3,101 Linux Kernel CVEs in 2026 (Year to Date)
Year to date · Updated daily from NIST NVD
In 2026, 3,101 Linux kernel CVEs have been published so far, sourced daily from the NIST National Vulnerability Database. Of these, 170 are rated Critical and 1,158 High severity , with 1 confirmed as actively exploited via the CISA KEV catalog . At the current pace, 2026 is on track to fall below 2025's 5,681 CVEs — with an estimated 5,494 CVEs projected for the full year. A further 353 CVEs are still awaiting NVD severity scoring. This page updates daily as new CVEs are published.
Monthly CVE Breakdown — 2026
CVEs published per month with severity breakdown
May (1,034) was the most active month in 2026. Together the top months account for a significant share of 2026's 3,101 total CVEs. March (178) had the lowest volume.
Severity Distribution — 2026
Breakdown across 3,101 CVEs
46% Medium · 37% High · 5% Critical. 353 CVEs (11%) still awaiting NVD scoring.
Monthly Counts — 2026
CVE counts by month and severity
May was the most active month with 1,034 CVEs — 33% of 2026's total. March (178) had the lowest volume.
| Month | Total | Critical | High | Medium | Low | Share of year |
|---|---|---|---|---|---|---|
| January | 246 | 0 | 41 | 115 | 2 |
8%
|
| February | 220 | 1 | 44 | 139 | 0 |
7%
|
| March | 178 | 1 | 61 | 116 | 0 |
6%
|
| April | 379 | 27 | 159 | 193 | 0 |
12%
|
| May | 1,034 | 42 | 398 | 592 | 1 |
33%
|
| June | 514 | 40 | 238 | 236 | 0 |
17%
|
| July | 530 | 59 | 217 | 26 | 0 |
17%
|
| Total | 3,101 | 170 | 1,158 | 1,417 | 3 |
Actively exploited CVEs — 2026
1 CVE confirmed in CISA KEV catalog
All CVEs — 2026
3101 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2026-64228 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver… | |
| CVE-2026-64241 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Ad… | |
| CVE-2026-64217 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter… | |
| CVE-2026-64223 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTL… | |
| CVE-2026-64235 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in d… | |
| CVE-2026-64229 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is di… | |
| CVE-2026-64209 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access… | |
| CVE-2026-64214 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enab… | |
| CVE-2026-64220 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in f… | |
| CVE-2026-64247 | linux | Awaiting NVD | — | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when queryi… |
2026 Linux Kernel CVE Highlights
-
Large backlog awaiting NVD scoring
353 of 2026's CVEs (11%) are still listed as "Awaiting NVD" — meaning no CVSS score has been assigned yet. This is typical for bulk-published CVEs from the Linux kernel CNA: the kernel team publishes CVEs rapidly, and NVD scoring lags by weeks or months.
-
Monthly variation
CVE publication in 2026 was uneven across months. May was the most active with 1,034 CVEs. March (178) had the lowest volume. Monthly spikes typically correspond to coordinated batches of backfilled CVEs being processed at once.