# Linux vulnerabilities Source: https://junglewise.ai/threats/vendors/linux Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/linux.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 8,686 vulnerabilities in Linux: 20 in the last 7 days and 4,004 in the last 90 days, 451 of them critical and 38 exploited in the wild. The most recent, CVE-2026-56934, was published on 10 November 2026. 840 vulnerabilities in the last four weeks, down 49% on the four before (1,659). 0 critical against 52. 2 technologies have a page of their own. ## Counts - Last 7 days: 20 - Last 30 days: 838 - Last 90 days: 4004 - All time: 8686 (451 critical, 38 exploited in the wild) ## About Linux The developer of the open-source Linux kernel and associated software projects. ## Latest Linux vulnerabilities - [CVE-2026-56934: Linux IOMMU page table logic error in arm_lpae_split_blk_unmap](https://junglewise.ai/threats/cve-2026-56934-in-arm-lpae-split-blk-unmap-of-drivers-iommu-io-pgtable-arm) (info, published 10 Nov 2026) - [CVE-2026-99288: Linux kernel null pointer dereference in TCP established lookup](https://junglewise.ai/threats/cve-2026-99288-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 10 Nov 2026) - [CVE-2026-99287: Linux kernel xen-netback double unmap memory corruption](https://junglewise.ai/threats/cve-2026-99287-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 10 Nov 2026) - [CVE-2026-99286: Linux kernel xen-netback race condition in XenBus disconnect](https://junglewise.ai/threats/cve-2026-99286-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 10 Nov 2026) - [CVE-2026-99284: Linux kernel shared-frag flag loss in skb_zerocopy](https://junglewise.ai/threats/cve-2026-99284-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99283: Linux kernel netfilter conntrack TCP RST timeout handling](https://junglewise.ai/threats/cve-2026-99283-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99282: Linux kernel use-after-free in TEQL qdisc packet transmit](https://junglewise.ai/threats/cve-2026-99282-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99281: Linux kernel tun device CAP_NET_ADMIN permission check](https://junglewise.ai/threats/cve-2026-99281-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99280: Linux kernel ksmbd use-after-free in session cleanup](https://junglewise.ai/threats/cve-2026-99280-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99279: Linux kernel ksmbd session reclamation resource leak](https://junglewise.ai/threats/cve-2026-99279-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99278: Linux kernel ksmbd session limit resource exhaustion](https://junglewise.ai/threats/cve-2026-99278-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99277: Linux kernel ksmbd use-after-free in session channel handling](https://junglewise.ai/threats/cve-2026-99277-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99276: Linux kernel ksmbd session lock deadlock](https://junglewise.ai/threats/cve-2026-99276-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99275: Linux kernel SMB client buffer over-read in SESSION_SETUP parsing](https://junglewise.ai/threats/cve-2026-99275-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99274: Linux kernel SMB client wild read in fiemap with empty truncated response](https://junglewise.ai/threats/cve-2026-99274-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99273: Linux kernel ksmbd buffer overflow in stream info](https://junglewise.ai/threats/cve-2026-99273-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99272: Linux kernel SMB2 client buffer over-read in SMB2_read()](https://junglewise.ai/threats/cve-2026-99272-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-99271: Linux kernel ALSA line6 slab-use-after-free in playback](https://junglewise.ai/threats/cve-2026-99271-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 7 Nov 2026) - [CVE-2026-100082: Linux kernel xen-blkback UAF in I/O statistics read](https://junglewise.ai/threats/cve-2026-100082-in-the-linux-kernel-the-following-vulnerability-has-been) (info, published 6 Nov 2026) - [CVE-2026-100080: Linux kernel