Vendor
Linux: actively exploited vulnerabilities
31 vulnerabilities in Linux products are listed in CISA’s catalog of actively exploited vulnerabilities, 2 of them used by ransomware. Latest addition on September 18, 2026: CVE-2026-53266 (Kernel).
- 31 exploited vulnerabilities in the catalog
- 8 added in the last 12 months
- 2 used by ransomware
- 1 product affected
Affected products
- Kernel31
CERT-FR alerts and notices
Recent CERT-FR publications naming this vendor (alerts: immediate threat; notices: patches released). In French.
-
CERTFR-2026-AVI-1289Multiples vulnérabilités dans le noyau Linux de Debian LTS (09 octobre 2026)
-
CERTFR-2026-AVI-1288Multiples vulnérabilités dans le noyau Linux de SUSE (09 octobre 2026)
-
CERTFR-2026-AVI-1287Multiples vulnérabilités dans le noyau Linux de Red Hat (09 octobre 2026)
-
CERTFR-2026-AVI-1286Multiples vulnérabilités dans le noyau Linux d'Ubuntu (09 octobre 2026)
-
CERTFR-2026-AVI-1253Multiples vulnérabilités dans le noyau Linux de Debian (02 octobre 2026)
-
CERTFR-2026-AVI-1252Multiples vulnérabilités dans le noyau Linux d'Ubuntu (02 octobre 2026)
-
CERTFR-2026-AVI-1254Multiples vulnérabilités dans le noyau Linux de Red Hat (02 octobre 2026)
-
CERTFR-2026-AVI-1255Multiples vulnérabilités dans le noyau Linux de SUSE (02 octobre 2026)
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2026 8 vulnerabilities
-
CVE-2026-53266Linux Kernel Out-of-Bounds Write Vulnerability
-
CVE-2025-39964Linux Kernel Race Condition Vulnerability
-
CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
-
CVE-2026-53362Linux Kernel Unspecified Vulnerability
-
CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability
-
CVE-2022-0492Linux Kernel Improper Authentication Vulnerability
-
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
-
CVE-2018-14634Linux Kernel Integer Overflow Vulnerability
2025 7 vulnerabilities
-
CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write Vulnerability
-
CVE-2025-38352Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
-
CVE-2023-0386Linux Kernel Improper Ownership Management Vulnerability
-
CVE-2024-53197Linux Kernel Out-of-Bounds Access Vulnerability
-
CVE-2024-53150Linux Kernel Out-of-Bounds Read Vulnerability
-
CVE-2024-50302Linux Kernel Use of Uninitialized Resource Vulnerability
-
CVE-2024-53104Linux Kernel Out-of-Bounds Write Vulnerability
2024 4 vulnerabilities
-
CVE-2017-1000253Used by ransomwareLinux Kernel PIE Stack Buffer Corruption Vulnerability
-
CVE-2022-0185Linux Kernel Heap-Based Buffer Overflow Vulnerability
-
CVE-2022-2586Linux Kernel Use-After-Free Vulnerability
-
CVE-2024-1086Used by ransomwareLinux Kernel Use-After-Free Vulnerability
2023 3 vulnerabilities
-
CVE-2014-0196Linux Kernel Race Condition Vulnerability
-
CVE-2010-3904Linux Kernel Improper Input Validation Vulnerability
-
CVE-2023-0266Linux Kernel Use-After-Free Vulnerability
2022 8 vulnerabilities
-
CVE-2021-3493Linux Kernel Privilege Escalation Vulnerability
-
CVE-2013-6282Linux Kernel Improper Input Validation Vulnerability
-
CVE-2013-2596Linux Kernel Integer Overflow Vulnerability
-
CVE-2013-2094Linux Kernel Privilege Escalation Vulnerability
-
CVE-2014-3153Linux Kernel Privilege Escalation Vulnerability
-
CVE-2022-0847Linux Kernel Privilege Escalation Vulnerability
-
CVE-2021-22600Linux Kernel Privilege Escalation Vulnerability
-
CVE-2016-5195Linux Kernel Race Condition Vulnerability
2021 1 vulnerability
-
CVE-2019-13272Linux Kernel Improper Privilege Management Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.