{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Linux vulnerabilities","home_page_url":"https://patchfirst.co/vendor/linux/","feed_url":"https://patchfirst.co/feed/vendor/linux.json","description":"New and newly exploited Linux CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-46300#kev","url":"https://patchfirst.co/cve/CVE-2026-46300/","title":"[KEV] CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-10-28. ENISA EUVD lists it as exploited. EPSS 16.1% (higher than 96.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 77.5 of 100.","summary":"Linux Kernel Missing Initialization of a Variable Vulnerability","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-29T17:30:34.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":77.5,"kev":{"dateAdded":"2026-10-28","ransomware":false},"epss":{"score":0.1613,"percentile":0.96923},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-98959","url":"https://patchfirst.co/cve/CVE-2026-98959/","title":"CVE-2026-98959: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.6% (higher than 49% of CVEs). CVSS 9.8 CRITICAL. Priority 18.6 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are…","date_published":"2026-10-23T00:00:00.000Z","date_modified":"2026-10-24T14:16:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00607,"percentile":0.48999},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-99079","url":"https://patchfirst.co/cve/CVE-2026-99079/","title":"CVE-2026-99079: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.5% (higher than 39.5% of CVEs). CVSS 9.8 CRITICAL. Priority 16.7 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…","date_published":"2026-10-23T00:00:00.000Z","date_modified":"2026-10-24T14:16:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00455,"percentile":0.39531},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-99078","url":"https://patchfirst.co/cve/CVE-2026-99078/","title":"CVE-2026-99078: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.5% (higher than 39.5% of CVEs). CVSS 9.8 CRITICAL. Priority 16.7 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…","date_published":"2026-10-23T00:00:00.000Z","date_modified":"2026-10-24T14:16:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00455,"percentile":0.39531},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-98548","url":"https://patchfirst.co/cve/CVE-2026-98548/","title":"CVE-2026-98548: In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.7% (higher than 52.9% of CVEs). CVSS 9.8 CRITICAL. Priority 19.0 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a…","date_published":"2026-10-18T00:00:00.000Z","date_modified":"2026-10-24T14:16:46.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.00694,"percentile":0.52915},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-98490","url":"https://patchfirst.co/cve/CVE-2026-98490/","title":"CVE-2026-98490: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.6% (higher than 49.6% of CVEs). CVSS 9.8 CRITICAL. Priority 18.4 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to…","date_published":"2026-10-18T00:00:00.000Z","date_modified":"2026-10-30T13:21:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.4,"kev":null,"epss":{"score":0.00618,"percentile":0.49573},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-98549","url":"https://patchfirst.co/cve/CVE-2026-98549/","title":"CVE-2026-98549: In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 33.2% of CVEs). CVSS 9.1 CRITICAL. Priority 14.6 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in…","date_published":"2026-10-18T00:00:00.000Z","date_modified":"2026-10-30T13:21:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.6,"kev":null,"epss":{"score":0.00391,"percentile":0.33215},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-98464","url":"https://patchfirst.co/cve/CVE-2026-98464/","title":"CVE-2026-98464: In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.1% (higher than 3.6% of CVEs). CVSS 9.3 CRITICAL. Priority 8.8 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during…","date_published":"2026-10-18T00:00:00.000Z","date_modified":"2026-10-24T14:16:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":8.8,"kev":null,"epss":{"score":0.00143,"percentile":0.03595},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-99999","url":"https://patchfirst.co/cve/CVE-2026-99999/","title":"CVE-2026-99999: In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.8% (higher than 56.1% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 70.2 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing…","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-19T22:17:28.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":70.2,"kev":null,"epss":{"score":0.00788,"percentile":0.5615},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-98432","url":"https://patchfirst.co/cve/CVE-2026-98432/","title":"CVE-2026-98432: In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 38.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 22.0 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU…","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-30T16:18:00.