Linux Kernel known exploited vulnerabilities
We track 32 CVEs in Linux Kernel. 31 of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2021–2026). CISA flags 2 of them as used in ransomware campaigns. The most recent is CVE-2026-53266, added to KEV on .
Also listed as: Kernel (traffic-control subsystem). CISA, NVD and vendor advisories name the same product differently; each CVE page keeps the wording from its source.
- CVEs tracked
- 32
- On CISA KEV
- 31
- Ransomware use
- 2
- Rated critical
- 1
Every Linux Kernel CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerabilitywrite-up | [ HIGH ] | 8.8 | 0.8% | ||
| CVE-2025-39964 Linux Kernel Race Condition Vulnerabilitywrite-up | [ HIGH ] | 7.8 | 1.4% | ||
| CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerabilitywrite-up | [ CRITICAL ] | 9.8 | 2.9% | ||
| CVE-2026-53362 Linux Kernel Unspecified Vulnerability | [ HIGH ] | 7.8 | 0.7% | ||
| CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability | [ HIGH ] | 7.8 | 8.9% | ||
| CVE-2026-53264 Linux kernel traffic-control subsystem use-after-free racewrite-up | [ HIGH ] | 7.8 | 0.2% | — | — |
| CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability | [ HIGH ] | 7.8 | 5.5% | ||
| CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | [ HIGH ] | 7.8 | 3.4% | ||
| CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability | [ HIGH ] | 7.8 | 14.7% | ||
| CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Vulnerability | [ HIGH ] | 8.3 | 78.7% | ||
| CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | [ HIGH ] | 7.8 | 1.3% | ||
| CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability | [ HIGH ] | 7.8 | 7.9% | ||
| CVE-2024-53197 Linux Kernel Out-of-Bounds Access Vulnerability | [ HIGH ] | 7.8 | 4.1% | ||
| CVE-2024-53150 Linux Kernel Out-of-Bounds Read Vulnerability | [ HIGH ] | 7.1 | 1.4% | ||
| CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability | [ MEDIUM ] | 5.5 | 0.8% | ||
| CVE-2024-53104 Linux Kernel Out-of-Bounds Write Vulnerability | [ HIGH ] | 7.8 | 3.4% | ||
| CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability ransomware use | [ HIGH ] | 7.8 | 10.7% | ||
| CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability | [ HIGH ] | 8.4 | 25.2% | ||
| CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability | [ MEDIUM ] | 5.3 | 10.2% | ||
| CVE-2024-1086 Linux Kernel Use-After-Free Vulnerabilityransomware use | [ HIGH ] | 7.8 | 28.1% | ||
| CVE-2014-0196 Linux Kernel Race Condition Vulnerability | [ MEDIUM ] | 5.5 | 20.3% | ||
| CVE-2010-3904 Linux Kernel Improper Input Validation Vulnerability | [ HIGH ] | 7.8 | 15.9% | ||
| CVE-2023-0266 Linux Kernel Use-After-Free Vulnerability | [ HIGH ] | 7.9 | 3.7% | ||
| CVE-2021-3493 Linux Kernel Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 49.2% | ||
| CVE-2013-6282 Linux Kernel Improper Input Validation Vulnerability | [ HIGH ] | 8.8 | 39.7% | ||
| CVE-2013-2596 Linux Kernel Integer Overflow Vulnerability | [ HIGH ] | 7.8 | 3.2% | ||
| CVE-2013-2094 Linux Kernel Privilege Escalation Vulnerability | [ HIGH ] | 8.4 | 47.7% | ||
| CVE-2014-3153 Linux Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 37.2% | ||
| CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 92.8% | ||
| CVE-2021-22600 Linux Kernel Privilege Escalation Vulnerability | [ MEDIUM ] | 6.6 | 6.6% | ||
| CVE-2016-5195 Linux Kernel Race Condition Vulnerability | [ HIGH ] | 7.0 | 83.5% | ||
| CVE-2019-13272 Linux Kernel Improper Privilege Management Vulnerability | [ HIGH ] | 7.8 | 52.2% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/linux.json.
Our Linux Kernel coverage
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.