Cyberfeed6 › Vendors › Linux
CISA lists 32 Linux vulnerabilities as exploited in real attacks, and 2 of them are known to be used in ransomware campaigns. Most entries concern Kernel.
Showing the 32 most recently added of 32. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-46300Linux Kernel Missing Initialization of a Variable Vulnerability | Kernel | 2026-10-28 | High (7.8) | No | Vendor notice |
| CVE-2026-53266Linux Kernel Out-of-Bounds Write Vulnerability | Kernel | 2026-09-18 | High (8.8) | No | Vendor notice |
| CVE-2025-39964Linux Kernel Race Condition Vulnerability | Kernel | 2026-09-18 | High (7.8) | No | Vendor notice |
| CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | Kernel | 2026-09-18 | Critical (9.8) | No | Vendor notice |
| CVE-2026-53362Linux Kernel Unspecified Vulnerability | Kernel | 2026-08-27 | High (7.8) | No | Vendor notice |
| CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability | Kernel | 2026-08-26 | High (7.8) | No | Vendor notice |
| CVE-2022-0492Linux Kernel Improper Authentication Vulnerability | Kernel | 2026-06-02 | High (7.8) | No | Vendor notice |
| CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | Kernel | 2026-05-01 | High (7.8) | No | Vendor notice |
| CVE-2018-14634Linux Kernel Integer Overflow Vulnerability | Kernel | 2026-01-26 | High (7.8) | No | Vendor notice |
| CVE-2021-22555Linux Kernel Heap Out-of-Bounds Write Vulnerability | Kernel | 2025-10-06 | High (8.3) | No | Vendor notice |
| CVE-2025-38352Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | Kernel | 2025-09-04 | High (7.8) | No | Vendor notice |
| CVE-2023-0386Linux Kernel Improper Ownership Management Vulnerability | Kernel | 2025-06-17 | High (7.8) | No | Vendor notice |
| CVE-2024-53197Linux Kernel Out-of-Bounds Access Vulnerability | Kernel | 2025-04-09 | High (7.8) | No | Vendor notice |
| CVE-2024-53150Linux Kernel Out-of-Bounds Read Vulnerability | Kernel | 2025-04-09 | High (7.1) | No | Vendor notice |
| CVE-2024-50302Linux Kernel Use of Uninitialized Resource Vulnerability | Kernel | 2025-03-04 | Medium (5.5) | No | Vendor notice |
| CVE-2024-53104Linux Kernel Out-of-Bounds Write Vulnerability | Kernel | 2025-02-05 | High (7.8) | No | Vendor notice |
| CVE-2017-1000253Linux Kernel PIE Stack Buffer Corruption Vulnerability | Kernel | 2024-09-09 | High (7.8) | Yes | Vendor notice |
| CVE-2022-0185Linux Kernel Heap-Based Buffer Overflow Vulnerability | Kernel | 2024-08-21 | High (8.4) | No | Vendor notice |
| CVE-2022-2586Linux Kernel Use-After-Free Vulnerability | Kernel | 2024-06-26 | Medium (5.3) | No | Vendor notice |
| CVE-2024-1086Linux Kernel Use-After-Free Vulnerability | Kernel | 2024-05-30 | High (7.8) | Yes | Vendor notice |
| CVE-2014-0196Linux Kernel Race Condition Vulnerability | Kernel | 2023-05-12 | Medium (5.5) | No | Vendor notice |
| CVE-2010-3904Linux Kernel Improper Input Validation Vulnerability | Kernel | 2023-05-12 | High (7.8) | No | Vendor notice |
| CVE-2023-0266Linux Kernel Use-After-Free Vulnerability | Kernel | 2023-03-30 | High (7.9) | No | Vendor notice |
| CVE-2021-3493Linux Kernel Privilege Escalation Vulnerability | Kernel | 2022-10-20 | High (8.8) | No | Vendor notice |
| CVE-2013-6282Linux Kernel Improper Input Validation Vulnerability | Kernel | 2022-09-15 | High (8.8) | No | Vendor notice |
| CVE-2013-2596Linux Kernel Integer Overflow Vulnerability | Kernel | 2022-09-15 | High (7.8) | No | Vendor notice |
| CVE-2013-2094Linux Kernel Privilege Escalation Vulnerability | Kernel | 2022-09-15 | High (8.4) | No | Vendor notice |
| CVE-2014-3153Linux Kernel Privilege Escalation Vulnerability | Kernel | 2022-05-25 | High (7.8) | No | |
| CVE-2022-0847Linux Kernel Privilege Escalation Vulnerability | Kernel | 2022-04-25 | High (7.8) | No | |
| CVE-2021-22600Linux Kernel Privilege Escalation Vulnerability | Kernel | 2022-04-11 | Medium (6.6) | No | |
| CVE-2016-5195Linux Kernel Race Condition Vulnerability | Kernel | 2022-03-03 | High (7.0) | No | |
| CVE-2019-13272Linux Kernel Improper Privilege Management Vulnerability | Kernel | 2021-12-10 | High (7.8) | No |
OT November 1, 2026
IT October 29, 2026
IT October 26, 2026
OT October 26, 2026
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.