L
Vendor security profile43 actively exploited CVEs
linux
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10.658
Critical965
CISA KEV43
Public exploit134
Patch rate%49
Avg. CVSS7.7
12-month vulnerability rate
81
366
105
52
70
339
507
955
855
1712
2019
220
CVE KEV
CVE severity distribution
10.658toplam CVE
Critical965 (9%)
High6.324 (59%)
Medium1.259 (12%)
Low18 (0%)
Uncertain2.092 (20%)
Patch and exploitation view
%49
Verified patch
%0
CISA KEV
%1
Public exploit
4.982Patch available
290Partial
24Workaround
0Vendor: no patch
5.362Unknown
Latest vulnerabilities
-
CVE-2026-98384
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()
L
Patch status unknownEPSS %0
-
CVE-2026-98383
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL
L
Patch status unknownEPSS %0
-
CVE-2026-98382
bpf: Reject dev-bound-only programs on other devices
L
Patch status unknownEPSS %0
-
CVE-2026-98381
veth: manage XDP program pointers during channel resize
L
Patch status unknownEPSS %0
-
CVE-2026-98380
net/sched: reject IDR error pointers when deleting actions
L
Patch status unknownEPSS %0
-
CVE-2026-98379
netfilter: ip6t_rpfilter: reject routes without inet6_dev
L
Patch status unknownEPSS %0
-
CVE-2026-98378
bpf: Skip unsettled links in link iterator
L
Patch status unknownEPSS %0
-
CVE-2026-98377
vlan: require the MAC header to be present in __vlan_insert_inner_tag()
L
Patch status unknownEPSS %0
-
CVE-2026-98376
bpf: Use array_map_meta_equal for percpu array inner map replacement
L
Patch status unknownEPSS %0
-
CVE-2026-98375
xen/netfront: drop RX packets with a short Ethernet header
L
Patch status unknownEPSS %0