What’s Vulnerable › Products
Linux kernel vulnerabilities
21492 known vulnerabilities, 32 confirmed exploited in the wild (CISA KEV), 9232 published in the last 12 months.
Check whether your Linux kernel version is affected
Exploited Linux kernel vulnerabilities
- CVE-2026-53266 — Linux Kernel Out-of-Bounds Write Vulnerability
- CVE-2025-39964 — Linux Kernel Race Condition Vulnerability
- CVE-2025-39682 — Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- CVE-2026-53362 — Linux Kernel Unspecified Vulnerability
- CVE-2022-0995 — Linux Kernel Out-of-Bounds Write Vulnerability
- CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability
- CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- CVE-2018-14634 — Linux Kernel Integer Overflow Vulnerability
- CVE-2021-22555 — Linux Kernel Heap Out-of-Bounds Write Vulnerability
- CVE-2025-38352 — Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
- CVE-2023-0386 — Linux Kernel Improper Ownership Management Vulnerability
- CVE-2024-53197 — Linux Kernel Out-of-Bounds Access Vulnerability
- CVE-2024-53150 — Linux Kernel Out-of-Bounds Read Vulnerability
- CVE-2024-50302 — Linux Kernel Use of Uninitialized Resource Vulnerability
- CVE-2024-53104 — Linux Kernel Out-of-Bounds Write Vulnerability
- CVE-2017-1000253 — Linux Kernel PIE Stack Buffer Corruption Vulnerability
- CVE-2022-0185 — Linux Kernel Heap-Based Buffer Overflow Vulnerability
- CVE-2024-36971 — Android Kernel Remote Code Execution Vulnerability
- CVE-2022-2586 — Linux Kernel Use-After-Free Vulnerability
- CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability
- CVE-2014-0196 — Linux Kernel Race Condition Vulnerability
- CVE-2010-3904 — Linux Kernel Improper Input Validation Vulnerability
- CVE-2023-0266 — Linux Kernel Use-After-Free Vulnerability
- CVE-2013-6282 — Linux Kernel Improper Input Validation Vulnerability
- CVE-2013-2094 — Linux Kernel Privilege Escalation Vulnerability
Latest Linux kernel vulnerabilities
- CVE-2026-99087 — dm-integrity: fix NULL pointer dereference when the 'R' flag is used
- CVE-2026-99086 — dm-integrity: validate the superblock on resume
- CVE-2026-99085 — sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler
- CVE-2026-99084 — readdir: take no inode lock on an immutable directory
- CVE-2026-99083 — ksmbd: fix heap out-of-bounds write in krb5_authenticate() (CVSS 8.8)
- CVE-2026-99082 — KVM: x86: Use active memslots for the per-vCPU MMIO cache (CVSS 8.8)
- CVE-2026-99081 — bnxt_en: fix DMA mapping length for padded small packets (CVSS 7.5)
- CVE-2026-99080 — fs: Free any excess xarray nodes in clear_inode()
- CVE-2026-99079 — net/mlx5e: Prevent stale XSK buffer release on refill retry (CVSS 9.8)
- CVE-2026-99078 — net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry (CVSS 9.8)
- CVE-2026-99077 — ipv4: udp: Create exceptions before socket matching (CVSS 7.4)
- CVE-2026-99076 — ipv6: udp: Create exceptions before socket matching
- CVE-2026-99075 — rust_binder: reschedule node refcount update on thread exit
- CVE-2026-99074 — ipv4: stop PMTU walk when nexthop group shrinks
- CVE-2026-99073 — ipv4: stop exception dump when nexthop group shrinks
- CVE-2026-99072 — ipv4: stop route notification sizing when nexthop group shrinks
- CVE-2026-99071 — ipv4: do not warn on route notification size race
- CVE-2026-99070 — ipv6: do not warn on route notification size race
- CVE-2026-99069 — Input: ati_remote2 - fix type confusion in device attribute handlers
- CVE-2026-99068 — ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
- CVE-2026-99067 — btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
- CVE-2026-99066 — can: dev: init_can_skb(): restore skb header initialization
- CVE-2026-99065 — cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()
- CVE-2026-99064 — cipso: adjust cached option offsets when removing CIPSO (CVSS 8.1)
- CVE-2026-99063 — dm ioctl: don't let data_start run past the buffer