Linux kernel Kernel

Name: Linux kernel Kernel
Brand: Linux kernel

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

critical

by severity

0critical4high8medium0low

updated 2026-10-27

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-22600US	high7.0OT critical	6.59% (94th)	KEV	5.10.88	2022-01-26	4 versions
CVE-2020-14386US	high7.8	1.31% (70th)	Exploit	no fix	2020-09-16	≤ before 5.9-rc4
CVE-2020-1749US	high7.5OT elevated	1.24% (69th)	—	no fix	2020-09-09	≤ 5.5
CVE-2020-10732US	medium4.4	0.62% (49th)	—	no fix	2020-06-12	≤ introduced in commit 4206d3aa1978e44f58bfa4e1c9d8d35cbf19c187
CVE-2020-10766US	medium5.5	0.46% (40th)	—	no fix	2020-09-15	≤ before 5.8-rc1
CVE-2019-14898US	high7.0	0.44% (38th)	—	no fix	2020-05-08	≤ < 5.0.10
CVE-2020-14385US	medium5.5	0.42% (36th)	—	no fix	2020-09-15	≤ before 5.9-rc4
CVE-2020-10768US	medium5.5	0.40% (34th)	—	no fix	2020-09-16	≤ before 5.8-rc1
CVE-2020-10767US	medium5.5	0.38% (32nd)	—	no fix	2020-09-15	≤ before 5.8-rc1
CVE-2020-14304US	medium4.4	0.38% (32nd)	—	no fix	2020-09-15	3 versions
CVE-2020-14314US	medium5.5	0.37% (31st)	—	no fix	2020-09-15	≤ before 5.9-rc2
CVE-2020-10781US	medium5.5	0.31% (24th)	—	no fix	2020-09-16	≤ before 5.8-rc6

The flaw types (CWEs) most of these CVEs share.

CWE-440Expected Behavior Violation3 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.