Vendor
Linux
21,334 known vulnerabilities in products by Linux, 32 of them actively exploited (CISA KEV).
Key figures
21,334
Vulnerabilities
32
Actively exploited (KEV)
2
Used by ransomware
1,059
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2017-1000253 | Linux Kernel PIE Stack Buffer Corruption Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2013-6282 | Linux Kernel Improper Input Validation Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2021-22555 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE In CISA KEV | 8.3 | |
| Critical | CVE-2013-2094 | Linux Kernel Privilege Escalation Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2025-39682 | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2019-13272 | Linux Kernel Improper Privilege Management Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2014-3153 | Linux Kernel Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2016-5195 | Linux Kernel Race Condition Vulnerability In CISA KEV | 7.0 | |
| Critical | CVE-2010-3904 | Linux Kernel Improper Input Validation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2018-14634 | Linux Kernel Integer Overflow Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2023-0386 | Linux Kernel Improper Ownership Management Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2024-53197 | Linux Kernel Out-of-Bounds Access Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2022-0995 | Linux Kernel Out-of-Bounds Write Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2024-53104 | Linux Kernel Out-of-Bounds Write Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2023-0266 | Linux Kernel Use-After-Free Vulnerability In CISA KEV | 7.9 | |
| Critical | CVE-2022-2586 | Linux Kernel Use-After-Free Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2021-22600 | Double Free in net/packet/af_packet.c leading to priviledge escalation In CISA KEV | 6.6 | |
| Critical | CVE-2014-0196 | Linux Kernel Race Condition Vulnerability In CISA KEV | 5.5 | |
| Critical | CVE-2024-36971 | Android Kernel Remote Code Execution Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2013-2596 | Linux Kernel Integer Overflow Vulnerability In CISA KEV | 7.8 |
News
- KVM escape exposes broader attack surface in Linux networkingcsoonline,
- Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingtheregister-security,
- Linux kernel gets a fix for a flaw that enabled attackers to escape VMscsoonline,
- Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memorythehackernews,
- AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Hostthehackernews,
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Linux | 17,849 | 11 |
| Linux Kernel | 15,192 | 33 |
| Linux Kernel | 70 | 1 |
| Tizen | 12 | 0 |
| Acrn | 7 | 0 |
| Util-linux | 5 | 0 |
| Mac80211 | 3 | 0 |