Vendor
Linux
32 of 60 Linux CVEs in Patchfirst (53%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild, 2 of them used by ransomware.
- CVEs
- 60
- In CISA KEV
- 3253%
- Known ransomware use
- 2
- Median days to KEV
- 464
- from publication
- Latest KEV listing
- 28 Oct 2026
Products
In KEVOther CVEs
- Kernel In KEV: 32 CVEs: 33
- Linux In KEV: 0 CVEs: 20
- Linux kernel In KEV: 0 CVEs: 4
- Linux Kernel In KEV: 0 CVEs: 3
Top ATT&CK techniques
What attackers do with Linux CVEs- T1068Exploitation for Privilege Escalation CVEs: 26
- T1548Abuse Elevation Control Mechanism CVEs: 4
- T1005Data from Local System CVEs: 3
- T1059Command and Scripting Interpreter CVEs: 3
- T1499.004Application or System Exploitation CVEs: 2
Counts are Linux CVEs linked to the technique. Each link’s provenance is on the CVE page.
Linux CVEs
60 CVEs, by priority- CVE-2022-0847Linux Kernel Privilege Escalation Vulnerability92.8%Top 0.17%82.3priority
- CVE-2014-3153Linux Kernel Privilege Escalation VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism37.2%Top 1.5%78.2priority
- CVE-2024-1086Linux Kernel Use-After-Free Vulnerability28.1%Top 1.9%78.1priority
- CVE-2017-1000253Linux Kernel PIE Stack Buffer Corruption Vulnerability10.7%Top 4.2%77.6priority
- CVE-2026-46300Linux Kernel Missing Initialization of a Variable Vulnerability16.1%Top 3.1%77.5priority
- CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability3.3%Top 12%77.5priority
- CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability8.9%Top 4.8%77.5priority
- CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb fragsLinux · LinuxPublic exploitHigh · 8.894.2%Top 0.15%73.9priority
- CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability98.1%Top 0.09%73.4priority
- CVE-2026-43500rxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentLinux · LinuxPublic exploitHigh · 7.894.1%Top 0.15%73.1priority
- CVE-2018-14634Linux Kernel Integer Overflow Vulnerability14.7%Top 3.3%72.8priority
- CVE-2022-0492Linux Kernel Improper Authentication VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1611Escape to Host5.5%Top 7.2%72.0priority
- CVE-2025-39964Linux Kernel Race Condition VulnerabilityLinux · KernelKEVPublic exploitMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation1.6%Top 25%71.9priority
- CVE-2016-5195Linux Kernel Race Condition Vulnerability83.5%Top 0.32%71.7priority
- CVE-2026-53266Linux Kernel Out-of-Bounds Write Vulnerability0.9%Top 39%71.3priority
- CVE-2026-99999In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing…Linux · LinuxPublic exploitCritical · 9.30.8%Top 44%70.2priority
- CVE-2026-31635rxrpc: fix oversized RESPONSE authenticator length checkLinux · LinuxPublic exploitHigh · 7.51.0%Top 37%70.1priority
- CVE-2018-5391The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of…Linux · KernelPublic exploit32.4%Top 1.7%69.7priority
- CVE-2026-53362Linux Kernel Unspecified Vulnerability0.7%Top 47%69.2priority
- CVE-2013-6282Linux Kernel Improper Input Validation VulnerabilityLinux · KernelKEVPublic exploitHigh · 8.8T1068Exploitation for Privilege EscalationT1005Data from Local System39.7%Top 1.4%68.9priority
- CVE-2013-2094Linux Kernel Privilege Escalation Vulnerability47.7%Top 1.2%68.6priority
- CVE-2022-0185Linux Kernel Heap-Based Buffer Overflow Vulnerability25.2%Top 2.1%68.5priority
- CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation78.7%Top 0.41%68.4priority
- CVE-2019-13272Linux Kernel Improper Privilege Management VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism52.2%Top 1%68.3priority
- CVE-2021-3493Linux Kernel Privilege Escalation VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism49.2%Top 1.1%68.2priority
- CVE-2026-46331net/sched: fix pedit partial COW leading to page cache corruptionLinux · LinuxPublic exploitHigh · 7.80.6%Top 49%67.8priority
- CVE-2010-3904Linux Kernel Improper Input Validation VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism15.9%Top 3.1%67.8priority
- CVE-2022-2586Linux Kernel Use-After-Free VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation10.2%Top 4.3%67.6priority
