Vulnerabilities in Linux

16,673 results
Vexday analysis

Com 12.630 CVEs catalogadas e 1.872 novas entradas nos últimos 90 dias, o Linux apresenta um volume de vulnerabilidades consistente com sua ampla base de código e adoção global. A taxa de exploração ativa — apenas 9 entradas no CISA KEV, representando 0,07% do total — está abaixo da média geral do catálogo (0,45%), o que sugere que, apesar da superfície de ataque extensa, a conversão de vulnerabilidades em ameaças ativas e confirmadas permanece relativamente contida. Ainda assim, a CVE-2026-31431 merece atenção prioritária: com EPSS de 0,9678, a probabilidade de exploração ativa é elevada, e seu status no KEV indica que esse risco já se concretizou. A falha mais comum — CWE-476 (desreferência de ponteiro nulo) — é representativa da complexidade inerente ao desenvolvimento em nível de kernel e reforça a necessidade de triagem contínua, especialmente diante das 23 vulnerabilidades com PoC pública disponível.

CVE-2026-64142CRITICALksmbd: close durable scavenger races against m_fp_list lookupsEPSS 0.5%CVE-2026-63808CRITICALexfat: fix potential use-after-free in exfat_find_dir_entry()EPSS 0.5%CVE-2024-42225HIGHwifi: mt76: replace skb_put with skb_put_zeroEPSS 0.5%CVE-2024-38623HIGHfs/ntfs3: Use variable length array instead of fixed sizeEPSS 0.5%CVE-2026-46119CRITICALlibceph: Fix slab-out-of-bounds access in auth message processingEPSS 0.5%CVE-2026-74473CRITICALvxlan: use pskb_network_may_pull() in route_shortcircuit()EPSS 0.5%CVE-2024-49568CRITICALnet/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msgEPSS 0.5%CVE-2026-64319CRITICALnvmet-auth: validate reply message payload bounds against transfer lengthEPSS 0.5%CVE-2026-53046CRITICALksmbd: fix use-after-free from async crypto on Qualcomm crypto engineEPSS 0.5%CVE-2026-68131HIGHrbd: Reset positive result codes to zero in object map update pathEPSS 0.5%CVE-2026-23456HIGHnetfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS caseEPSS 0.5%CVE-2026-43226HIGHnet/rds: No shortcut out of RDS_CONN_ERROREPSS 0.5%CVE-2026-72320CRITICALnetfilter: nft_lookup: fix catchall element handling with inverted lookupsEPSS 0.5%CVE-2026-43230HIGHnet/rds: Clear reconnect pending bitEPSS 0.5%CVE-2018-10902HIGHIt was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in sndEPSS 0.5%CVE-2024-45009HIGHmptcp: pm: only decrement add_addr_accepted for MPJ reqEPSS 0.5%CVE-2026-52957HIGHlibceph: Fix potential null-ptr-deref in decode_choose_args()EPSS 0.5%CVE-2026-52954HIGHlibceph: handle rbtree insertion error in decode_choose_args()EPSS 0.5%CVE-2026-68141HIGHnet/af_iucv: fix NULL deref in afiucv_hs_callback_syn()EPSS 0.5%CVE-2025-68283HIGHlibceph: replace BUG_ON with bounds check for map->max_osdEPSS 0.5%