Exploited vulnerabilities

Linux

32 Linux vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue32
Last 12 months9
In ransomware campaigns2
Last addition28 October 2026

The vulnerabilities32

  1. 28 October 2026CVE-2026-46300KernelLinux Kernel Missing Initialization of a Variable Vulnerability
  2. 18 September 2026CVE-2026-53266KernelLinux Kernel Out-of-Bounds Write Vulnerability
  3. 18 September 2026CVE-2025-39964KernelLinux Kernel Race Condition Vulnerability
  4. 18 September 2026CVE-2025-39682KernelLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
  5. 27 August 2026CVE-2026-53362KernelLinux Kernel Unspecified Vulnerability
  6. 26 August 2026CVE-2022-0995KernelLinux Kernel Out-of-Bounds Write Vulnerability
  7. 2 June 2026CVE-2022-0492KernelLinux Kernel Improper Authentication Vulnerability
  8. 1 May 2026CVE-2026-31431KernelLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
  9. 26 January 2026CVE-2018-14634KernelLinux Kernel Integer Overflow Vulnerability
  10. 6 October 2025CVE-2021-22555KernelLinux Kernel Heap Out-of-Bounds Write Vulnerability
  11. 4 September 2025CVE-2025-38352KernelLinux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
  12. 17 June 2025CVE-2023-0386KernelLinux Kernel Improper Ownership Management Vulnerability
  13. 9 April 2025CVE-2024-53197KernelLinux Kernel Out-of-Bounds Access Vulnerability
  14. 9 April 2025CVE-2024-53150KernelLinux Kernel Out-of-Bounds Read Vulnerability
  15. 4 March 2025CVE-2024-50302KernelLinux Kernel Use of Uninitialized Resource Vulnerability
  16. 5 February 2025CVE-2024-53104KernelLinux Kernel Out-of-Bounds Write Vulnerability
  17. 9 September 2024CVE-2017-1000253KernelLinux Kernel PIE Stack Buffer Corruption Vulnerability Ransomware
  18. 21 August 2024CVE-2022-0185KernelLinux Kernel Heap-Based Buffer Overflow Vulnerability
  19. 26 June 2024CVE-2022-2586KernelLinux Kernel Use-After-Free Vulnerability
  20. 30 May 2024CVE-2024-1086KernelLinux Kernel Use-After-Free VulnerabilityRansomware
  21. 12 May 2023CVE-2014-0196KernelLinux Kernel Race Condition Vulnerability
  22. 12 May 2023CVE-2010-3904KernelLinux Kernel Improper Input Validation Vulnerability
  23. 30 March 2023CVE-2023-0266KernelLinux Kernel Use-After-Free Vulnerability
  24. 20 October 2022CVE-2021-3493KernelLinux Kernel Privilege Escalation Vulnerability
  25. 15 September 2022CVE-2013-6282KernelLinux Kernel Improper Input Validation Vulnerability
  26. 15 September 2022CVE-2013-2596KernelLinux Kernel Integer Overflow Vulnerability
  27. 15 September 2022CVE-2013-2094KernelLinux Kernel Privilege Escalation Vulnerability
  28. 25 May 2022CVE-2014-3153KernelLinux Kernel Privilege Escalation Vulnerability
  29. 25 April 2022CVE-2022-0847KernelLinux Kernel Privilege Escalation Vulnerability
  30. 11 April 2022CVE-2021-22600KernelLinux Kernel Privilege Escalation Vulnerability
  31. 3 March 2022CVE-2016-5195KernelLinux Kernel Race Condition Vulnerability
  32. 10 December 2021CVE-2019-13272KernelLinux Kernel Improper Privilege Management Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Linux included.

All vendorsThe catalogue on the CISA website