xen-netback use-after-free in statistics](https://junglewise.ai/threats/cve-2026-100080-in-the-linux-kernel-the-following-vulnerability-has-been) (info, published 6 Nov 2026) - [CVE-2026-99270: Linux kernel TCP use-after-free in reqsk_timer_handler](https://junglewise.ai/threats/cve-2026-99270-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 3 Nov 2026) - [CVE-2026-99269: Linux kernel sched_ext race condition in task dispatch handling](https://junglewise.ai/threats/cve-2026-99269-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 3 Nov 2026) - [CVE-2026-99268: Linux kernel io_uring poll notification race condition](https://junglewise.ai/threats/cve-2026-99268-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 3 Nov 2026) - [CVE-2026-99267: Linux kernel io_uring NAPI timeout calculation integer overflow](https://junglewise.ai/threats/cve-2026-99267-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 3 Nov 2026) - [CVE-2026-99266: Linux kernel io_uring integer overflow in buffer offset calculation](https://junglewise.ai/threats/cve-2026-99266-in-the-linux-kernel-the-following-vulnerability-has-been-resolved) (info, published 3 Nov 2026) ## Most severe Linux vulnerabilities - [CVE-2025-10585: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine) (critical, exploited in the wild, CVSS 9.8, published 24 Sep 2025) - [CVE-2025-39682: Linux Kernel memory corruption in TLS zero-length record handling](https://junglewise.ai/threats/cve-2025-39682-linux-kernel-memory-corruption-in-tls-zero-length-record-handling) (critical, exploited in the wild, CVSS 9.8, published 5 Sep 2025) - [CVE-2026-5281: Google Chrome use after free in Dawn](https://junglewise.ai/threats/cve-2026-5281-google-chrome-use-after-free-in-dawn) (critical, exploited in the wild, CVSS 8.8, published 1 Apr 2026) - [CVE-2025-13223: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-13223-google-chrome-type-confusion-in-v8-engine) (critical, exploited in the wild, CVSS 8.8, published 17 Nov 2025) - [CVE-2013-6282: Linux Kernel Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2013-6282-linux-kernel-improper-input-validation-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 15 Sep 2022) - [CVE-2022-0185: Linux Kernel Heap-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2022-0185-linux-kernel-heap-based-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 8.4, published 21 Aug 2024) - [CVE-2013-2094: Linux Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2013-2094-linux-kernel-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 8.4, published 15 Sep 2022) - [CVE-2023-0266: Linux Kernel Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2023-0266-linux-kernel-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 7.9, published 30 Mar 2023) - [CVE-2021-22555: Linux Kernel heap out-of-bounds write in Netfilter x_tables](https://junglewise.ai/threats/cve-2021-22555-linux-kernel-heap-out-of-bounds-write-in-netfilter-x-tables) (critical, exploited in the wild, CVSS 7.8, published 6 Oct 2025) - [CVE-2023-0386: Linux Kernel privilege escalation in OverlayFS](https://junglewise.ai/threats/cve-2023-0386-linux-kernel-privilege-escalation-in-overlayfs) (critical, exploited in the wild, CVSS 7.8, published 17 Jun 2025) ## Vulnerabilities per week 840 vulnerabilities in the last four weeks, down 49% on the four before (1,659). 0 critical against 52. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 158 | 22 | 0 | | 24 Aug 2026 | 249 | 41 | 1 | | 31 Aug 2026 | 204 | 1 | 0 | | 7 Sep 2026 | 422 | 67 | 0 | | 14 Sep 2026 | 867 | 32 | 0 | | 21 Sep 2026 | 589 | 20 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 202 | 0 | 0 | | 12 Oct 2026 | 443 | 0 | 0 | | 19 Oct 2026 | 207 | 0 | 0 | | 26 Oct 2026 | 119 | 0 | 0 | | 2 Nov 2026 | 71 | 0 | 0 | | 9 Nov 2026 | 4 | 0 | 0 | ## Linux technologies - [Linux Kernel](https://junglewise.ai/threats/technologies/kernel): 8,777 vulnerabilities - [Linux](https://junglewise.ai/threats/technologies/linux-linux): 7 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Linux vulnerabilities", https://junglewise.ai/threats/vendors/linux, 13 November 2026.