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":22,"kev":null,"epss":{"score":0.00445,"percentile":0.38738},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-98323","url":"https://patchfirst.co/cve/CVE-2026-98323/","title":"CVE-2026-98323: In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.5% (higher than 43.8% of CVEs). CVSS 9.8 CRITICAL. Priority 18.0 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-19T10:18:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.00514,"percentile":0.438},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-98365","url":"https://patchfirst.co/cve/CVE-2026-98365/","title":"CVE-2026-98365: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr_check_range()…","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 31.7% of CVEs). CVSS 9.8 CRITICAL. Priority 15.5 of 100.","summary":"In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr_check_range()…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-19T10:18:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00377,"percentile":0.31662},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-39682#kev","url":"https://patchfirst.co/cve/CVE-2025-39682/","title":"[KEV] CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 77.5 of 100.","summary":"Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","date_published":"2026-09-18T00:00:00.000Z","date_modified":"2026-10-19T21:10:00.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":77.5,"kev":{"dateAdded":"2026-09-18","ransomware":false},"epss":{"score":0.03252,"percentile":0.88326},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-39964#kev","url":"https://patchfirst.co/cve/CVE-2025-39964/","title":"[KEV] CVE-2025-39964: Linux Kernel Race Condition Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.3% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 71.9 of 100.","summary":"Linux Kernel Race Condition Vulnerability","date_published":"2026-09-18T00:00:00.000Z","date_modified":"2026-10-19T21:10:00.000Z","tags":["kev","public-exploit","T1068","T1499.004"],"_patchfirst":{"reason":"kev","priority":71.9,"kev":{"dateAdded":"2026-09-18","ransomware":false},"epss":{"score":0.0157,"percentile":0.75345},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-53266#kev","url":"https://patchfirst.co/cve/CVE-2026-53266/","title":"[KEV] CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 60.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 71.3 of 100.","summary":"Linux Kernel Out-of-Bounds Write Vulnerability","date_published":"2026-09-18T00:00:00.000Z","date_modified":"2026-09-19T04:17:53.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":71.3,"kev":{"dateAdded":"2026-09-18","ransomware":false},"epss":{"score":0.00934,"percentile":0.60731},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-53362#kev","url":"https://patchfirst.co/cve/CVE-2026-53362/","title":"[KEV] CVE-2026-53362: Linux Kernel Unspecified Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-08-27. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 53.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 69.2 of 100.","summary":"Linux Kernel Unspecified Vulnerability","date_published":"2026-08-27T00:00:00.000Z","date_modified":"2026-10-15T13:46:55.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":69.2,"kev":{"dateAdded":"2026-08-27","ransomware":false},"epss":{"score":0.00709,"percentile":0.53485},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-0995#kev","url":"https://patchfirst.co/cve/CVE-2022-0995/","title":"[KEV] CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 8.9% (higher than 95.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 77.5 of 100.","summary":"Linux Kernel Out-of-Bounds Write Vulnerability","date_published":"2026-08-26T00:00:00.000Z","date_modified":"2026-08-27T04:16:39.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":77.5,"kev":{"dateAdded":"2026-08-26","ransomware":false},"epss":{"score":0.08859,"percentile":0.95202},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-46331","url":"https://patchfirst.co/cve/CVE-2026-46331/","title":"CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache corruption","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.6% (higher than 50.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 67.8 of 100.","summary":"net/sched: fix pedit partial COW leading to page cache corruption","date_published":"2026-06-16T00:00:00.000Z","date_modified":"2026-10-15T01:21:40.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67.8,"kev":null,"epss":{"score":0.00639,"percentile":0.50573},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-0492#kev","url":"https://patchfirst.co/cve/CVE-2022-0492/","title":"[KEV] CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-06-02. ENISA EUVD lists it as exploited. EPSS 5.5% (higher than 92.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1611 Escape to Host. Priority 72.0 of 100.","summary":"Linux Kernel Improper Authentication Vulnerability","date_published":"2026-06-02T00:00:00.000Z","date_modified":"2026-06-17T04:20:42.000Z","tags":["kev","public-exploit","T1068","T1611"],"_patchfirst":{"reason":"kev","priority":72,"kev":{"dateAdded":"2026-06-02","ransomware":false},"epss":{"score":0.05528,"percentile":0.92802},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1611"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-43494","url":"https://patchfirst.co/cve/CVE-2026-43494/","title":"CVE-2026-43494: net/rds: reset op_nents when zerocopy page pin fails","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 35.