Linux Kernel CVE Statistics
838 Linux Kernel CVEs in July 2026
Full month · Source: NIST NVD
In July 2026, 838 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 88 were rated Critical, 378 were rated High severity and 120 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. July's 838 CVEs represent 22% of all 2026 Linux kernel CVEs , up from June's 514 (a 63% month-over-month increase) .
838
Total CVEs
88
Critical
378
High
120
Medium
0
Low
0
KEV Exploited
All CVEs — July 2026
838 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2022-4994 | linux | Awaiting NVD | — | 2026-07-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulator_pio_in Use __e… | |
| CVE-2026-64538 | linux | Awaiting NVD | — | 2026-07-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). f… | |
| CVE-2026-64544 | linux | Awaiting NVD | — | 2026-07-27 | In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fix OOB read in pefile_di… | |
| CVE-2026-64537 | linux | Awaiting NVD | — | 2026-07-27 | In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: reject invalid CCM interval at configu… | |
| CVE-2026-64553 | linux | Awaiting NVD | — | 2026-07-27 | In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA ps… | |
| CVE-2026-64549 | linux | Awaiting NVD | — | 2026-07-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bpa10x: avoid OOB read of revision strin… | |
| CVE-2026-64542 | linux | Awaiting NVD | — | 2026-07-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_na(… | |
| CVE-2026-64461 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails … | |
| CVE-2026-64503 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on writ… | |
| CVE-2026-64521 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Acce… | |
| CVE-2026-64344 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect race… | |
| CVE-2026-64493 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read … | |
| CVE-2026-64500 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initialize completion before req… | |
| CVE-2026-64518 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao_es… | |
| CVE-2026-64457 | linux | Awaiting NVD | — | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong in… |