Linux Kernel CVE Tracker

21,090 vulnerabilities indexed - updated daily from NIST NVD

LinuxCVETracker is a free, searchable database of 21,090 Linux kernel CVEs, sourced daily from the NIST National Vulnerability Database and the CISA Known Exploited Vulnerabilities catalog. Of these, 659 are rated Critical severity and 31 have been confirmed as actively exploited. Use it to search, filter, and monitor Linux kernel security vulnerabilities by severity, year, affected package, or exploitation status.

CVE Statistics

21,090
Total CVEs
659
Critical
6,615
High
31
KEV - Actively Exploited

Linux Kernel CVE Database

All time 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999 1998
21,090 vulnerabilities
Page 1 of 1055
CVE ID Package Severity CVSS Published Description
CVE-2026-99087 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the…
CVE-2026-99086 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dm_…
CVE-2026-99085 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dying CPU's …
CVE-2026-99084 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable directo…
CVE-2026-99083 linux High 8.8 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in krb5_authent…
CVE-2026-99082 linux High 8.8 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO…
CVE-2026-99081 linux High 7.5 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small pa…
CVE-2026-99080 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode() F…
CVE-2026-99079 linux Critical 9.8 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on refi…
CVE-2026-99078 linux Critical 9.8 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQ…
CVE-2026-99077 linux High 7.4 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching…
CVE-2026-99076 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching…
CVE-2026-99075 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: rust_binder: reschedule node refcount update on thr…
CVE-2026-99074 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks Com…
CVE-2026-99073 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrink…
CVE-2026-99072 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop g…
CVE-2026-99071 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ipv4: do not warn on route notification size race C…
CVE-2026-99070 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ipv6: do not warn on route notification size race f…
CVE-2026-99069 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: Input: ati_remote2 - fix type confusion in device a…
CVE-2026-99068 linux Awaiting NVD — 2026-10-23 In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO i…

Frequently Asked Questions

How many Linux kernel CVEs have been published in total?

As of today, 21,090 Linux kernel CVEs have been published and indexed in this database. The Linux kernel is one of the most widely tracked packages in the NIST National Vulnerability Database due to its use in servers, cloud infrastructure, Android devices, and embedded systems. View full statistics →

How many Linux kernel CVEs are actively exploited?

31 Linux kernel CVEs are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning they have been confirmed as actively exploited in the wild. These are the highest-priority vulnerabilities for patching. View all actively exploited CVEs →

How often is this database updated?

The database is updated daily from the NIST NVD API. New CVEs are typically added within 24–48 hours of NVD publication. CISA KEV status is also checked daily. Affected version data is sourced from the CVE.org API and refreshed regularly.

What is a CVSS score?

CVSS (Common Vulnerability Scoring System) is a standardised 0–10 score assigned to each CVE, measuring its technical severity. Scores 9.0–10.0 are Critical, 7.0–8.9 are High, 4.0–6.9 are Medium, and 0.1–3.9 are Low. CVSS scores are assigned by NIST analysts and updated as new information emerges.

What is the CISA KEV catalog?

The CISA Known Exploited Vulnerabilities (KEV) catalog is maintained by the US Cybersecurity and Infrastructure Security Agency. It lists CVEs confirmed as actively exploited in real-world attacks. US federal agencies are required to patch KEV-listed vulnerabilities within a defined deadline. The catalog is a high-signal filter for security teams prioritising patching efforts.