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 64.8 of 100.","summary":"net/rds: reset op_nents when zerocopy page pin fails","date_published":"2026-05-21T00:00:00.000Z","date_modified":"2026-10-19T19:26:37.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.8,"kev":null,"epss":{"score":0.00411,"percentile":0.3538},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-43500","url":"https://patchfirst.co/cve/CVE-2026-43500/","title":"CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present","content_text":"Linux · Linux. Not in CISA KEV. EPSS 94.1% (higher than 99.85% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 73.1 of 100.","summary":"rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present","date_published":"2026-05-11T00:00:00.000Z","date_modified":"2026-09-01T12:05:00.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.1,"kev":null,"epss":{"score":0.94118,"percentile":0.99847},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-43284","url":"https://patchfirst.co/cve/CVE-2026-43284/","title":"CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags","content_text":"Linux · Linux. Not in CISA KEV. EPSS 94.2% (higher than 99.85% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 73.9 of 100.","summary":"xfrm: esp: avoid in-place decrypt on shared skb frags","date_published":"2026-05-08T00:00:00.000Z","date_modified":"2026-10-15T01:19:19.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.9,"kev":null,"epss":{"score":0.94194,"percentile":0.99848},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-31431#kev","url":"https://patchfirst.co/cve/CVE-2026-31431/","title":"[KEV] CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-05-01. ENISA EUVD lists it as exploited. EPSS 98.1% (higher than 99.91% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 73.4 of 100.","summary":"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","date_published":"2026-05-01T00:00:00.000Z","date_modified":"2026-09-08T15:13:07.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":73.4,"kev":{"dateAdded":"2026-05-01","ransomware":false},"epss":{"score":0.98114,"percentile":0.99912},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-31635","url":"https://patchfirst.co/cve/CVE-2026-31635/","title":"CVE-2026-31635: rxrpc: fix oversized RESPONSE authenticator length check","content_text":"Linux · Linux. Not in CISA KEV. EPSS 1.0% (higher than 63.3% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 70.1 of 100.","summary":"rxrpc: fix oversized RESPONSE authenticator length check","date_published":"2026-04-24T00:00:00.000Z","date_modified":"2026-08-05T12:23:59.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":70.1,"kev":null,"epss":{"score":0.01017,"percentile":0.63299},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2018-14634#kev","url":"https://patchfirst.co/cve/CVE-2018-14634/","title":"[KEV] CVE-2018-14634: Linux Kernel Integer Overflow Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2026-01-26. ENISA EUVD lists it as exploited. EPSS 14.7% (higher than 96.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 72.8 of 100.","summary":"Linux Kernel Integer Overflow Vulnerability","date_published":"2026-01-26T00:00:00.000Z","date_modified":"2026-06-17T01:41:20.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":72.8,"kev":{"dateAdded":"2026-01-26","ransomware":false},"epss":{"score":0.14689,"percentile":0.96663},"cvss":{"score":7.8,"severity":"HIGH","version":"3.0"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-22555#kev","url":"https://patchfirst.co/cve/CVE-2021-22555/","title":"[KEV] CVE-2021-22555: Linux Kernel Heap Out-of-Bounds Write Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 68.4 of 100.","summary":"Linux Kernel Heap Out-of-Bounds Write Vulnerability","date_published":"2025-10-06T00:00:00.000Z","date_modified":"2026-10-13T18:25:34.000Z","tags":["kev","public-exploit","T1068","T1499.004"],"_patchfirst":{"reason":"kev","priority":68.4,"kev":{"dateAdded":"2025-10-06","ransomware":false},"epss":{"score":0.78684,"percentile":0.99588},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-38352#kev","url":"https://patchfirst.co/cve/CVE-2025-38352/","title":"[KEV] CVE-2025-38352: Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2025-09-04. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 62.8 of 100.","summary":"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","date_published":"2025-09-04T00:00:00.000Z","date_modified":"2026-09-08T18:17:32.000Z","tags":["kev","public-exploit"],"_patchfirst":{"reason":"kev","priority":62.8,"kev":{"dateAdded":"2025-09-04","ransomware":false},"epss":{"score":0.01357,"percentile":0.71633},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-0386#kev","url":"https://patchfirst.co/cve/CVE-2023-0386/","title":"[KEV] CVE-2023-0386: Linux Kernel Improper Ownership Management Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2025-06-17. ENISA EUVD lists it as exploited. EPSS 7.9% (higher than 94.