Open Source Linux Kernel

productDE

cpe:/o:linux:linux_kernel:unspecified

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical268high857medium0low

updated 2026-10-28

vulnerabilities (2,555)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	no fix	2026-04-22	—
CVE-2023-0266US	high7.0OT critical	3.67% (90th)	KEV	no fix	2023-01-30	—
CVE-2025-39946US	medium5.5	10.3% (96th)	Exploit	no fix	2025-10-04	—
CVE-2026-31402US	—	1.20% (68th)	Exploit	no fix	2026-04-03	—
CVE-2026-99999US	—	0.79% (56th)	Exploit	no fix	2026-10-15	—
CVE-2026-43074US	—	0.48% (41st)	Exploit	no fix	2026-05-06	—
CVE-2026-31717US	—	0.44% (38th)	Exploit	no fix	2026-05-01	—
CVE-2026-80844US	—	0.43% (38th)	Exploit	no fix	2026-09-04	—
CVE-2025-40040US	medium5.5	0.38% (31st)	Exploit	no fix	2025-10-28	—
CVE-2026-31694US	—	0.28% (21st)	Exploit	no fix	2026-05-01	—
CVE-2026-23416US	medium5.5	0.22% (12th)	Exploit	no fix	2026-04-02	—
CVE-2026-80775US	—	0.18% (8th)	Exploit	no fix	2026-09-04	—
CVE-2026-98260US	—	0.18% (8th)	Exploit	no fix	2026-10-06	—
CVE-2025-40123US	—	0.17% (6th)	Exploit	no fix	2025-11-12	—
CVE-2026-23415US	high7.8	0.17% (6th)	Exploit	no fix	2026-04-02	—
CVE-2026-98256US	—	0.14% (4th)	Exploit	no fix	2026-10-06	—
CVE-2026-31720US	high7.8	0.13% (3rd)	Exploit	no fix	2026-05-01	—
CVE-2026-31721US	medium5.5	0.13% (2nd)	Exploit	no fix	2026-05-01	—
CVE-2026-98180US	—	0.12% (2nd)	Exploit	no fix	2026-10-06	—
CVE-2026-23455US	—	1.53% (75th)	—	no fix	2026-04-03	—
CVE-2022-42719US	high8.8	1.35% (71st)	—	no fix	2022-10-13	—
CVE-2022-50676US	—	0.95% (61st)	—	no fix	2025-12-09	—
CVE-2022-50671US	—	0.95% (61st)	—	no fix	2025-12-09	—
CVE-2022-49407US	high7.1	0.87% (59th)	—	no fix	2025-02-26	—
CVE-2022-49330US	medium5.5	0.83% (57th)	—	no fix	2025-02-26	—
CVE-2022-50717US	—	0.82% (57th)	—	no fix	2025-12-24	—
CVE-2022-50668US	—	0.81% (57th)	—	no fix	2025-12-09	—
CVE-2022-50666US	—	0.73% (54th)	—	no fix	2025-12-09	—
CVE-2025-68349US	—	0.71% (53rd)	—	no fix	2025-12-24	—
CVE-2023-54219US	—	0.69% (53rd)	—	no fix	2025-12-30	—
CVE-2025-40135US	—	0.69% (53rd)	—	no fix	2025-11-12	—
CVE-2026-43037US	—	0.69% (53rd)	—	no fix	2026-05-01	—
CVE-2025-40343US	—	0.65% (51st)	—	no fix	2025-12-09	—
CVE-2022-49325US	medium5.5	0.64% (51st)	—	no fix	2025-02-26	—
CVE-2025-40048US	—	0.64% (51st)	—	no fix	2025-10-28	—
CVE-2025-40187US	—	0.64% (50th)	—	no fix	2025-11-12	—
CVE-2025-40053US	—	0.63% (50th)	—	no fix	2025-10-28	—
CVE-2025-68359US	—	0.63% (50th)	—	no fix	2025-12-24	—
CVE-2025-40183US	—	0.62% (50th)	—	no fix	2025-11-12	—
CVE-2023-54257US	—	0.62% (49th)	—	no fix	2025-12-30	—
CVE-2024-22099US	medium5.5	0.61% (49th)	—	no fix	2024-01-25	—
CVE-2025-40252US	—	0.60% (49th)	—	no fix	2025-12-04	—
CVE-2026-31433US	—	0.60% (49th)	—	no fix	2026-04-22	—
CVE-2022-50885US	—	0.60% (49th)	—	no fix	2025-12-30	—
CVE-2025-40240US	—	0.60% (49th)	—	no fix	2025-12-04	—
CVE-2023-54306US	—	0.60% (49th)	—	no fix	2025-12-30	—
CVE-2026-43011US	—	0.59% (48th)	—	no fix	2026-05-01	—
CVE-2023-54090US	—	0.59% (48th)	—	no fix	2025-12-24	—
CVE-2023-54004US	—	0.59% (48th)	—	no fix	2025-12-24	—
CVE-2024-23307US	high7.8	0.58% (48th)	—	no fix	2024-01-25	—

showing 50 of 2,555

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference499 CVEs
CWE-416Use After Free391 CVEs
CWE-401Missing Release of Memory after Effective Lifetime351 CVEs
CWE-20Improper Input Validation184 CVEs
CWE-125Out-of-bounds Read174 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')148 CVEs
CWE-404Improper Resource Shutdown or Release147 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer137 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)2,555 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan