock flaw allows privilege escalation on Linux
Mon 24 Aug · 07:51 UTCSecurityOnlineCVE-2026-74480: Linux kernel bridge flaw grants local root
Mon 24 Aug · 03:27 UTCSecurityOnlineCVE-2026-52912 Flaw in Linux Kernel nf_queue Allows Local Root
Fri 21 Aug · 03:51 UTCSecurityOnlineCVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation
Tue 18 Aug · 14:50 UTCSecurityOnlineAttackers Can Exploit Linux Kernel Flaw CVE-2026-68138 for Root
Fri 14 Aug · 02:41 UTCSecurityOnlineLinux Kernel RDMA Bug Allows Local Users to Gain Root
Thu 13 Aug · 17:51 UTCCISAHitachi Energy APM Edge flaws let local users gain root access
Wed 12 Aug · 02:31 UTCSecurityOnlineLinux Kernel CPU Timer Flaw Lets Local Users Gain Root Access
Mon 10 Aug · 15:11 UTCSecurityOnlineKernel Eventpoll Bug CVE-2026-43074 Grants Local Root Access
Mon 10 Aug · 02:27 UTCSecurityOnlineCritical Linux Kernel SCTP Flaw Lets Attackers Gain Root Access
Fri 7 Aug · 12:11 UTCSecurityOnlineTails 7.10.1 patches CVE-2026-645
Fri 7 Aug · 03:41 UTCSecurityOnlineCVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed
Wed 5 Aug · 15:21 UTCSecurity AffairsLinux Kernel OVSwrap Flaw Lets Users Gain Root Access Patch Urged
Tue 4 Aug · 13:46 UTCSecurityOnlineLinux Kernel Flaw CVE-2026-53264 Lets Users Gain Root Access
Mon 3 Aug · 04:41 UTCSecurityOnlineDebian patches critical kernel flaws, including CVE-2026-64530
Tue 28 Jul · 15:10 UTCInfosecurityAI assisted research finds Linux kernel flaw CVE-2026-53264
Tue 28 Jul · 11:51 UTCSecurityOnlineLinux systems face OVSwrap flaw CVE-2026-64531, root risk
Wed 22 Jul · 19:09 UTCSecurityOnlineCVE-2026-64600 XFS Race Flaw Exposes Millions of Linux Systems
Tue 21 Jul · 10:50 UTCSecurityOnlineOVH rolls out emergency patch for KVM flaw CVE-2026-53359
Tue 21 Jul · 03:32 UTCSecurityOnlineAI flags 440 Linux kernel bugs, CVE-2026-53362 highlighted
Tue 14 Jul · 17:20 UTCSecurityOnlinePublic Exploit and Details Released for Bad Epoll Root Flaw (CVE-2026-46242)
Tue 14 Jul · 17:16 UTCSecurityOnlineLinux Kernel Bug Lets Users Gain Root Access via Bad Epoll
Fri 10 Jul · 08:40 UTCSecurityOnlineLinux Kernel FUSE Flaw Lets Local Users Escalate to Root
Thu 9 Jul · 12:21 UTCSecurityWeekGhostLock Lets Attackers Break Out of Containers, Gain Root
Wed 8 Jul · 19:31 UTCArs TechnicaLinux flaws Januscape and GhostLock let users escalate to root
Wed 8 Jul · 03:31 UTCSecurityOnlineFour flaws hit Joomla, Langflow, ColdFusion and Linux today

Who reported 9 outlets, last 12 months

  • SecurityOnline45
  • SecurityWeek9
  • Security Affairs7
  • The Hacker News5
  • Infosecurity4
  • Ars Technica3
  • Others5
See the full timeline
  1. Linux kernel IPv6 flaw enables container escape via RPLSecurityOnline
  2. OpenAI Paused AI Training After Model Broached Internet DefencesSecurityOnline
  3. Critical Linux Flaw Could Let Virtual Machines Write to Host MemorySecurityOnline
  4. Six Linux Kernel Flaws Have Public PoCs for Root Access and EscapeSecurityOnline
  5. Critical Linux Flaw Lets Virtual Machines Read Host MemoryThe Hacker News
  6. Linux Vhost Flaw Vghost Lets Local Users Read and Write Kernel MemoryThe Hacker News
  7. Vghost Linux Flaw Enables Root Access and Virtual Machine EscapesSecurityOnline
  8. Microsoft’s AI Research Uncovered 140 Windows Vulnerabilities and Spurred Linux FixesMicrosoft
  9. VUSec Details BTR Spectre Attack That Can Leak Linux Kernel SecretsSecurityOnline
  10. New Spectre Variant Lets Attackers Recover Linux Root Hashes in MinutesThe Hacker News

All CVEs in coverage

68
CVE-2026-43284Linux vulnerabilityCVSS8.8High–Not in KEV94%EPSS8articles
CVE-2026-43500Linux vulnerabilityCVSS7.8High–Not in KEV94%EPSS8articles
CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescingCVSS7.8High–Not in KEV10%EPSS5articles
CVE-2026-46242Linux vulnerabilityCVSS7.8High–Not in KEV4.4%EPSS4articles
CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logicCVSS7.1High–Not in KEV4.3%EPSS1article
CVE-2026-43503Linux vulnerabilityCVSS8.8High–Not in KEV2.0%EPSS3articles
CVE-2026-74469sctp: prevent peer transport count overflowCVSS8.8High–Not in KEV1.5%EPSS1article
CVE-2026-64564sctp: don't free the ASCONF's own transport in DEL-IP processingCVSS9.8Critical–Not in KEV1.4%EPSS1article
CVE-2026-31635Linux vulnerabilityCVSS7.5High–Not in KEV1.0%EPSS3articles
CVE-2026-53359Linux vulnerabilityCVSS8.8High–Not in KEV1.0%EPSS5articles
CVE-2026-99999ipv4: validate checksum_start before completing checksumCVSS9.3Critical–Not in KEV0.8%EPSS2articles
CVE-2026-43499Linux vulnerabilityCVSS7.8High–Not in KEV0.8%EPSS3articles
56 more CVEs
CVE-2026-43501ipv6: rpl: reserve mac_len headroom when recompressed SRH growsCVSS9.8Critical–Not in KEV0.7%EPSS1article
CVE-2026-72137xfrm: nat_keepalive: avoid double free on send errorCVSS9.8Critical–Not in KEV0.7%EPSS1article
CVE-2024-26582Linux vulnerabilityCVSS9.8Critical–Not in KEV0.7%EPSS0articles
CVE-2026-53383Linux vulnerabilityCVSS7.5High–Not in KEV0.7%EPSS1article
CVE-2026-64530net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handleCVSS9.8Critical–Not in KEV0.7%EPSS1article
CVE-2026-74480net: bridge: stop fast-leave after deleting a port groupCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-64541net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socketCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-64535nvmet-tcp: Fix potential UAF when ddgst mismatchCVSS9.8Critical–Not in KEV0.6%EPSS1article
CVE-2026-23111Linux vulnerabilityCVSS7.8High–Not in KEV0.5%EPSS2articles
CVE-2026-52924Linux vulnerabilityCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-52929Linux vulnerabilityCVSS7.5High–Not in KEV0.5%EPSS1article
CVE-2026-63801Linux vulnerabilityCVSS8.8High–Not in KEV0.5%EPSS1article
CVE-2026-64560posix-cpu-timers: Prevent UAF caused by non-leader exec() raceCVSS7.8High–Not in KEV0.5%EPSS2articles
CVE-2026-53264Linux vulnerabilityCVSS7.8High–Not in KEV0.5%EPSS2articles
CVE-2026-43074Linux vulnerabilityCVSS7.8High–Not in KEV0.5%EPSS1article
CVE-2026-80714ipvs: do not propagate one-packet flag to synced connsCVSS9.8Critical–Not in KEV0.5%EPSS1article
CVE-2026-64600xfs: resample the data fork mapping after cycling ILOCKCVSS7.8High–Not in KEV0.5%EPSS1article
CVE-2026-80844xfrm: ah6: validate routing header segments_leftCVSSUnrated–Not in KEV0.4%EPSS1article
CVE-2026-52993tipc: fix double-free in tipc_buf_append()CVSS9.8Critical–Not in KEV0.4%EPSS1article
CVE-2026-64531net: openvswitch: reject oversized nested action attrsCVSS7.8High–Not in KEV0.4%EPSS2articles
CVE-2026-31629nfc: llcp: add missing return after LLCP_CLOSED checksCVSS8.8High–Not in KEV0.4%EPSS0articles
CVE-2026-81000net: tun: bound receive headroomCVSS7.8High–Not in KEV0.4%EPSS1article
CVE-2026-64534nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error pathCVSS9.8Critical–Not in KEV0.3%EPSS1article
