Linux vulnerabilities

CVEs per yearBy the year they were published

1. 20189
2. 201910
3. 20202
4. 20219
5. 202265
6. 202347
7. 20244,306
8. 20255,675
9. 20268,259

Known exploitedNewest addition to KEV first

• CVE-2026-46300

  net: skbuff: preserve shared-frag marker during coalescing

  Linux · Linux

  ExploitedHigh7.8
• CVE-2026-53266

  netfilter: bridge: make ebt_snat ARP rewrite writable

  Linux · Linux

  ExploitedHigh8.8
• CVE-2025-39964

  crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

  Linux · Linux

  ExploitedHigh7.8
• CVE-2025-39682

  tls: fix handling of zero-length records on the rx_list

  Linux · Linux

  ExploitedCritical9.8
• CVE-2026-53362

  ipv6: account for fraggap on the paged allocation path

  Linux · Linux

  ExploitedHigh7.8
• CVE-2026-31431

  crypto: algif_aead - Revert to operating out-of-place

  Linux · Linux

  ExploitedHigh7.8
• CVE-2025-38352

  posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

  Linux · Linux

  ExploitedHigh7.8
• CVE-2024-53197

  ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

  Linux · Linux

  ExploitedHigh7.8
• CVE-2024-53150

  ALSA: usb-audio: Fix out of bounds reads when finding clock sources

  Linux · Linux

  ExploitedHigh7.1
• CVE-2024-50302

  HID: core: zero-initialize the report buffer

  Linux · Linux

  ExploitedMedium5.5

Newest CVEs

• CVE-2026-99284

  net: skbuff: propagate shared-frag marker in skb_zerocopy()

  Linux · Linux

  Not scored
• CVE-2026-99283

  netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets

  Linux · Linux

  Not scored
• CVE-2026-99282

  net/sched: sch_teql: fix use-after-free on lower qdisc drop

  Linux · Linux

  Not scored
• CVE-2026-99281

  tun: Require CAP_NET_ADMIN to attach to an ownerless device

  Linux · Linux

  Not scored
• CVE-2026-99280

  ksmbd: drain session procfs readers before dropping table references

  Linux · Linux

  Not scored
• CVE-2026-99279

  ksmbd: reclaim ended sessions on logoff and expiration

  Linux · Linux

  Not scored
• CVE-2026-99278

  ksmbd: limit sessions on each connection

  Linux · Linux

  Not scored
• CVE-2026-99277

  ksmbd: hold a connection reference for each session channel

  Linux · Linux

  Not scored
• CVE-2026-99276

  ksmbd: defer connection scavenging while session locks are busy

  Linux · Linux

  Not scored
• CVE-2026-99275

  smb: client: reject short SESSION_SETUP responses

  Linux · Linux

  Not scored