LIVE · cybersecurity feed
Live wire
vendor1 exploited in the wild

Linux

300 CVEs published in the last four months and 12 stories. Exploited flaws first.

Critical106
High194
Medium0
Exploited (KEV)1

Patch these first

CVECVSSSeverityProductSummaryPublished
CVE-2026-53266exploited8.8highlinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite w117d ago

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-6379510criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() e93d ago
CVE-2026-641509.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock befor93d ago
CVE-2026-532469.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length i117d ago
CVE-2026-640559.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counte93d ago
CVE-2026-642169.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_aband88d ago
CVE-2026-643039.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX87d ago
CVE-2026-643839.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() r87d ago
CVE-2026-638009.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout93d ago
CVE-2026-435019.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recom152d ago
CVE-2026-459889.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets I146d ago
CVE-2026-461379.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-ra145d ago
CVE-2026-533989.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup93d ago
CVE-2026-643859.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_ioctl() r87d ago
CVE-2026-640479.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: tls: fix off-by-one in sg_chain entry cou93d ago
CVE-2026-463259.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR pag133d ago
CVE-2026-641369.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb93d ago
CVE-2026-533849.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_n93d ago
CVE-2026-530869.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix racing timeout handler The 118d ago
CVE-2026-529869.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_118d ago
CVE-2026-529829.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl81118d ago
CVE-2026-530109.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during 118d ago
CVE-2026-529249.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO hand119d ago
CVE-2026-529149.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length acc119d ago
CVE-2026-530069.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching118d ago
CVE-2026-434939.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG r154d ago
CVE-2026-643999.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTL_DUPLICA87d ago
CVE-2026-462899.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in ex134d ago
CVE-2026-532219.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6117d ago
CVE-2026-530459.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The118d ago
CVE-2026-640469.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain t93d ago
CVE-2026-643559.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: bpf: Reject fragmented frames in devmap Devmap87d ago
CVE-2026-530499.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: gfs2: add some missing log locking Function gf118d ago
CVE-2026-642329.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_88d ago
CVE-2026-641429.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m93d ago
CVE-2026-641259.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setti93d ago
CVE-2026-641139.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast 93d ago
CVE-2026-461359.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and145d ago
CVE-2026-529319.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit send119d ago
CVE-2026-640569.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port T93d ago
CVE-2026-533639.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in ip102d ago
CVE-2026-461959.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before buildi145d ago
CVE-2026-640619.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_re93d ago
CVE-2026-641229.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_repo93d ago
CVE-2026-641609.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i93d ago
CVE-2026-532169.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: mvpp2: limit XDP frame size to the RX buf117d ago
CVE-2026-529559.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in118d ago
CVE-2026-459729.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free146d ago
CVE-2026-533559.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: rds: clear i_sends on setup unwind The RD111d ago
CVE-2026-532479.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Fix use-after-free117d ago
CVE-2026-533099.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions116d ago
CVE-2026-530029.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Rep118d ago
CVE-2026-531759.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the 117d ago
CVE-2026-643879.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix query directory replay double87d ago
CVE-2026-460399.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer overflow in length146d ago
CVE-2026-532159.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: mvpp2: refill RX buffers before XDP or sk117d ago
CVE-2026-530889.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_118d ago
CVE-2026-643849.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay double-f87d ago
CVE-2026-532289.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO 117d ago
CVE-2026-640669.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause 93d ago
CVE-2026-533999.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure 93d ago
CVE-2026-530469.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free from async crypto on118d ago
CVE-2026-531519.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the ACK parser to extract the SACK 117d ago
CVE-2026-532609.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in 117d ago
CVE-2026-529939.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tip118d ago
CVE-2026-461159.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: block: add pgmap check to biovec_phys_mergeabl145d ago
CVE-2026-531769.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than ISER_117d ago
CVE-2026-644109.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware off87d ago
CVE-2026-642689.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the87d ago
CVE-2026-529899.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec118d ago
CVE-2026-641629.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in i93d ago
CVE-2026-644399.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implement87d ago
CVE-2026-458989.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by re146d ago
CVE-2026-643919.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alte87d ago
CVE-2026-530559.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec2 - prevent req used-afte118d ago
CVE-2026-640689.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding93d ago
CVE-2026-640679.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing str93d ago
CVE-2026-641029.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow bef93d ago
CVE-2026-643979.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize QUERY_DIRECTORY requests per 87d ago
CVE-2026-640919.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported v93d ago
CVE-2026-643869.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info() replay double-fr87d ago
CVE-2026-640699.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single re93d ago
CVE-2026-640899.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_le93d ago
CVE-2026-641329.8criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_e93d ago
CVE-2026-531319.4criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before 117d ago
CVE-2026-463169.3criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cac133d ago
CVE-2026-640809.3criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks93d ago
CVE-2026-462669.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop 139d ago
CVE-2026-530439.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregions in dlm_match118d ago
CVE-2026-462449.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff des139d ago
CVE-2026-461859.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlink_145d ago
CVE-2026-644509.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap 87d ago
CVE-2026-461559.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_com145d ago
CVE-2026-532249.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address117d ago
CVE-2026-643929.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-cl87d ago
CVE-2026-643199.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bou87d ago
CVE-2026-642699.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chun87d ago
CVE-2026-642579.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in 87d ago
CVE-2026-461199.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth145d ago
CVE-2026-460439.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payload146d ago
CVE-2026-643939.1criticallinux kernelIn the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SM87d ago

