L
Vendor security profile43 actively exploited CVEs
linux
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10.675
Critical1.035
CISA KEV43
Public exploit144
Patch rate%56
Avg. CVSS7.7
12-month vulnerability rate
81
366
105
52
70
339
507
955
866
1712
2019
221
CVE KEV
CVE severity distribution
10.675toplam CVE
Critical1.035 (10%)
High6.352 (60%)
Medium1.309 (12%)
Low19 (0%)
Uncertain1.960 (18%)
Patch and exploitation view
%56
Verified patch
%0
CISA KEV
%1
Public exploit
5.692Patch available
290Partial
24Workaround
0Vendor: no patch
4.669Unknown
Latest vulnerabilities
-
CVE-2026-98385
sched/cache: Decouple sched_cache_group from mm to fix UAF
L
Patch verifiedEPSS %0
3.3
CVE-2026-98384
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()
L
Patch verifiedEPSS %0
7.1
CVE-2026-98383
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL
L
Patch verifiedEPSS %0
5.5
CVE-2026-98382
bpf: Reject dev-bound-only programs on other devices
L
Patch verifiedEPSS %0
7.8
CVE-2026-98381
veth: manage XDP program pointers during channel resize
L
Patch verifiedEPSS %0
5.5
CVE-2026-98380
net/sched: reject IDR error pointers when deleting actions
L
Patch verifiedEPSS %0
5.5
CVE-2026-98379
netfilter: ip6t_rpfilter: reject routes without inet6_dev
L
Patch verifiedEPSS %0
7.8
CVE-2026-98378
bpf: Skip unsettled links in link iterator
L
Patch verifiedEPSS %0
5.5
CVE-2026-98377
vlan: require the MAC header to be present in __vlan_insert_inner_tag()
L
Patch verifiedEPSS %0
-
CVE-2026-98376
bpf: Use array_map_meta_equal for percpu array inner map replacement
L
Patch status unknownEPSS %0