Vendor
Linux
As of , 31 Linux vulnerabilities are on CISA's list of exploited vulnerabilities, 2 of them used in ransomware campaigns; 8 were added in 2026. Patch first: CVE-2025-39682.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2025-39682Improper Check for Unusual or Exceptional Conditions | Linux Kernel | Patch nowForensic triage required by CISA | 0.03 | ||
| 2 | CVE-2025-39964Race Condition | Linux Kernel | Patch nowForensic triage required by CISA | 0.01 | ||
| 3 | CVE-2026-53266Out-of-Bounds Write | Linux Kernel | Patch nowForensic triage required by CISA | 0.01 | ||
| 4 | CVE-2026-53362Unspecified | Linux Kernel | Patch nowForensic triage required by CISA | 0.01 | ||
| 5 | CVE-2021-22555Heap Out-of-Bounds Write | Linux Kernel | Patch this weekMetasploit module; EPSS 0.79; verified Exploit-DB entry | 0.79 | ||
| 6 | CVE-2013-6282Improper Input Validation | Linux Kernel | Patch this weekMetasploit module; verified Exploit-DB entry | 0.40 | ||
| 7 | CVE-2019-13272Improper Privilege Management | Linux Kernel | Patch this weekMetasploit module; EPSS 0.52; verified Exploit-DB entry | 0.52 | ||
| 8 | CVE-2010-3904Improper Input Validation | Linux Kernel | Patch this weekMetasploit module; verified Exploit-DB entry | 0.16 | ||
| 9 | CVE-2022-0847Privilege Escalation | Linux Kernel | Patch this weekMetasploit module; EPSS 0.93 | 0.93 | ||
| 10 | CVE-2021-3493Privilege Escalation | Linux Kernel | Patch this weekMetasploit module | 0.49 | ||
| 11 | CVE-2014-3153Privilege Escalation | Linux Kernel | Patch this weekMetasploit module | 0.37 | ||
| 12 | CVE-2022-0995Out-of-Bounds Write | Linux Kernel | Patch this weekMetasploit module | 0.09 | ||
| 13 | CVE-2023-0386Improper Ownership Management | Linux Kernel | Patch this weekMetasploit module | 0.08 | ||
| 14 | CVE-2022-0492Improper Authentication | Linux Kernel | Patch this weekMetasploit module | 0.06 | ||
| 15 | CVE-2026-31431Incorrect Resource Transfer Between Spheres | Linux Kernel | Patch this weekMetasploit module | 0.03 | ||
| 16 | CVE-2016-5195Race Condition | Linux Kernel | Patch this weekEPSS 0.84; verified Exploit-DB entry | 0.84 | ||
| 17 | CVE-2024-1086Use-After-Free | Linux Kernel | Patch this weekRansomware use | 0.28 | ||
| 18 | CVE-2017-1000253PIE Stack Buffer Corruption | Linux Kernel | Patch this weekRansomware use | 0.11 | ||
| 19 | CVE-2013-2094Privilege Escalation | Linux Kernel | Patch soonVerified Exploit-DB entry | 0.48 | ||
| 20 | CVE-2022-0185Heap-Based Buffer Overflow | Linux Kernel | Patch soon | 0.25 | ||
| 21 | CVE-2014-0196Race Condition | Linux Kernel | Patch soon | 0.22 | ||
| 22 | CVE-2018-14634Integer Overflow | Linux Kernel | Patch soon | 0.15 | ||
| 23 | CVE-2022-2586Use-After-Free | Linux Kernel | Patch soon | 0.10 | ||
| 24 | CVE-2021-22600Privilege Escalation | Linux Kernel | Patch soon | 0.07 | ||
| 25 | CVE-2024-53197Out-of-Bounds Access | Linux Kernel | Patch soon | 0.04 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 1 |
| 2022 | 8 |
| 2023 | 3 |
| 2024 | 4 |
| 2025 | 7 |
| 2026 | 8 |