Linux
- Exploited flaws
- 32in 1 product
- Added to CISA's list in 2026
- 97 in 2025
- Used by ransomware
- 2of 32, says CISA
- Disclosure to CISA's list
- 464 daysmedian; 1 of 32 listed within 30 days
Exploited flaws by the year they were disclosed
The year in each CVE ID, roughly when the flaw became public. Recent years can still grow: flaws are often exploited, and listed, years later.
Hover or tab through a year for its count.
Show as a table
| Year disclosed | Exploited flaws |
|---|---|
| 2010 | 1 |
| 2011 | 0 |
| 2012 | 0 |
| 2013 | 3 |
| 2014 | 2 |
| 2015 | 0 |
| 2016 | 1 |
| 2017 | 1 |
| 2018 | 1 |
| 2019 | 1 |
| 2020 | 0 |
| 2021 | 3 |
| 2022 | 5 |
| 2023 | 2 |
| 2024 | 5 |
| 2025 | 3 |
| 2026 | 4 |
Products exploited more than once
| Product | Flaws | First listed | Latest |
|---|---|---|---|
| Kernel | 32 | 2021-12-10 | 2026-10-28 |
Latest on CISA's list
- Linux Kernel Missing Initialization of a Variable Vulnerability
- Linux Kernel Out-of-Bounds Write Vulnerability
- Linux Kernel Race Condition Vulnerability
- Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- Linux Kernel Unspecified Vulnerability
- Linux Kernel Out-of-Bounds Write Vulnerability
- Linux Kernel Improper Authentication Vulnerability
- Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- Linux Kernel Integer Overflow Vulnerability
- Linux Kernel Heap Out-of-Bounds Write Vulnerability
In the news
- Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
- Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
- Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
- CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
- Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
- Windows Subsystem for Linux: elevation of privilege flaw
- Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
- Chrome and Edge: uI misrepresentation in Linux Toolkit Theming
From CISA's Known Exploited Vulnerabilities catalogue. "Disclosure to CISA's list" uses NVD's publication date and leaves out the 2021-11-03 launch, when CISA added hundreds of older flaws at once; CISA often lists a flaw after attacks have begun, so it's an upper limit on how fast exploitation came.