CVE-2026-43502net/rds: handle zerocopy send cleanup before the message is queuedCVSS7.8High–Not in KEV0.3%EPSS1article
CVE-2026-68121pppoe: reload header pointer after dev_hard_header()CVSS7.8High–Not in KEV0.3%EPSS1article
CVE-2026-31694Linux vulnerabilityCVSS7.8High–Not in KEV0.3%EPSS1article
CVE-2026-64561KVM: x86: Check for invalid/obsolete root *after* making MMU pages availableCVSS8.8High–Not in KEV0.3%EPSS1article
CVE-2024-57924Linux vulnerabilityCVSSUnrated–Not in KEV0.3%EPSS1article
CVE-2026-89775KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluationCVSS9.3Critical–Not in KEV0.2%EPSS1article
CVE-2025-68788fsnotify: do not generate ACCESS/MODIFY events on child for special filesCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-64507x86/bugs: Enable IBPB flush on BPF JIT allocationCVSSUnrated–Not in KEV0.2%EPSS2articles
CVE-2026-68138net/sched: serialize qdisc_rtab_list against concurrent get/putCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-52923Linux vulnerabilityCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2024-47704Linux vulnerabilityCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2025-21691cachestat: fix page cache statistics permission checkingCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-53365Linux vulnerabilityCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-68162sctp: avoid auth_enable sysctl UAF during netns teardownCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-64508bpf: Support for hardening against JIT sprayingCVSSUnrated–Not in KEV0.2%EPSS2articles
CVE-2026-98260exec: Cleanup POSIX timers right after de_thread()CVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-53361Linux vulnerabilityCVSS7.1High–Not in KEV0.2%EPSS1article
CVE-2026-80521af_unix: Unlink scc_entry in unix_del_edge().CVSS7.8High–Not in KEV0.2%EPSS2articles
CVE-2026-80841net/packet: defer vmalloc TX_RING free until skbs finishCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-64582RDMA/rxe: Fix a use-after-free problem in rxe_mmapCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-64563rhashtable: clear stale iter->p on table restartCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-80775futex: Fix race on the initial mm->futex.phash.ref allocationCVSSUnrated–Not in KEV0.2%EPSS1article
CVE-2026-52912Linux vulnerabilityCVSS7.8High–Not in KEV0.2%EPSS1article
CVE-2026-46316KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entryCVSS9.3Critical–Not in KEV0.2%EPSS1article
CVE-2026-97941mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid raceCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-52933Linux vulnerabilityCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-98256signal: Prevent exec() raceCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-98385sched/cache: Decouple sched_cache_group from mm to fix UAFCVSSUnrated–Not in KEV0.1%EPSS1article
CVE-2026-89754mm/pagewalk: fix stale walk->action escaping walk_pmd_range()CVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-63794KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT pathCVSSUnrated–Not in KEV0.1%EPSS1article
CVE-2026-74753perf: Reject exited events as group leadersCVSS7.8High–Not in KEV0.1%EPSS1article
CVE-2026-74580vhost: reset the vring metadata cache on vring reconfigurationCVSS8.8High–Not in KEV0.1%EPSS2articles
CVE-2026-23239espintcp: Fix race condition in espintcp_close()CVSS7.8High–Not in KEV0.1%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device