Product by Linux
Linux Kernel
368 known vulnerabilities in Linux Kernel (Linux), 8 of them actively exploited (CISA KEV).
Key figures
368
Vulnerabilities
8
Actively exploited (KEV)
1
Used by ransomware
15
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2018-14634 | Linux Kernel Integer Overflow Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2023-0386 | Linux Kernel Improper Ownership Management Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2022-0995 | Linux Kernel Out-of-Bounds Write Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2021-22600 | Double Free in net/packet/af_packet.c leading to priviledge escalation In CISA KEV | 6.6 | |
| High | CVE-2022-0435 | Kernel: Out-of-bounds Write | 8.8 | |
| Critical | CVE-2019-14901 | Red Hat Kernel: Heap-based Buffer Overflow | 8.8 | |
| Critical | CVE-2021-3773 | Kernel: Exposure of Sensitive Information to an Unauthorized Actor | 9.8 | |
| High | CVE-2024-0582 | Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap | 7.8 | |
| High | CVE-2018-5391 | Linux Kernel: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2022-0742 | Linux Kernel: Permission Issues | 9.1 | |
| Critical | CVE-2019-14895 | Red Hat Kernel: Heap-based Buffer Overflow | 8.0 | |
| Critical | CVE-2019-14896 | Red Hat Kernel: Heap-based Buffer Overflow | 7.8 | |
| High | CVE-2022-1043 | Kernel: Use After Free | 8.8 | |
| High | CVE-2020-14305 | Kernel: Out-of-bounds Write | 8.1 | |
| High | CVE-2022-1012 | Kernel: Missing Release of Memory after Effective Lifetime | 8.2 | |
| High | CVE-2021-20322 | Kernel: Use of Insufficiently Random Values | 7.4 | |
| High | CVE-2019-10220 | SUSE Kernel:: Path Traversal | 8.0 | |
| High | CVE-2018-14633 | The Linux Foundation Kernel: Stack-based Buffer Overflow | 7.0 | |
| High | CVE-2017-2634 | Linux Kernel: NULL Pointer Dereference | 7.5 | |
| High | CVE-2002-2438 | Kernel: Improper Authentication | 7.5 | |
| High | CVE-2020-25643 | Kernel: Improper Input Validation | 7.2 |
News
- CISA Adds 10 CVEs to Known Exploited Vulnerabilities Catalog, Five with Three-day Mitigation Deadlinessans-newsbites-mail,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,
- Flaws in Linux Kernel and Android Exploited, Added to CISA KEVsans-newsbites-mail,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,