Linux
Number 1 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
18,399
Critical
864
High
6,004
Known Exploited
22
Exploit available
21
Network, no login needed
19.5%
Of 8,219 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 8,263 | 549 | 2,701 | 3 | 0 | 5,010 |
| 2025 | 5,675 | 159 | 1,745 | 815 | 1 | 2,955 |
| 2024 | 4,309 | 154 | 1,493 | 450 | 19 | 2,193 |
| 2023 | 48 | 1 | 39 | 7 | 1 | 0 |
| 2022 | 66 | 1 | 8 | 29 | 15 | 13 |
| 2021 | 9 | 0 | 5 | 0 | 0 | 4 |
| 2020 | 2 | 0 | 0 | 2 | 0 | 0 |
| 2019 | 11 | 0 | 4 | 4 | 0 | 3 |
| 2018 | 9 | 0 | 3 | 4 | 0 | 2 |
| 2017 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2016 | 1 | 0 | 1 | 0 | 0 | 0 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2014 | 2 | 0 | 1 | 1 | 0 | 0 |
| 2013 | 3 | 0 | 3 | 0 | 0 | 0 |
| 2012 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2011 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2010 | 1 | 0 | 1 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Linux | 18,247 | 6,797 |
| Kernel | 76 | 39 |
| Linux Kernel | 25 | 17 |
| kernel | 25 | 7 |
| Linux kernel | 18 | 4 |
| linux_kernel | 3 | 1 |
| Linux Kernal | 1 | 0 |
| buildroot | 1 | 1 |
| kernel: | 1 | 1 |
| ofono | 1 | 1 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 1,758 | 1,246 |
| Missing Release of Memory after Effective Lifetime | 284 | 36 |
| Race Condition | 272 | 180 |
| Improper Locking | 102 | 29 |
| Improper Input Validation | 70 | 63 |
| Use of Uninitialized Resource | 53 | 21 |
| Denial of Service | 44 | 32 |
| Improper Validation of Array Index | 33 | 31 |
| Missing Authorization | 19 | 19 |
| Allocation of Resources Without Limits or Throttling | 18 | 6 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | High | 0.7% | |
| CVE-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | High | 0.9% | |
| CVE-2026-46300 | net: skbuff: preserve shared-frag marker during coalescing | High | 16.1% | |
| CVE-2026-31431 | crypto: algif_aead - Revert to operating out-of-place | High | 98.1% | |
| CVE-2025-39964 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | High | 1.6% | |
| CVE-2025-39682 | tls: fix handling of zero-length records on the rx_list | Critical | 3.3% | |
| CVE-2025-38352 | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | High | 1.4% | |
| CVE-2024-53197 | ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices | High | 4.1% | |
| CVE-2024-53150 | ALSA: usb-audio: Fix out of bounds reads when finding clock sources | High | 1.4% | |
| CVE-2024-53104 | media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format | High | 3.4% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-99288 | inet: reject unhashed sockets during established lookups | None | n/a | |
| CVE-2026-99287 | xen-netback: Zero out sring pointers on unmap | None | n/a | |
| CVE-2026-99286 | xen-netback: Fix XenBus connection failure cleanup | None | n/a | |
| CVE-2026-99285 | netfilter: nft_byteorder: remove multi-register support | None | n/a | |
| CVE-2026-99284 | net: skbuff: propagate shared-frag marker in skb_zerocopy() | None | 0.2% | |
| CVE-2026-99283 | netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets | None | 0.2% | |
| CVE-2026-99282 | net/sched: sch_teql: fix use-after-free on lower qdisc drop | None | 0.2% | |
| CVE-2026-99281 | tun: Require CAP_NET_ADMIN to attach to an ownerless device | High | 0.2% | |
| CVE-2026-99280 | ksmbd: drain session procfs readers before dropping table references | None | 0.1% | |
| CVE-2026-99279 | ksmbd: reclaim ended sessions on logoff and expiration | None | 0.1% |