- CVE-2023-0386Linux Kernel Improper Ownership Management VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1543Create or Modify System ProcessT1548.001Setuid and Setgid7.9%Top 5.3%67.4priority
- CVE-2021-22600Linux Kernel Privilege Escalation Vulnerability6.6%Top 6.2%66.7priority
- CVE-2014-0196Linux Kernel Race Condition VulnerabilityLinux · KernelKEVPublic exploitMedium · 5.5T1078Valid AccountsT1068Exploitation for Privilege Escalation20.3%Top 2.5%66.3priority
- CVE-2024-53104Linux Kernel Out-of-Bounds Write VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation3.4%Top 11%66.2priority
- CVE-2013-2596Linux Kernel Integer Overflow Vulnerability3.2%Top 12%66.1priority
- CVE-2023-2163Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege EscalationLinux · Linux KernelPublic exploitCritical · 10.03.6%Top 10%66.0priority
- CVE-2023-0266Linux Kernel Use-After-Free Vulnerability3.7%Top 10%65.8priority
- CVE-2026-43494net/rds: reset op_nents when zerocopy page pin failsLinux · LinuxPublic exploitHigh · 7.80.4%Top 65%64.8priority
- CVE-2025-21756vsock: Keep the binding until socket destructionLinux · LinuxPublic exploitHigh · 7.80.9%Top 41%64.4priority
- CVE-2025-38352Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityLinux · KernelKEVPublic exploitHigh · 7.81.4%Top 28%62.8priority
- CVE-2023-31248Linux Kernel nftables Use-After-Free Local Privilege Escalation VulnerabilityLinux · Linux KernelPublic exploitHigh · 7.81.9%Top 20%62.4priority
- CVE-2024-53197Linux Kernel Out-of-Bounds Access VulnerabilityLinux · KernelKEVHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation4.1%Top 9.2%61.6priority
- CVE-2025-37899ksmbd: fix use-after-free in session logoffLinux · LinuxPublic exploitHigh · 8.80.9%Top 41%58.7priority
- CVE-2024-53150Linux Kernel Out-of-Bounds Read Vulnerability1.4%Top 28%57.3priority
- CVE-2024-50302Linux Kernel Use of Uninitialized Resource Vulnerability0.8%Top 43%53.2priority
- CVE-2024-26987mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabledLinux · Linux0.2%Top 93%36.4priority
- CVE-2020-8835Linux kernel bpf verifier vulnerabilityLinux kernel · Linux kernelPublic exploitHigh · 7.86.0%Top 6.7%30.2priority
- CVE-2019-11477Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segsLinux · Linux kernelPublic exploitHigh · 7.598.7%Top 0.08%30.2priority
- CVE-2019-11478SACK can cause extensive memory use via fragmented resend queueLinux · Linux kernelPublic exploitMedium · 5.394.7%Top 0.14%28.7priority
- CVE-2025-22037ksmbd: fix null pointer dereference in alloc_preauth_hash()Linux · LinuxHigh · 7.569.5%Top 0.64%25.1priority
- CVE-2019-11479Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytesLinux · Linux kernelMedium · 5.391.7%Top 0.19%24.4priority
- CVE-2026-98432In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU…Linux · LinuxPublic exploitCritical · 9.80.4%Top 61%22.0priority
- CVE-2018-5390Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and…Linux · Linux Kernel71.8%Top 0.58%19.9priority
- CVE-2026-98548In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a…Linux · LinuxCritical · 9.80.7%Top 47%19.0priority
- CVE-2026-98959In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are…Linux · LinuxCritical · 9.80.6%Top 51%18.6priority
- CVE-2026-98490In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to…Linux · LinuxCritical · 9.80.6%Top 50%18.4priority
- CVE-2026-98323In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the…Linux · LinuxCritical · 9.80.5%Top 56%18.0priority
- CVE-2026-99079In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…Linux · LinuxCritical · 9.80.5%Top 60%16.7priority
- CVE-2026-99078In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…Linux · LinuxCritical · 9.80.5%Top 60%16.7priority
- CVE-2026-98365In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr_check_range()…Linux · LinuxCritical · 9.80.4%Top 68%15.5priority
- CVE-2026-98549In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in…Linux · LinuxCritical · 9.10.4%Top 67%14.6priority
- CVE-2026-98464In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during…Linux · LinuxCritical · 9.30.1%Top 96%8.8priority