ZeusQA
Start free

Known exploited vulnerabilities

Linux vulnerabilities attackers have used

Every Linux vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 32 Linux vulnerabilities as exploited in the wild, 9 of them added in the last 12 months and 2 used in ransomware campaigns. The most recent is CVE-2026-46300, added Oct 28, 2026. Kernel has the most entries (32).

In KEV, all time
32
Added, last 12 months
9
Used in ransomware
2
New CVEs this week
0

Every Linux entry in CISA KEV

  1. CVE-2026-46300

    Added · due

    Linux Kernel Missing Initialization of a Variable Vulnerability

    Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing…

  2. CVE-2026-53266

    Added · due

    Linux Kernel Out-of-Bounds Write Vulnerability

    Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The…

  3. CVE-2025-39964

    Added · due

    Linux Kernel Race Condition Vulnerability

    Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.

  4. CVE-2025-39682

    Added · due

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling…

  5. CVE-2026-53362

    Added · due

    Linux Kernel Unspecified Vulnerability

    Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using…

  6. CVE-2022-0995

    Added · due

    Linux Kernel Out-of-Bounds Write Vulnerability

    Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.

  7. CVE-2022-0492

    Added · due

    Linux Kernel Improper Authentication Vulnerability

    Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

  8. CVE-2026-31431

    Added · due

    Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

    Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

  9. CVE-2018-14634

    Added · due

    Linux Kernel Integer Overflow Vulnerability

    Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.

  10. CVE-2021-22555

    Added · due

    Linux Kernel Heap Out-of-Bounds Write Vulnerability

    Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

  11. CVE-2025-38352

    Added · due

    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

    Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.

  12. CVE-2023-0386

    Added · due

    Linux Kernel Improper Ownership Management Vulnerability

    Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file…

  13. CVE-2024-53197

    Added · due

    Linux Kernel Out-of-Bounds Access Vulnerability

    Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or…

  14. CVE-2024-53150

    Added · due

    Linux Kernel Out-of-Bounds Read Vulnerability

    Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.

  15. CVE-2024-50302

    Added · due

    Linux Kernel Use of Uninitialized Resource Vulnerability

    The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.

  16. CVE-2024-53104

    Added · due

    Linux Kernel Out-of-Bounds Write Vulnerability

    Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.

  17. CVE-2017-1000253

    RansomwareAdded · due

    Linux Kernel PIE Stack Buffer Corruption Vulnerability

    Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges.

  18. CVE-2022-0185

    Added · due

    Linux Kernel Heap-Based Buffer Overflow Vulnerability

    Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and…

  19. CVE-2022-2586

    Added · due

    Linux Kernel Use-After-Free Vulnerability

    Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

  20. CVE-2024-1086

    RansomwareAdded · due

    Linux Kernel Use-After-Free Vulnerability

    Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

  21. CVE-2014-0196

    Added · due

    Linux Kernel Race Condition Vulnerability

    Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.

  22. CVE-2010-3904

    Added · due

    Linux Kernel Improper Input Validation Vulnerability

    Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

  23. CVE-2023-0266

    Added · due

    Linux Kernel Use-After-Free Vulnerability

    Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.

  24. CVE-2021-3493

    Added · due

    Linux Kernel Privilege Escalation Vulnerability

    The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.

  25. CVE-2013-6282

    Added · due

    Linux Kernel Improper Input Validation Vulnerability

    The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.

  26. CVE-2013-2596

    Added · due

    Linux Kernel Integer Overflow Vulnerability

    Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.

  27. CVE-2013-2094

    Added · due

    Linux Kernel Privilege Escalation Vulnerability

    Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.

  28. CVE-2014-3153

    Added · due

    Linux Kernel Privilege Escalation Vulnerability

    The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.

  29. CVE-2022-0847

    Added · due

    Linux Kernel Privilege Escalation Vulnerability

    Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."

  30. CVE-2021-22600

    Added · due

    Linux Kernel Privilege Escalation Vulnerability

    Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.

  31. CVE-2016-5195

    Added · due

    Linux Kernel Race Condition Vulnerability

    Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.

  32. CVE-2019-13272

    Added · due

    Linux Kernel Improper Privilege Management Vulnerability

    Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works