CVE Tools
Track your stack

Linux

20,393 CVEs tracked since 1999. Since Oct 2021, 16 of them reached CISA KEV.

Linux CVEs per month

Oct 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Linux CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-1070
2021-1160
2021-1281
2022-01141
2022-02261
2022-03432
2022-04150
2022-05180
2022-06100
2022-07210
2022-08450
2022-09360
2022-10460
2022-11170
2022-12270
2023-01211
2023-02180
2023-03no snapshot
2023-04430
2023-05190
2023-06341
2023-07390
2023-08160
2023-09320
2023-10200
2023-11140
2023-12140
2024-01422
2024-022990
2024-032350
2024-043580
2024-0510740
2024-062851
2024-074400
2024-083020
2024-092770
2024-104150
2024-112791
2024-123543
2025-012230
2025-029100
2025-032070
2025-042800
2025-055500
2025-063750
2025-074011
2025-081860
2025-097370
2025-106510
2025-111040
2025-1210550
2026-012460
2026-022200
2026-031780
2026-043791
2026-0510280
2026-065140
2026-078370
2026-0816450
2026-0921150
2026-102200

Products

The products that kept showing up in Linux's monthly top three, with their CVEs summed over those months.

  1. Linux17,37238 months
  2. Linux Kernel11,09658 months
  3. Kernel6913 months
  4. Layer 2 Tunneling Protocol11 month
  5. Linux Kernal11 month
  6. Linux_kernel11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Linux.

  1. CVE-2026-98431RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency—
  2. CVE-2026-98430RDMA/efa: Keep admin queues alive while IRQ is registered—
  3. CVE-2026-98429RDMA/efa: Keep EQ resources alive while IRQ is registered—
  4. CVE-2026-98428ALSA: usb: 6fire: Avoid embedded URBs—
  5. CVE-2026-98427net/sched: codel: bound the dropping loop per dequeue call—
  6. CVE-2026-98426wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path—
  7. CVE-2026-98425wifi: mac80211: don't warn when an IBSS has no channel to scan—
  8. CVE-2026-98423wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping—
  9. CVE-2026-98424wifi: cfg80211: undo netns switch if renaming the wiphy fails—
  10. CVE-2026-98422wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown—
  11. CVE-2026-98421wifi: mac80211: require a peer station for TDLS setup confirm—
  12. CVE-2026-98419drop_monitor: fix out-of-bounds write in reset_per_cpu_data()—
  13. CVE-2026-98420ksmbd: follow SMB2 session expiration semantics—
  14. CVE-2026-98418sched/core: Avoid false migration warning for proxy donors—
  15. CVE-2026-98417net: xfrm: reject unrepresentable espintcp transport headers—

The record

Peak rank
#1 in Sep 2026
Busiest month shown
Sep 2026, 2,115 CVEs
Months with a KEV entry
12 since Oct 2021
Monthly snapshots
264 since 1999
Linux's full record, month by month