KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Vendor dossier / #9

Linux vulnerabilities in CISA KEV

Catalog
2026.09.23
Rank
#9 of 283
Updated
2026-09-18

Answer CISA's KEV catalog lists 31 Linux vulnerabilities as of catalog 2026.09.23, 1.8% of all 1,721 entries and rank 9 of 283 vendors. The first was added on 2021-12-10 and the most recent on 2026-09-18; 2 are flagged as used in ransomware campaigns.

KEV entries
311.8% of catalog
Last 90 days
+5added
Ransomware: known
26.5%
Products
1distinct
First added
2021-12-10
Latest added
2026-09-18
Median days to due
21
Open deadlines
0federal

TAdditions per quarter

Linux KEV additions per quarterColumn chart of KEV additions per quarter from 2021Q4 to 2026Q3. Peak: 5 in 2026Q3.02462021Q4: 1 added2021 Q42022Q1: 1 added2022Q2: 3 added2022Q3: 3 added2022Q4: 1 added2022 Q42023Q1: 1 added2023Q2: 2 added2023Q3: 0 added2023Q4: 0 added2023 Q42024Q1: 0 added2024Q2: 2 added2024Q3: 2 added2024Q4: 0 added2024 Q42025Q1: 2 added2025Q2: 3 added2025Q3: 1 added2025Q4: 1 added2025 Q42026Q1: 1 added2026Q2: 2 added2026Q3: 5 added
Table view (by year)
Linux KEV additions by year
YearAdded
20211
20228
20233
20244
20257
20268

QCommon questions

How many Linux vulnerabilities are in CISA KEV?

31, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 1.8% of the catalog.

Which Linux product has the most KEV entries?

Kernel, with 31 entries.

How many Linux KEV vulnerabilities are linked to ransomware?

2 of 31 (6.5%) are flagged by CISA as known to be used in ransomware campaigns.

When was the latest Linux vulnerability added to KEV?

2026-09-18 (CVE-2026-53266).

What is the most common weakness in Linux KEV entries?

CWE-787 (Out-of-bounds write), listed on 5 entries.

PProducts

Linux products in KEV
ProductEntriesShare of vendor
Kernel31100%

WWeaknesses

entries can list several CWEs
CWEs in Linux KEV entries
CWEEntriesShare of vendor
CWE-787 Out-of-bounds write516.1%
CWE-362 Race condition39.7%
CWE-416 Use after free39.7%
CWE-862 Missing authorization26.5%
CWE-190 Integer overflow26.5%
CWE-20 Improper input validation26.5%
CWE-18926.5%
CWE-269 Improper privilege management26.5%
CWE-75413.2%
CWE-287 Improper authentication13.2%
CWE-66913.2%
CWE-36713.2%
No CWE listed13.2%

EAll 31 entries

All Linux entries in CISA KEV, newest first
CVEProductVulnerabilityAddedDueRansomwareCWE
CVE-2026-53266KernelLinux Kernel Out-of-Bounds Write Vulnerability NewUnknownCWE-787
CVE-2025-39964KernelLinux Kernel Race Condition Vulnerability NewUnknownCWE-362
CVE-2025-39682KernelLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability NewUnknownCWE-754
CVE-2026-53362KernelLinux Kernel Unspecified VulnerabilityUnknownnone listed
CVE-2022-0995KernelLinux Kernel Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2022-0492KernelLinux Kernel Improper Authentication VulnerabilityUnknownCWE-287, CWE-862
CVE-2026-31431KernelLinux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityUnknownCWE-669
CVE-2018-14634KernelLinux Kernel Integer Overflow VulnerabilityUnknownCWE-190
CVE-2021-22555KernelLinux Kernel Heap Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2025-38352KernelLinux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityUnknownCWE-367
CVE-2023-0386KernelLinux Kernel Improper Ownership Management VulnerabilityUnknownCWE-282
CVE-2024-53197KernelLinux Kernel Out-of-Bounds Access VulnerabilityUnknownCWE-787
CVE-2024-53150KernelLinux Kernel Out-of-Bounds Read VulnerabilityUnknownCWE-125
CVE-2024-50302KernelLinux Kernel Use of Uninitialized Resource VulnerabilityUnknownCWE-908
CVE-2024-53104KernelLinux Kernel Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2017-1000253KernelLinux Kernel PIE Stack Buffer Corruption Vulnerability KnownCWE-119
CVE-2022-0185KernelLinux Kernel Heap-Based Buffer Overflow VulnerabilityUnknownCWE-190
CVE-2022-2586KernelLinux Kernel Use-After-Free VulnerabilityUnknownCWE-416
CVE-2024-1086KernelLinux Kernel Use-After-Free VulnerabilityKnownCWE-416
CVE-2014-0196KernelLinux Kernel Race Condition VulnerabilityUnknownCWE-362
CVE-2010-3904KernelLinux Kernel Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2023-0266KernelLinux Kernel Use-After-Free VulnerabilityUnknownCWE-416
CVE-2021-3493KernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-862
CVE-2013-6282KernelLinux Kernel Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2013-2596KernelLinux Kernel Integer Overflow VulnerabilityUnknownCWE-189
CVE-2013-2094KernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-189
CVE-2014-3153KernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-269
CVE-2022-0847KernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-665
CVE-2021-22600KernelLinux Kernel Privilege Escalation VulnerabilityUnknownCWE-415
CVE-2016-5195KernelLinux Kernel Race Condition VulnerabilityUnknownCWE-362
CVE-2019-13272KernelLinux Kernel Improper Privilege Management VulnerabilityUnknownCWE-269

Cite this

CISA's Known Exploited Vulnerabilities catalog lists 31 Linux vulnerabilities (1.8% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/linux/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about Linux beyond this data.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API