Linux — known exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalog (KEV) lists vulnerabilities that CISA has confirmed are being exploited in the wild; U.S. federal civilian agencies are required to remediate each entry by its due date. This page joins the KEV entries for Linux with NVD CVSS scores and CISA's ransomware-campaign flag. See our methodology or browse all CVEs.
Key findings
CISA's Known Exploited Vulnerabilities catalog lists 31 Linux vulnerabilities confirmed as exploited in the wild across 1 product; 2 of them (6.5%) are flagged as used in known ransomware campaigns. All entries affect a single product: Kernel. CISA added 8 entries in 2026 so far, compared with 7 in 2025. Across the 31 entries with an NVD CVSS score (100% of the total), the average score is 7.7; 1 entry is rated critical by NVD. The most recent addition is CVE-2025-39964 (Linux Kernel Race Condition Vulnerability), added on 2026-09-18.
Affected products
| Product | Entries | Share |
|---|---|---|
| Kernel | 31 | 100% |
Entries added per year
By date added to the KEV catalog
Exploited Linux vulnerabilities (31)
Newest first. CVSS scores from NVD where available.
| CVE | Product | Vulnerability | Date added | Ransomware | CVSS |
|---|---|---|---|---|---|
| CVE-2025-39964 | Kernel | Linux Kernel Race Condition Vulnerability | 2026-09-18 | — | HIGH7.8 |
| CVE-2026-53266 | Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 2026-09-18 | — | HIGH8.8 |
| CVE-2025-39682 | Kernel | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 2026-09-18 | — | CRITICAL9.8 |
| CVE-2026-53362 | Kernel | Linux Kernel Unspecified Vulnerability | 2026-08-27 | — | HIGH7.8 |
| CVE-2022-0995 | Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 2026-08-26 | — | HIGH7.8 |
| CVE-2022-0492 | Kernel | Linux Kernel Improper Authentication Vulnerability | 2026-06-02 | — | HIGH7.8 |
| CVE-2026-31431 | Kernel | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 2026-05-01 | — | HIGH7.8 |
| CVE-2018-14634 | Kernel | Linux Kernel Integer Overflow Vulnerability | 2026-01-26 | — | HIGH7.8 |
| CVE-2021-22555 | Kernel | Linux Kernel Heap Out-of-Bounds Write Vulnerability | 2025-10-06 | — | HIGH8.3 |
| CVE-2025-38352 | Kernel | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | 2025-09-04 | — | HIGH7.8 |
| CVE-2023-0386 | Kernel | Linux Kernel Improper Ownership Management Vulnerability | 2025-06-17 | — | HIGH7.8 |
| CVE-2024-53150 | Kernel | Linux Kernel Out-of-Bounds Read Vulnerability | 2025-04-09 | — | HIGH7.1 |
| CVE-2024-53197 | Kernel | Linux Kernel Out-of-Bounds Access Vulnerability | 2025-04-09 | — | HIGH7.8 |
| CVE-2024-50302 | Kernel | Linux Kernel Use of Uninitialized Resource Vulnerability | 2025-03-04 | — | MEDIUM5.5 |
| CVE-2024-53104 | Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 2025-02-05 | — | HIGH7.8 |
| CVE-2017-1000253 | Kernel | Linux Kernel PIE Stack Buffer Corruption Vulnerability | 2024-09-09 | Known | HIGH7.8 |
| CVE-2022-0185 | Kernel | Linux Kernel Heap-Based Buffer Overflow Vulnerability | 2024-08-21 | — | HIGH8.4 |
| CVE-2022-2586 | Kernel | Linux Kernel Use-After-Free Vulnerability | 2024-06-26 | — | MEDIUM5.3 |
| CVE-2024-1086 | Kernel | Linux Kernel Use-After-Free Vulnerability | 2024-05-30 | Known | HIGH7.8 |
| CVE-2014-0196 | Kernel | Linux Kernel Race Condition Vulnerability | 2023-05-12 | — | MEDIUM5.5 |
| CVE-2010-3904 | Kernel | Linux Kernel Improper Input Validation Vulnerability | 2023-05-12 | — | HIGH7.8 |
| CVE-2023-0266 | Kernel | Linux Kernel Use-After-Free Vulnerability | 2023-03-30 | — | HIGH7.9 |
| CVE-2021-3493 | Kernel | Linux Kernel Privilege Escalation Vulnerability | 2022-10-20 | — | HIGH8.8 |
| CVE-2013-6282 | Kernel | Linux Kernel Improper Input Validation Vulnerability | 2022-09-15 | — | HIGH8.8 |
| CVE-2013-2596 | Kernel | Linux Kernel Integer Overflow Vulnerability | 2022-09-15 | — | HIGH7.8 |
| CVE-2013-2094 | Kernel | Linux Kernel Privilege Escalation Vulnerability | 2022-09-15 | — | HIGH8.4 |
| CVE-2014-3153 | Kernel | Linux Kernel Privilege Escalation Vulnerability | 2022-05-25 | — | HIGH7.8 |
| CVE-2022-0847 | Kernel | Linux Kernel Privilege Escalation Vulnerability | 2022-04-25 | — | HIGH7.8 |
| CVE-2021-22600 | Kernel | Linux Kernel Privilege Escalation Vulnerability | 2022-04-11 | — | MEDIUM6.6 |
| CVE-2016-5195 | Kernel | Linux Kernel Race Condition Vulnerability | 2022-03-03 | — | HIGH7.0 |
| CVE-2019-13272 | Kernel | Linux Kernel Improper Privilege Management Vulnerability | 2021-12-10 | — | HIGH7.8 |
Source: CISA Known Exploited Vulnerabilities catalog, joined with NIST NVD CVSS data. Vendor names are normalized across spellings. Compare all vendors.