Vendor
Linux vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 8,686 vulnerabilities in Linux: 20 in the last 7 days and 4,004 in the last 90 days, 451 of them critical and 38 exploited in the wild. The most recent, CVE-2026-56934, was published on 10 November 2026. 840 vulnerabilities in the last four weeks, down 49% on the four before (1,659). 0 critical against 52. 2 technologies have a page of their own.
- Last 7 days
- 20
- Last 90 days
- 4,004
- Critical, all time
- 451
- Exploited in the wild
- 38
About Linux
The developer of the open-source Linux kernel and associated software projects.
Linux technologies
- Linux Kernel8,777
- Linux7
Latest Linux vulnerabilities
- CVE-2026-56934: Linux IOMMU page table logic error in arm_lpae_split_blk_unmapinfo
- CVE-2026-99288: Linux kernel null pointer dereference in TCP established lookupinfo
- CVE-2026-99287: Linux kernel xen-netback double unmap memory corruptioninfo
- CVE-2026-99286: Linux kernel xen-netback race condition in XenBus disconnectinfo
- CVE-2026-99284: Linux kernel shared-frag flag loss in skb_zerocopyinfo
- CVE-2026-99283: Linux kernel netfilter conntrack TCP RST timeout handlinginfo
- CVE-2026-99282: Linux kernel use-after-free in TEQL qdisc packet transmitinfo
- CVE-2026-99281: Linux kernel tun device CAP_NET_ADMIN permission checkinfo
- CVE-2026-99280: Linux kernel ksmbd use-after-free in session cleanupinfo
- CVE-2026-99279: Linux kernel ksmbd session reclamation resource leakinfo
- CVE-2026-99278: Linux kernel ksmbd session limit resource exhaustioninfo
- CVE-2026-99277: Linux kernel ksmbd use-after-free in session channel handlinginfo
- CVE-2026-99276: Linux kernel ksmbd session lock deadlockinfo
- CVE-2026-99275: Linux kernel SMB client buffer over-read in SESSION_SETUP parsinginfo
- CVE-2026-99274: Linux kernel SMB client wild read in fiemap with empty truncated responseinfo
- CVE-2026-99273: Linux kernel ksmbd buffer overflow in stream infoinfo
- CVE-2026-99272: Linux kernel SMB2 client buffer over-read in SMB2_read()info
- CVE-2026-99271: Linux kernel ALSA line6 slab-use-after-free in playbackinfo
- CVE-2026-100082: Linux kernel xen-blkback UAF in I/O statistics readinfo
- CVE-2026-100080: Linux kernel xen-netback use-after-free in statisticsinfo
- CVE-2026-99270: Linux kernel TCP use-after-free in reqsk_timer_handlerinfo
- CVE-2026-99269: Linux kernel sched_ext race condition in task dispatch handlinginfo
- CVE-2026-99268: Linux kernel io_uring poll notification race conditioninfo
- CVE-2026-99267: Linux kernel io_uring NAPI timeout calculation integer overflowinfo
- CVE-2026-99266: Linux kernel io_uring integer overflow in buffer offset calculationinfo
Most severe Linux vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-10585: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 9.8EPSS 5.4%
- CVE-2025-39682: Linux Kernel memory corruption in TLS zero-length record handlingcriticalexploited in the wildCVSS 9.8EPSS 2.9%
- CVE-2026-5281: Google Chrome use after free in Dawncriticalexploited in the wildCVSS 8.8EPSS 5.0%
- CVE-2025-13223: Google Chrome type confusion in V8 enginecriticalexploited in the wildCVSS 8.8EPSS 4.8%
- CVE-2013-6282: Linux Kernel Improper Input Validation Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2022-0185: Linux Kernel Heap-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 8.4
- CVE-2013-2094: Linux Kernel Privilege Escalation Vulnerabilitycriticalexploited in the wildCVSS 8.4
- CVE-2023-0266: Linux Kernel Use-After-Free Vulnerabilitycriticalexploited in the wildCVSS 7.9
- CVE-2021-22555: Linux Kernel heap out-of-bounds write in Netfilter x_tablescriticalexploited in the wildCVSS 7.8EPSS 86.3%
- CVE-2023-0386: Linux Kernel privilege escalation in OverlayFScriticalexploited in the wildCVSS 7.8EPSS 54.2%
Vulnerabilities per week
840 vulnerabilities in the last four weeks, down 49% on the four before (1,659). 0 critical against 52. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 158 | 22 | |
| 24 Aug 2026 | 249 | 41 | |
| 31 Aug 2026 | 204 | 1 | |
| 7 Sep 2026 | 422 | 67 | |
| 14 Sep 2026 | 867 | 32 | |
| 21 Sep 2026 | 589 | 20 | |
| 28 Sep 2026 | 1 | 0 | |
| 5 Oct 2026 | 202 | 0 | |
| 12 Oct 2026 | 443 | 0 | |
| 19 Oct 2026 | 207 | 0 | |
| 26 Oct 2026 | 119 | 0 | |
| 2 Nov 2026 | 71 | 0 | |
| 9 Nov 2026 | 4 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Linux vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/linux)<a href="https://junglewise.ai/threats/vendors/linux"><img src="https://junglewise.ai/threats/vendors/linux/badge.svg" alt="Linux vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/linux.json, and this page as text at https://junglewise.ai/threats/vendors/linux.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Linux vulnerabilities", https://junglewise.ai/threats/vendors/linux, 13 November 2026.