[ Vendor · 1,350 CVEs ]
Linux
CVEs affecting Linux published in the last 30 days, plus any Linux CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93212 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose nfsd_file_net_dispose() is… | |
| CVE-2026-93213 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in of_alias_scan() stem parser The stem parser tests… | |
| CVE-2026-93214 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() usbg_make_tpg() held dep_lock… | |
| CVE-2026-93215 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs file creation fails In cdx_create_res_attr(), if… | |
| CVE-2026-93216 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/page_owner: use memcg_data snapshot to avoid TOCTOU in… | |
| CVE-2026-93217 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks… | |
| CVE-2026-93218 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd… | |
| CVE-2026-93207 | 24 Sep 2026 | CVSS 9.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry… | |
| CVE-2026-93208 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasan_quarantine_remove_cache()… | |
| CVE-2026-93209 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb BT enable… | |
| CVE-2026-93210 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently… | |
| CVE-2026-93205 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm arm_smmu_device_remove() manually… | |
| CVE-2026-93206 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file_ns_capable() when checking config space read access… | |
| CVE-2026-53362 | 4 Jul 2026 | CVSS 7.8 | Linux Kernel UnspecifiedIn the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In __ip6_append_data()… | ExploitedFix |
| CVE-2026-53266 | 25 Jun 2026 | CVSS 8.8 | Linux Kernel Out-of-Bounds WriteIn the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target… | ExploitedFix |
| CVE-2026-31431 | 22 Apr 2026 | CVSS 7.8 | Linux Kernel Incorrect Resource Transfer Between SpheresIn the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit… | ExploitedFix |
| CVE-2025-39964 | 13 Oct 2025 | CVSS 5.5 | Linux Kernel Race ConditionIn the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes… | ExploitedFix |
| CVE-2025-39682 | 5 Sep 2025 | CVSS 9.8 | Linux Kernel Improper Check for Unusual or Exceptional ConditionsIn the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must… | ExploitedFix |
| CVE-2025-38352 | 22 Jul 2025 | CVSS 7.8 | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race ConditionIn the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and… | ExploitedFix |
| CVE-2024-53197 | 27 Dec 2024 | CVSS 7.8 | Linux Kernel Out-of-Bounds AccessIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices… | ExploitedFix |
| CVE-2024-53150 | 24 Dec 2024 | CVSS 7.1 | Linux Kernel Out-of-Bounds ReadIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current… | ExploitedFix |
| CVE-2024-53104 | 2 Dec 2024 | CVSS 7.8 | Linux Kernel Out-of-Bounds WriteIn the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format… | ExploitedFix |
| CVE-2024-50302 | 19 Nov 2024 | CVSS 5.5 | Linux Kernel Use of Uninitialized ResourceIn the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by… | ExploitedFix |
| CVE-2024-36971 | 10 Jun 2024 | CVSS 7.8 | Android Kernel Remote Code ExecutionIn the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce… | ExploitedFix |
| CVE-2024-36971 | 10 Jun 2024 | CVSS 7.8 | Android Kernel Remote Code ExecutionIn the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce… | ExploitedFix |
| CVE-2024-1086 | 31 Jan 2024 | CVSS 7.8 | Linux Kernel Use-After-FreeA use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The… | ExploitedFix |
| CVE-2024-1086 | 31 Jan 2024 | CVSS 7.8 | Linux Kernel Use-After-FreeA use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The… | ExploitedFix |
| CVE-2022-2586 | 8 Jan 2024 | CVSS 7.8 | Linux Kernel Use-After-FreeIt was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was… | ExploitedFix |
| CVE-2022-2586 | 8 Jan 2024 | CVSS 7.8 | Linux Kernel Use-After-FreeIt was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was… | ExploitedFix |
| CVE-2023-0386 | 22 Mar 2023 | CVSS 7.8 | Linux Kernel Improper Ownership ManagementA flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s… | ExploitedFix |
| CVE-2023-0266 | 30 Jan 2023 | CVSS 7.0 | Linux Kernel Use-After-FreeA use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be… | ExploitedFix |
| CVE-2022-0995 | 25 Mar 2022 | CVSS 7.8 | Linux Kernel Out-of-Bounds WriteAn out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of… | ExploitedFix |
| CVE-2022-0847 | 10 Mar 2022 | CVSS 7.8 | Linux Kernel Privilege EscalationA flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and… | ExploitedFix |
| CVE-2022-0492 | 3 Mar 2022 | CVSS 7.8 | Linux Kernel Improper AuthenticationA vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain… | ExploitedFix |
| CVE-2022-0185 | 11 Feb 2022 | CVSS 8.4 | Linux Kernel Heap-Based Buffer OverflowA heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel… | ExploitedFix |
| CVE-2022-0185 | 11 Feb 2022 | CVSS 8.4 | Linux Kernel Heap-Based Buffer OverflowA heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel… | ExploitedFix |
| CVE-2021-22600 | 26 Jan 2022 | CVSS 7.0 | Linux Kernel Privilege EscalationA double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or… | ExploitedFix |
| CVE-2021-22555 | 7 Jul 2021 | CVSS 7.8 | Linux Kernel Heap Out-of-Bounds WriteA heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges… | ExploitedFix |
| CVE-2021-3493 | 17 Apr 2021 | CVSS 7.8 | Linux Kernel Privilege EscalationThe overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files… | ExploitedFix |
| CVE-2019-13272 | 17 Jul 2019 | CVSS 7.8 | Linux Kernel Improper Privilege ManagementIn the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a… | ExploitedFix |
| CVE-2018-14634 | 25 Sep 2018 | CVSS 7.8 | Linux Kernel Integer OverflowAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise… | ExploitedFix |
| CVE-2017-1000253 | 5 Oct 2017 | CVSS 7.8 | Linux Kernel PIE Stack Buffer CorruptionLinux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86… | ExploitedFix |
| CVE-2017-1000253 | 5 Oct 2017 | CVSS 7.8 | Linux Kernel PIE Stack Buffer CorruptionLinux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86… | ExploitedFix |
| CVE-2016-5195 | 10 Nov 2016 | CVSS 7.0 | Linux Kernel Race ConditionRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of… | ExploitedFix |
| CVE-2014-3153 | 7 Jun 2014 | CVSS 7.8 | Linux Kernel Privilege EscalationThe futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which… | ExploitedFix |
| CVE-2014-0196 | 7 May 2014 | CVSS 5.5 | Linux Kernel Race ConditionThe n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST"… | ExploitedFix |
| CVE-2013-6282 | 20 Nov 2013 | CVSS 8.8 | Linux Kernel Improper Input ValidationThe (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses… | ExploitedFix |
| CVE-2013-2094 | 14 May 2013 | CVSS 8.4 | Linux Kernel Privilege EscalationThe perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users… | ExploitedFix |
| CVE-2013-2596 | 13 Apr 2013 | CVSS 7.8 | Linux Kernel Integer OverflowInteger overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android… | ExploitedFix |
| CVE-2010-3904 | 6 Dec 2010 | CVSS 7.8 | Linux Kernel Improper Input ValidationThe rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36… | ExploitedFix |
Page 14 of 14