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1548.001 Setuid and Setgid; T1543 Create or Modify System Process. Priority 67.4 of 100.","summary":"Linux Kernel Improper Ownership Management Vulnerability","date_published":"2025-06-17T00:00:00.000Z","date_modified":"2026-06-17T05:25:25.000Z","tags":["kev","public-exploit","T1548.001","T1543"],"_patchfirst":{"reason":"kev","priority":67.4,"kev":{"dateAdded":"2025-06-17","ransomware":false},"epss":{"score":0.0788,"percentile":0.94701},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1548.001","T1543"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-37899","url":"https://patchfirst.co/cve/CVE-2025-37899/","title":"CVE-2025-37899: ksmbd: fix use-after-free in session logoff","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.9% (higher than 59.1% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 58.7 of 100.","summary":"ksmbd: fix use-after-free in session logoff","date_published":"2025-05-20T00:00:00.000Z","date_modified":"2026-08-05T11:58:10.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":58.7,"kev":null,"epss":{"score":0.00882,"percentile":0.59123},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-22037","url":"https://patchfirst.co/cve/CVE-2025-22037/","title":"CVE-2025-22037: ksmbd: fix null pointer dereference in alloc_preauth_hash()","content_text":"Linux · Linux. Not in CISA KEV. EPSS 69.5% (higher than 99.36% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.","summary":"ksmbd: fix null pointer dereference in alloc_preauth_hash()","date_published":"2025-04-16T00:00:00.000Z","date_modified":"2026-10-30T12:21:08.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.1,"kev":null,"epss":{"score":0.6951,"percentile":0.99361},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-53197#kev","url":"https://patchfirst.co/cve/CVE-2024-53197/","title":"[KEV] CVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2025-04-09. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.8% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 61.6 of 100.","summary":"Linux Kernel Out-of-Bounds Access Vulnerability","date_published":"2025-04-09T00:00:00.000Z","date_modified":"2026-06-17T08:08:33.000Z","tags":["kev","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":61.6,"kev":{"dateAdded":"2025-04-09","ransomware":false},"epss":{"score":0.04117,"percentile":0.90772},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-53150#kev","url":"https://patchfirst.co/cve/CVE-2024-53150/","title":"[KEV] CVE-2024-53150: Linux Kernel Out-of-Bounds Read Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2025-04-09. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1005 Data from Local System; T1011 Exfiltration Over Other Network Medium. Priority 57.3 of 100.","summary":"Linux Kernel Out-of-Bounds Read Vulnerability","date_published":"2025-04-09T00:00:00.000Z","date_modified":"2026-06-17T08:08:25.000Z","tags":["kev","T1005","T1011"],"_patchfirst":{"reason":"kev","priority":57.3,"kev":{"dateAdded":"2025-04-09","ransomware":false},"epss":{"score":0.01354,"percentile":0.71556},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1005","T1011"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-50302#kev","url":"https://patchfirst.co/cve/CVE-2024-50302/","title":"[KEV] CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2025-03-04. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.9% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1005 Data from Local System; T1011 Exfiltration Over Other Network Medium. Priority 53.2 of 100.","summary":"Linux Kernel Use of Uninitialized Resource Vulnerability","date_published":"2025-03-04T00:00:00.000Z","date_modified":"2026-10-15T01:19:12.000Z","tags":["kev","T1005","T1011"],"_patchfirst":{"reason":"kev","priority":53.2,"kev":{"dateAdded":"2025-03-04","ransomware":false},"epss":{"score":0.00811,"percentile":0.56898},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1005","T1011"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-21756","url":"https://patchfirst.co/cve/CVE-2025-21756/","title":"CVE-2025-21756: vsock: Keep the binding until socket destruction","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.9% (higher than 59.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 64.4 of 100.","summary":"vsock: Keep the binding until socket destruction","date_published":"2025-02-27T00:00:00.000Z","date_modified":"2026-10-15T01:04:00.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.4,"kev":null,"epss":{"score":0.00891,"percentile":0.5936},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-53104#kev","url":"https://patchfirst.co/cve/CVE-2024-53104/","title":"[KEV] CVE-2024-53104: Linux Kernel Out-of-Bounds Write Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2025-02-05. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 88.