Linux Kernel CVE Statistics

208 Linux Kernel CVEs in October 2026

Month to date · Updated daily from NIST NVD

September 2026

In October 2026, 208 Linux kernel CVEs have been published so far – this page updates daily as new CVEs are added to the NIST National Vulnerability Database. Of these, 2 are rated Critical and 50 are rated High severity . The month is currently on pace for approximately 921 CVEs by month end.

208
Total CVEs
2
Critical
50
High
0
Medium
0
Low
0
KEV Exploited
All CVEs — October 2026 208 CVEs
All (208) Critical (2) High (50) Medium (0) Low (0)
CVE ID Package Severity CVSS Published Description
CVE-2026-98312 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix OOB write from device-reported iso…
CVE-2026-98358 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: IB/iser: reject a remote invalidation of an unregis…
CVE-2026-98310 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrin…
CVE-2026-98309 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Use managed KMS polling to fix UAF on unbi…
CVE-2026-98304 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open…
CVE-2026-98328 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan…
CVE-2026-98329 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider …
CVE-2026-98307 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cleanup arsta in ath11k_mac_peer_clea…
CVE-2026-98313 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH_IDLE when the link was never …
CVE-2026-98332 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the T…
CVE-2026-98333 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the LED state when ifup fails…
CVE-2026-98303 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: reject RTN_UNREACHABLE input routes in …
CVE-2026-98301 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu T…
CVE-2026-98308 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a st…
CVE-2026-98314 linux Awaiting NVD — 2026-10-06 In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer->private_data before registeri…

Frequently Asked Questions

How many Linux kernel CVEs were published in October 2026?

208 Linux kernel CVEs were published in October 2026, sourced from the NIST National Vulnerability Database. Of these, 2 were rated Critical severity, 50 High, and 0 Medium. 156 CVEs are still awaiting NVD severity scoring.

How does October 2026 compare to other months?

October 2026's 208 CVEs represent 3% of all 2026 Linux kernel CVEs. Compared to September's 2,118 CVEs, this was a 90% decrease month-over-month. View the full 2026 breakdown →

September 2026 2026 statistics