In 2024, 4,353 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 26 were rated Critical, 1,219 High severity , and 6 were confirmed as actively exploited in the wild (CISA KEV) . Compared to 2023's 264 CVEs, 2024 represented an increase of 1549% year-on-year. May was the most active month, with 1,074 CVEs published.
Monthly CVE Breakdown — 2024
CVEs published per month with severity breakdown
May (1,074) was the most active month in 2024. Together the top months account for a significant share of 2024's 4,353 total CVEs. January (36) had the lowest volume.
Severity Distribution — 2024
Breakdown across 4,353 CVEs
71% Medium · 28% High · 1% Critical.
Monthly Counts — 2024
CVE counts by month and severity
May was the most active month with 1,074 CVEs — 25% of 2024's total. January (36) had the lowest volume.
| Month | Total | Critical | High | Medium | Low | Share of year |
|---|---|---|---|---|---|---|
| January | 36 | 0 | 20 | 16 | 0 |
1%
|
| February | 277 | 0 | 86 | 188 | 3 |
6%
|
| March | 258 | 1 | 80 | 174 | 3 |
6%
|
| April | 357 | 2 | 87 | 264 | 4 |
8%
|
| May | 1,074 | 18 | 324 | 725 | 7 |
25%
|
| June | 286 | 1 | 99 | 186 | 0 |
7%
|
| July | 440 | 0 | 114 | 322 | 4 |
10%
|
| August | 302 | 1 | 51 | 244 | 6 |
7%
|
| September | 277 | 0 | 71 | 204 | 2 |
6%
|
| October | 415 | 1 | 119 | 292 | 3 |
10%
|
| November | 275 | 1 | 69 | 203 | 2 |
6%
|
| December | 356 | 1 | 99 | 256 | 0 |
8%
|
| Total | 4,353 | 26 | 1,219 | 3,074 | 34 |
Actively exploited CVEs — 2024
6 CVEs confirmed in CISA KEV catalog
All CVEs — 2024
4353 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2024-53177 | linux | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_dir … | |
| CVE-2024-53095 | linux | Critical | 9.8 | 2024-11-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespac… | |
| CVE-2024-42256 | linux | Critical | 9.8 | 2024-08-08 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server re-repick on subrequest retry When… | |
| CVE-2024-39462 | linux | Critical | 9.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: dvp: Assign ->num before accessing ->hws … | |
| CVE-2024-36031 | linux | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiat… | |
| CVE-2021-47548 | linux | Critical | 9.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a poss… | |
| CVE-2021-47232 | linux | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while … | |
| CVE-2021-47378 | linux | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid… | |
| CVE-2023-52755 | linux | Critical | 9.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_… | |
| CVE-2024-35869 | linux | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from par… |
2024 Linux Kernel CVE Highlights
-
Monthly variation
CVE publication in 2024 was uneven across months. May was the most active with 1,074 CVEs. January (36) had the lowest volume. Monthly spikes typically correspond to coordinated batches of backfilled CVEs being processed at once.