<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: Linux vulnerabilities</title><link>https://patchfirst.co/vendor/linux/</link><atom:link href="https://patchfirst.co/feed/vendor/linux.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited Linux CVEs, with CISA KEV, EPSS and ATT&amp;CK context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 05:11:25 GMT</lastBuildDate><item><title>[KEV] CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-46300/</link><guid isPermaLink="false">CVE-2026-46300#kev</guid><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-10-28. ENISA EUVD lists it as exploited. EPSS 16.1% (higher than 96.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 77.5 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>CVE-2026-98959: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are…</title><link>https://patchfirst.co/cve/CVE-2026-98959/</link><guid isPermaLink="false">CVE-2026-98959</guid><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.6% (higher than 49% of CVEs). CVSS 9.8 CRITICAL. Priority 18.6 of 100.</description></item><item><title>CVE-2026-99079: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…</title><link>https://patchfirst.co/cve/CVE-2026-99079/</link><guid isPermaLink="false">CVE-2026-99079</guid><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.5% (higher than 39.5% of CVEs). CVSS 9.8 CRITICAL. Priority 16.7 of 100.</description></item><item><title>CVE-2026-99078: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…</title><link>https://patchfirst.co/cve/CVE-2026-99078/</link><guid isPermaLink="false">CVE-2026-99078</guid><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.5% (higher than 39.5% of CVEs). CVSS 9.8 CRITICAL. Priority 16.7 of 100.</description></item><item><title>CVE-2026-98548: In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a…</title><link>https://patchfirst.co/cve/CVE-2026-98548/</link><guid isPermaLink="false">CVE-2026-98548</guid><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.7% (higher than 52.9% of CVEs). CVSS 9.8 CRITICAL. Priority 19.0 of 100.</description></item><item><title>CVE-2026-98490: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to…</title><link>https://patchfirst.co/cve/CVE-2026-98490/</link><guid isPermaLink="false">CVE-2026-98490</guid><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.6% (higher than 49.6% of CVEs). CVSS 9.8 CRITICAL. Priority 18.4 of 100.</description></item><item><title>CVE-2026-98549: In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in…</title><link>https://patchfirst.co/cve/CVE-2026-98549/</link><guid isPermaLink="false">CVE-2026-98549</guid><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 33.2% of CVEs). CVSS 9.1 CRITICAL. Priority 14.6 of 100.</description></item><item><title>CVE-2026-98464: In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during…</title><link>https://patchfirst.co/cve/CVE-2026-98464/</link><guid isPermaLink="false">CVE-2026-98464</guid><pubDate>Sun, 18 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.1% (higher than 3.6% of CVEs). CVSS 9.3 CRITICAL. Priority 8.8 of 100.</description></item><item><title>CVE-2026-99999: In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing…</title><link>https://patchfirst.co/cve/CVE-2026-99999/</link><guid isPermaLink="false">CVE-2026-99999</guid><pubDate>Thu, 15 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.8% (higher than 56.1% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 70.2 of 100.</description><category>public-exploit</category></item><item><title>CVE-2026-98432: In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU…</title><link>https://patchfirst.co/cve/CVE-2026-98432/</link><guid isPermaLink="false">CVE-2026-98432</guid><pubDate>Thu, 15 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 38.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 22.0 of 100.</description><category>public-exploit</category></item><item><title>CVE-2026-98323: In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the…</title><link>https://patchfirst.co/cve/CVE-2026-98323/</link><guid isPermaLink="false">CVE-2026-98323</guid><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.5% (higher than 43.8% of CVEs). CVSS 9.8 CRITICAL. Priority 18.0 of 100.</description></item><item><title>CVE-2026-98365: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr_check_range()…</title><link>https://patchfirst.co/cve/CVE-2026-98365/</link><guid isPermaLink="false">CVE-2026-98365</guid><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 31.7% of CVEs). CVSS 9.8 CRITICAL. Priority 15.5 of 100.</description></item><item><title>[KEV] CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability</title><link>https://patchfirst.co/cve/CVE-2025-39682/</link><guid isPermaLink="false">CVE-2025-39682#kev</guid><pubDate>Fri, 18 Sep 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application. Priority 77.5 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category></item><item><title>[KEV] CVE-2025-39964: Linux Kernel Race Condition Vulnerability</title><link>https://patchfirst.co/cve/CVE-2025-39964/</link><guid isPermaLink="false">CVE-2025-39964#kev</guid><pubDate>Fri, 18 Sep 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.3% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 71.9 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1499.004</category></item><item><title>[KEV] CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-53266/</link><guid isPermaLink="false">CVE-2026-53266#kev</guid><pubDate>Fri, 18 Sep 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 60.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 71.3 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>[KEV] CVE-2026-53362: Linux Kernel Unspecified Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-53362/</link><guid isPermaLink="false">CVE-2026-53362#kev</guid><pubDate>Thu, 27 Aug 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-08-27. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 53.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 69.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>[KEV] CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-0995/</link><guid isPermaLink="false">CVE-2022-0995#kev</guid><pubDate>Wed, 26 Aug 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 8.9% (higher than 95.