Filter the full tracker by Linux →

Our coverage of Linux

security

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Recent reports indicate the discovery of Linux backdoors actively targeting telecommunications and network appliances within South Korea and Taiwan. These sophisticated backdoors are designed to evade detection by masquerading their malicious traffic as legitimate email services and by impersonating benign system processes. This tactic allows the malware to blend into normal network activity…

malware

ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure

Fortinet's FortiGuard Labs has detailed a new Linux backdoor, dubbed ClingSTUN, which leverages legitimate public Session Traversal Utilities for NAT (STUN) infrastructure to mask its command and control (C2) communications. The malware primarily targets unpatched Internet of Things (IoT) devices, functioning as a back-connect proxy that turns compromised systems into remotely controlled nodes.

iothigh

ClingSTUN Malware Turns IoT Devices Into Proxy Nodes

A recently discovered Linux backdoor, named ClingSTUN, has been observed actively compromising Internet of Things (IoT) devices. The malware reportedly exploits a significant number of known vulnerabilities, specifically 24 distinct flaws, to gain initial access to these devices. Once compromised, ClingSTUN employs a novel technique involving legitimate public STUN servers to obfuscate its…

CVE-2026-53266high

Linux Kernel Out-of-Bounds Write Exploited, Added to EUVD

A Linux kernel vulnerability, CVE-2026-53266, has been confirmed as exploited and added to the EUVD catalogue. This follows its inclusion in the CISA KEV list.

CVE-2026-64507high

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

A new variant of the Spectre-v2 CPU vulnerability, termed Branch Target Reuse (BTR), has been reported by researchers. This attack reportedly enables the leakage of sensitive memory from Linux systems, even those equipped with existing Spectre-v2 mitigations. The vulnerability is said to specifically target Just-In-Time (JIT) engines, which are commonly found in web browsers, various runtimes,…

vulnerabilitycritical

CISA alerts of active exploitation of three Linux kernel flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of three distinct vulnerabilities within the Linux kernel, one of which is rated critical. These security issues were added to CISA's catalog last week, with severity ratings ranging from medium to critical. Federal agencies have been mandated to apply available security…

vulnerability

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, mandating that federal civilian executive branch (FCEB) agencies address these flaws by September 21, 2026. This directive, issued under Binding Operational Directive (BOD) 22-01, aims to mitigate significant risks posed by actively…

CVE-2026-46331high

Linux Kernel Flaw Exploited After 71 Days, Not on CISA KEV

A Linux kernel vulnerability, CVE-2026-46331, has been confirmed as exploited, but remains absent from the US federal CISA Known Exploited Vulnerabilities (KEV) catalogue.

CVE-2025-39682high

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, indicating that these flaws are being actively exploited in the wild. This advisory highlights the immediate threat posed by these specific kernel issues to systems running the Linux operating system.

linuxhigh

Public Exploits Released for Linux Kernel Root Privilege Flaws

Working exploit code has been publicly released for four distinct vulnerabilities within the Linux kernel. These flaws reportedly allow a local user to escalate their privileges to administrative root access on affected systems. The availability of public exploits significantly lowers the bar for malicious actors to leverage these vulnerabilities, increasing the urgency for system…

vulnerability

Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited

Attackers have deployed a Linux rootkit on F5 BIG-IP APM devices, utilizing a method that hides a web shell in memory rather than writing it to disk. This technique makes detection more challenging for traditional security tools. F5 BIG-IP APM is a system designed for enforcing access policies.

ai

Linux Foundation Introduces TRACE Standard for AI Runtime Evidence

The Linux Foundation has introduced a new open standard, Trust, Runtime Attestation and Compliance Evidence (TRACE), designed to enhance the transparency, auditability, and trustworthiness of AI systems, particularly AI agents. This specification aims to provide verifiable records of AI activity, addressing the challenge of proving what these systems have actually done.