Linux Kernel CVE Statistics
2,118 Linux Kernel CVEs in September 2026
Full month · Source: NIST NVD
In September 2026, 2,118 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 111 were rated Critical, 639 were rated High severity and 28 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. September's 2,118 CVEs represent 28% of all 2026 Linux kernel CVEs , up from August's 1,651 (a 28% month-over-month increase) .
2118
Total CVEs
111
Critical
639
High
28
Medium
0
Low
0
KEV Exploited
All CVEs — September 2026
2118 CVEs
| CVE ID | Package | Severity | CVSS | Published | Description | |
|---|---|---|---|---|---|---|
| CVE-2026-97920 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram st… | |
| CVE-2026-97572 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate RX ring init failures in bnxt_in… | |
| CVE-2026-98105 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: Improve the error recovery W… | |
| CVE-2026-97986 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: virtio_input: stop callbacks before unregistering i… | |
| CVE-2026-98110 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length… | |
| CVE-2026-97927 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder … | |
| CVE-2026-98097 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE … | |
| CVE-2026-98025 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310_eth: drop URB after 0xffff reboot… | |
| CVE-2026-97615 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use option bits for CFM/MRP frame hand… | |
| CVE-2026-97964 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ppp_synctty: ensure a writeable skb header ppp_sync… | |
| CVE-2026-97958 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Don't replay RTM_GETCHAIN in tc… | |
| CVE-2026-97532 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00_m… | |
| CVE-2026-98117 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Current… | |
| CVE-2026-97900 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: drm/drm_exec: fix up contended obj when num_objects… | |
| CVE-2026-97987 | linux | Awaiting NVD | — | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device if input_register_device… |