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 66.2 of 100.","summary":"Linux Kernel Out-of-Bounds Write Vulnerability","date_published":"2025-02-05T00:00:00.000Z","date_modified":"2026-06-17T08:08:17.000Z","tags":["kev","public-exploit","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":66.2,"kev":{"dateAdded":"2025-02-05","ransomware":false},"epss":{"score":0.03395,"percentile":0.88808},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-1000253#kev","url":"https://patchfirst.co/cve/CVE-2017-1000253/","title":"[KEV] CVE-2017-1000253: Linux Kernel PIE Stack Buffer Corruption Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2024-09-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1055 Process Injection. Priority 77.6 of 100.","summary":"Linux Kernel PIE Stack Buffer Corruption Vulnerability","date_published":"2024-09-09T00:00:00.000Z","date_modified":"2026-06-17T00:58:59.000Z","tags":["kev","ransomware","public-exploit","T1055"],"_patchfirst":{"reason":"kev","priority":77.6,"kev":{"dateAdded":"2024-09-09","ransomware":true},"epss":{"score":0.10695,"percentile":0.95806},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1055"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-0185#kev","url":"https://patchfirst.co/cve/CVE-2022-0185/","title":"[KEV] CVE-2022-0185: Linux Kernel Heap-Based Buffer Overflow Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2024-08-21. ENISA EUVD lists it as exploited. EPSS 25.2% (higher than 97.9% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 68.5 of 100.","summary":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","date_published":"2024-08-21T00:00:00.000Z","date_modified":"2026-06-17T04:20:06.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":68.5,"kev":{"dateAdded":"2024-08-21","ransomware":false},"epss":{"score":0.25151,"percentile":0.9793},"cvss":{"score":8.4,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-2586#kev","url":"https://patchfirst.co/cve/CVE-2022-2586/","title":"[KEV] CVE-2022-2586: Linux Kernel Use-After-Free Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2024-06-26. ENISA EUVD lists it as exploited. EPSS 10.2% (higher than 95.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 67.6 of 100.","summary":"Linux Kernel Use-After-Free Vulnerability","date_published":"2024-06-26T00:00:00.000Z","date_modified":"2026-10-14T18:25:45.000Z","tags":["kev","public-exploit","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":67.6,"kev":{"dateAdded":"2024-06-26","ransomware":false},"epss":{"score":0.10202,"percentile":0.95664},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-1086#kev","url":"https://patchfirst.co/cve/CVE-2024-1086/","title":"[KEV] CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2024-05-30, known ransomware use. ENISA EUVD lists it as exploited. EPSS 28.1% (higher than 98.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 78.1 of 100.","summary":"Linux Kernel Use-After-Free Vulnerability","date_published":"2024-05-30T00:00:00.000Z","date_modified":"2026-08-07T19:59:58.000Z","tags":["kev","ransomware","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":78.1,"kev":{"dateAdded":"2024-05-30","ransomware":true},"epss":{"score":0.28058,"percentile":0.98104},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-26987","url":"https://patchfirst.co/cve/CVE-2024-26987/","title":"CVE-2024-26987: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled","content_text":"Linux · Linux. Not in CISA KEV. EPSS 0.2% (higher than 7% of CVEs). Priority 36.4 of 100.","summary":"mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled","date_published":"2024-05-01T00:00:00.000Z","date_modified":"2026-05-11T20:08:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":36.4,"kev":null,"epss":{"score":0.00175,"percentile":0.07},"cvss":null,"vendor":"Linux","product":"Linux","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-2163","url":"https://patchfirst.co/cve/CVE-2023-2163/","title":"CVE-2023-2163: Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation","content_text":"Linux · Linux Kernel. Not in CISA KEV. EPSS 3.6% (higher than 89.5% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 66.0 of 100.","summary":"Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation","date_published":"2023-09-20T00:00:00.000Z","date_modified":"2025-02-27T20:49:30.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66,"kev":null,"epss":{"score":0.03635,"percentile":0.89537},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Linux","product":"Linux Kernel","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-31248","url":"https://patchfirst.co/cve/CVE-2023-31248/","title":"CVE-2023-31248: Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability","content_text":"Linux · Linux Kernel. Not in CISA KEV. EPSS 1.9% (higher than 79.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 62.4 of 100.","summary":"Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability","date_published":"2023-07-05T00:00:00.000Z","date_modified":"2025-03-05T18:54:52.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":62.4,"kev":null,"epss":{"score":0.0189,"percentile":0.79529},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Linux Kernel","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2010-3904#kev","url":"https://patchfirst.co/cve/CVE-2010-3904/","title":"[KEV] CVE-2010-3904: Linux Kernel Improper Input Validation Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2023-05-12. ENISA EUVD lists it as exploited. EPSS 15.9% (higher than 96.