Technology · Linux
Linux Kernel vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 8,777 vulnerabilities in Linux Kernel: 23 in the last 7 days and 4,098 in the last 90 days, 451 of them critical and 38 exploited in the wild. The most recent, CVE-2026-58813, was published on 10 November 2026. 900 vulnerabilities in the last four weeks, down 47% on the four before (1,691). 0 critical against 52.
- Last 7 days
- 23
- Last 90 days
- 4,098
- Critical, all time
- 451
- Exploited in the wild
- 38
About Linux Kernel
Core component of Linux that manages system resources, processes, and hardware interactions.
Latest Linux Kernel vulnerabilities
- CVE-2026-58813: Linux kernel mmap bounds check vulnerability in mman.cinfo
- CVE-2026-56934: Linux IOMMU page table logic error in arm_lpae_split_blk_unmapinfo
- CVE-2026-0193: Linux kernel TIPC double fetch information disclosureinfo
- CVE-2026-99288: Linux kernel null pointer dereference in TCP established lookupinfo
- CVE-2026-99287: Linux kernel xen-netback double unmap memory corruptioninfo
- CVE-2026-99286: Linux kernel xen-netback race condition in XenBus disconnectinfo
- CVE-2026-99284: Linux kernel shared-frag flag loss in skb_zerocopyinfo
- CVE-2026-99283: Linux kernel netfilter conntrack TCP RST timeout handlinginfo
- CVE-2026-99282: Linux kernel use-after-free in TEQL qdisc packet transmitinfo
- CVE-2026-99281: Linux kernel tun device CAP_NET_ADMIN permission checkinfo
- CVE-2026-99280: Linux kernel ksmbd use-after-free in session cleanupinfo
- CVE-2026-99279: Linux kernel ksmbd session reclamation resource leakinfo
- CVE-2026-99278: Linux kernel ksmbd session limit resource exhaustioninfo
- CVE-2026-99277: Linux kernel ksmbd use-after-free in session channel handlinginfo
- CVE-2026-99276: Linux kernel ksmbd session lock deadlockinfo
- CVE-2026-99275: Linux kernel SMB client buffer over-read in SESSION_SETUP parsinginfo
- CVE-2026-99274: Linux kernel SMB client wild read in fiemap with empty truncated responseinfo
- CVE-2026-99273: Linux kernel ksmbd buffer overflow in stream infoinfo
- CVE-2026-99272: Linux kernel SMB2 client buffer over-read in SMB2_read()info
- CVE-2026-99271: Linux kernel ALSA line6 slab-use-after-free in playbackinfo
- CVE-2026-100082: Linux kernel xen-blkback UAF in I/O statistics readinfo
- CVE-2026-100081: Linux kernel xen-netback use-after-free in mcast_addr_list_freeinfo
- CVE-2026-100080: Linux kernel xen-netback use-after-free in statisticsinfo
- CVE-2026-99270: Linux kernel TCP use-after-free in reqsk_timer_handlerinfo
- CVE-2026-99269: Linux kernel sched_ext race condition in task dispatch handlinginfo
Most severe Linux Kernel vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-10585: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 9.8EPSS 5.4%
- CVE-2025-39682: Linux Kernel memory corruption in TLS zero-length record handlingcriticalexploited in the wildCVSS 9.8EPSS 2.9%
- CVE-2026-5281: Google Chrome use after free in Dawncriticalexploited in the wildCVSS 8.8EPSS 5.0%
- CVE-2025-13223: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 8.8EPSS 4.8%
- CVE-2013-6282: Linux Kernel Improper Input Validation Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2022-0185: Linux Kernel Heap-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 8.4
- CVE-2013-2094: Linux Kernel Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 8.4
- CVE-2023-0266: Linux Kernel Use-After-Free Vulnerabilitycriticalexploited in the wildCVSS 7.9
- CVE-2021-22555: Linux Kernel heap out-of-bounds write in Netfilter x_tablescriticalexploited in the wildCVSS 7.8EPSS 86.3%
- CVE-2023-0386: Linux Kernel privilege escalation in OverlayFScriticalexploited in the wildCVSS 7.8EPSS 54.2%
Vulnerabilities per week
900 vulnerabilities in the last four weeks, down 47% on the four before (1,691). 0 critical against 52. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 158 | 22 | |
| 24 Aug 2026 | 249 | 41 | |
| 31 Aug 2026 | 204 | 1 | |
| 7 Sep 2026 | 422 | 67 | |
| 14 Sep 2026 | 867 | 32 | |
| 21 Sep 2026 | 607 | 20 | |
| 28 Sep 2026 | 1 | 0 | |
| 5 Oct 2026 | 216 | 0 | |
| 12 Oct 2026 | 482 | 0 | |
| 19 Oct 2026 | 216 | 0 | |
| 26 Oct 2026 | 127 | 0 | |
| 2 Nov 2026 | 75 | 0 | |
| 9 Nov 2026 | 6 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Linux Kernel vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/kernel)<a href="https://junglewise.ai/threats/technologies/kernel"><img src="https://junglewise.ai/threats/technologies/kernel/badge.svg" alt="Linux Kernel vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/kernel.json, and this page as text at https://junglewise.ai/threats/technologies/kernel.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Linux Kernel vulnerabilities", https://junglewise.ai/threats/technologies/kernel, 13 November 2026.