Linux vulnerabilities

CVEs per yearBy the year they were published

1. 20189
2. 201910
3. 20202
4. 20219
5. 202265
6. 202347
7. 20244,306
8. 20255,675
9. 20268,245

Known exploitedNewest addition to KEV first

• CVE-2026-46300

  net: skbuff: preserve shared-frag marker during coalescing

  Linux · Linux

  ExploitedHigh7.8
• CVE-2026-53266

  netfilter: bridge: make ebt_snat ARP rewrite writable

  Linux · Linux

  ExploitedHigh8.8
• CVE-2025-39964

  crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

  Linux · Linux

  ExploitedHigh7.8
• CVE-2025-39682

  tls: fix handling of zero-length records on the rx_list

  Linux · Linux

  ExploitedCritical9.8
• CVE-2026-53362

  ipv6: account for fraggap on the paged allocation path

  Linux · Linux

  ExploitedHigh7.8
• CVE-2026-31431

  crypto: algif_aead - Revert to operating out-of-place

  Linux · Linux

  ExploitedHigh7.8
• CVE-2025-38352

  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

  Linux · Linux

  ExploitedHigh7.8
• CVE-2024-53197

  ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

  Linux · Linux

  ExploitedHigh7.8
• CVE-2024-53150

  ALSA: usb-audio: Fix out of bounds reads when finding clock sources

  Linux · Linux

  ExploitedHigh7.1
• CVE-2024-50302

  HID: core: zero-initialize the report buffer

  Linux · Linux

  ExploitedMedium5.5

Newest CVEs

• CVE-2026-100082

  xen-blkback: Avoid UAF when reading I/O statistics

  Linux · Linux

  Not scored
• CVE-2026-100081

  xen-netback: defer xenvif_mcast_addr_list_free()

  Linux · Linux

  Not scored
• CVE-2026-100080

  xen-netback: Fix UAF when reading statistics data

  Linux · Linux

  Not scored
• CVE-2026-99270

  tcp: Fix potential UAF in reqsk_timer_handler().

  Linux · Linux

  High8.1
• CVE-2026-99269

  sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs

  Linux · Linux

  High7.8
• CVE-2026-99261

  drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction

  Linux · Linux

  Not scored
• CVE-2026-99260

  ntfs: fix resident conversion in ntfs_new_attr_flags

  Linux · Linux

  Not scored
• CVE-2026-99259

  soc/tegra: pmc: Fix uninitialised clock rate

  Linux · Linux

  Not scored
• CVE-2026-99258

  x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()

  Linux · Linux

  Not scored
• CVE-2026-99257

  gpio: shared: gracefully handle no-device lookup of shared GPIOs

  Linux · Linux

  Not scored