Vulnerabilities in Linux

13,511 results
Vexday analysis

Com 12.630 CVEs catalogadas e 1.872 novas entradas nos últimos 90 dias, o Linux apresenta um volume de vulnerabilidades consistente com sua ampla base de código e adoção global. A taxa de exploração ativa — apenas 9 entradas no CISA KEV, representando 0,07% do total — está abaixo da média geral do catálogo (0,45%), o que sugere que, apesar da superfície de ataque extensa, a conversão de vulnerabilidades em ameaças ativas e confirmadas permanece relativamente contida. Ainda assim, a CVE-2026-31431 merece atenção prioritária: com EPSS de 0,9678, a probabilidade de exploração ativa é elevada, e seu status no KEV indica que esse risco já se concretizou. A falha mais comum — CWE-476 (desreferência de ponteiro nulo) — é representativa da complexidade inerente ao desenvolvimento em nível de kernel e reforça a necessidade de triagem contínua, especialmente diante das 23 vulnerabilidades com PoC pública disponível.

CVE-2023-53511—io_uring: fix fget leak when fs don't support nowait buffered readEPSS 0.1%CVE-2026-64099HIGHdrm/v3d: Fix use-after-free of CPU job query arrays on error pathEPSS 0.1%CVE-2026-53005HIGHaf_unix: Drop all SCM attributes for SOCKMAP.EPSS 0.1%CVE-2023-53248MEDIUMdrm/amdgpu: install stub fence into potential unused fence pointersEPSS 0.1%CVE-2025-39831MEDIUMfbnic: Move phylink resume out of service_task and into open/closeEPSS 0.1%CVE-2023-53442MEDIUMice: Block switchdev mode when ADQ is active and vice versaEPSS 0.1%CVE-2025-39779—btrfs: subpage: keep TOWRITE tag until folio is cleanedEPSS 0.1%CVE-2023-53444MEDIUMdrm/ttm: fix bulk_move corruption when adding a entryEPSS 0.1%CVE-2026-23077HIGHmm/vma: fix anon_vma UAF on mremap() faulted, unfaulted mergeEPSS 0.1%CVE-2026-45945HIGHiommu/vt-d: Fix race condition during PASID entry replacementEPSS 0.1%CVE-2026-23268HIGHapparmor: fix unprivileged local user can do privileged policy managementEPSS 0.1%CVE-2025-39939—iommu/s390: Fix memory corruption when using identity domainEPSS 0.1%CVE-2025-39936—crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked()EPSS 0.1%CVE-2025-39707—drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilitiesEPSS 0.1%CVE-2023-53045—usb: gadget: u_audio: don't let userspace block driver unbindEPSS 0.1%CVE-2023-53060—igb: revert rtnl_lock() that causes deadlockEPSS 0.1%CVE-2025-39900MEDIUMnet_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=yEPSS 0.1%CVE-2026-53329HIGHdrm/amd/display: Use krealloc_array() in dal_vector_reserve()EPSS 0.1%CVE-2023-53434MEDIUMremoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP CoresEPSS 0.1%CVE-2023-53663—KVM: nSVM: Check instead of asserting on nested TSC scaling supportEPSS 0.1%