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 67.8 of 100.","summary":"Linux Kernel Improper Input Validation Vulnerability","date_published":"2023-05-12T00:00:00.000Z","date_modified":"2026-06-16T23:23:47.000Z","tags":["kev","public-exploit","T1068","T1548"],"_patchfirst":{"reason":"kev","priority":67.8,"kev":{"dateAdded":"2023-05-12","ransomware":false},"epss":{"score":0.15861,"percentile":0.96881},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1548"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2014-0196#kev","url":"https://patchfirst.co/cve/CVE-2014-0196/","title":"[KEV] CVE-2014-0196: Linux Kernel Race Condition Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2023-05-12. ENISA EUVD lists it as exploited. EPSS 20.3% (higher than 97.5% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 66.3 of 100.","summary":"Linux Kernel Race Condition Vulnerability","date_published":"2023-05-12T00:00:00.000Z","date_modified":"2026-06-17T00:02:29.000Z","tags":["kev","public-exploit","T1078","T1068"],"_patchfirst":{"reason":"kev","priority":66.3,"kev":{"dateAdded":"2023-05-12","ransomware":false},"epss":{"score":0.20329,"percentile":0.97477},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1078","T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-0266#kev","url":"https://patchfirst.co/cve/CVE-2023-0266/","title":"[KEV] CVE-2023-0266: Linux Kernel Use-After-Free Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 65.8 of 100.","summary":"Linux Kernel Use-After-Free Vulnerability","date_published":"2023-03-30T00:00:00.000Z","date_modified":"2026-06-17T05:25:09.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":65.8,"kev":{"dateAdded":"2023-03-30","ransomware":false},"epss":{"score":0.03702,"percentile":0.89725},"cvss":{"score":7,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-3493#kev","url":"https://patchfirst.co/cve/CVE-2021-3493/","title":"[KEV] CVE-2021-3493: Linux Kernel Privilege Escalation Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2022-10-20. ENISA EUVD lists it as exploited. EPSS 49.2% (higher than 98.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 68.2 of 100.","summary":"Linux Kernel Privilege Escalation Vulnerability","date_published":"2022-10-20T00:00:00.000Z","date_modified":"2026-06-17T04:05:12.000Z","tags":["kev","public-exploit","T1068","T1548"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2022-10-20","ransomware":false},"epss":{"score":0.49166,"percentile":0.98882},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1548"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-6282#kev","url":"https://patchfirst.co/cve/CVE-2013-6282/","title":"[KEV] CVE-2013-6282: Linux Kernel Improper Input Validation Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 39.7% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 68.9 of 100.","summary":"Linux Kernel Improper Input Validation Vulnerability","date_published":"2022-09-15T00:00:00.000Z","date_modified":"2026-06-17T00:00:14.000Z","tags":["kev","public-exploit","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":68.9,"kev":{"dateAdded":"2022-09-15","ransomware":false},"epss":{"score":0.39711,"percentile":0.98619},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-2094#kev","url":"https://patchfirst.co/cve/CVE-2013-2094/","title":"[KEV] CVE-2013-2094: Linux Kernel Privilege Escalation Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 47.7% (higher than 98.8% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 68.6 of 100.","summary":"Linux Kernel Privilege Escalation Vulnerability","date_published":"2022-09-15T00:00:00.000Z","date_modified":"2026-06-16T23:52:44.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2022-09-15","ransomware":false},"epss":{"score":0.47709,"percentile":0.98848},"cvss":{"score":8.4,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-2596#kev","url":"https://patchfirst.co/cve/CVE-2013-2596/","title":"[KEV] CVE-2013-2596: Linux Kernel Integer Overflow Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 3.2% (higher than 88.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 66.1 of 100.","summary":"Linux Kernel Integer Overflow Vulnerability","date_published":"2022-09-15T00:00:00.000Z","date_modified":"2026-06-16T23:53:41.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":66.1,"kev":{"dateAdded":"2022-09-15","ransomware":false},"epss":{"score":0.03212,"percentile":0.88167},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2014-3153#kev","url":"https://patchfirst.co/cve/CVE-2014-3153/","title":"[KEV] CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability","content_text":"Linux · Kernel. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 37.2% (higher than 98.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 78.2 of 100.","summary":"Linux Kernel Privilege Escalation Vulnerability","date_published":"2022-05-25T00:00:00.000Z","date_modified":"2026-06-17T00:07:40.000Z","tags":["kev","public-exploit","T1068","T1548"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2022-05-25","ransomware":false},"epss":{"score":0.37233,"percentile":0.98522},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Linux","product":"Kernel","techniqueIds":["T1068","T1548"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}