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 77.5 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>CVE-2026-46331: net/sched: fix pedit partial COW leading to page cache corruption</title><link>https://patchfirst.co/cve/CVE-2026-46331/</link><guid isPermaLink="false">CVE-2026-46331</guid><pubDate>Tue, 16 Jun 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.6% (higher than 50.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 67.8 of 100.</description><category>public-exploit</category></item><item><title>[KEV] CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-0492/</link><guid isPermaLink="false">CVE-2022-0492#kev</guid><pubDate>Tue, 02 Jun 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-06-02. ENISA EUVD lists it as exploited. EPSS 5.5% (higher than 92.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1611 Escape to Host. Priority 72.0 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1611</category></item><item><title>CVE-2026-43494: net/rds: reset op_nents when zerocopy page pin fails</title><link>https://patchfirst.co/cve/CVE-2026-43494/</link><guid isPermaLink="false">CVE-2026-43494</guid><pubDate>Thu, 21 May 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.4% (higher than 35.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 64.8 of 100.</description><category>public-exploit</category></item><item><title>CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present</title><link>https://patchfirst.co/cve/CVE-2026-43500/</link><guid isPermaLink="false">CVE-2026-43500</guid><pubDate>Mon, 11 May 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 94.1% (higher than 99.85% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 73.1 of 100.</description><category>public-exploit</category></item><item><title>CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags</title><link>https://patchfirst.co/cve/CVE-2026-43284/</link><guid isPermaLink="false">CVE-2026-43284</guid><pubDate>Fri, 08 May 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 94.2% (higher than 99.85% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 73.9 of 100.</description><category>public-exploit</category></item><item><title>[KEV] CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-31431/</link><guid isPermaLink="false">CVE-2026-31431#kev</guid><pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-05-01. ENISA EUVD lists it as exploited. EPSS 98.1% (higher than 99.91% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 73.4 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>CVE-2026-31635: rxrpc: fix oversized RESPONSE authenticator length check</title><link>https://patchfirst.co/cve/CVE-2026-31635/</link><guid isPermaLink="false">CVE-2026-31635</guid><pubDate>Fri, 24 Apr 2026 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 1.0% (higher than 63.3% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 70.1 of 100.</description><category>public-exploit</category></item><item><title>[KEV] CVE-2018-14634: Linux Kernel Integer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2018-14634/</link><guid isPermaLink="false">CVE-2018-14634#kev</guid><pubDate>Mon, 26 Jan 2026 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2026-01-26. ENISA EUVD lists it as exploited. EPSS 14.7% (higher than 96.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 72.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>[KEV] CVE-2021-22555: Linux Kernel Heap Out-of-Bounds Write Vulnerability</title><link>https://patchfirst.co/cve/CVE-2021-22555/</link><guid isPermaLink="false">CVE-2021-22555#kev</guid><pubDate>Mon, 06 Oct 2025 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2025-10-06. ENISA EUVD lists it as exploited. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 68.4 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1499.004</category></item><item><title>[KEV] CVE-2025-38352: Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability</title><link>https://patchfirst.co/cve/CVE-2025-38352/</link><guid isPermaLink="false">CVE-2025-38352#kev</guid><pubDate>Thu, 04 Sep 2025 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2025-09-04. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 62.8 of 100.</description><category>kev</category><category>public-exploit</category></item><item><title>[KEV] CVE-2023-0386: Linux Kernel Improper Ownership Management Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-0386/</link><guid isPermaLink="false">CVE-2023-0386#kev</guid><pubDate>Tue, 17 Jun 2025 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2025-06-17. ENISA EUVD lists it as exploited. EPSS 7.9% (higher than 94.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1548.001 Setuid and Setgid; T1543 Create or Modify System Process. Priority 67.4 of 100.</description><category>kev</category><category>public-exploit</category><category>T1548.001</category><category>T1543</category></item><item><title>CVE-2025-37899: ksmbd: fix use-after-free in session logoff</title><link>https://patchfirst.co/cve/CVE-2025-37899/</link><guid isPermaLink="false">CVE-2025-37899</guid><pubDate>Tue, 20 May 2025 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.9% (higher than 59.1% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 58.7 of 100.</description><category>public-exploit</category></item><item><title>CVE-2025-22037: ksmbd: fix null pointer dereference in alloc_preauth_hash()</title><link>https://patchfirst.co/cve/CVE-2025-22037/</link><guid isPermaLink="false">CVE-2025-22037</guid><pubDate>Wed, 16 Apr 2025 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 69.5% (higher than 99.36% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.</description></item><item><title>[KEV] CVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-53197/</link><guid isPermaLink="false">CVE-2024-53197#kev</guid><pubDate>Wed, 09 Apr 2025 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2025-04-09. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.8% of CVEs). CVSS 7.8 HIGH. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 61.6 of 100.</description><category>kev</category><category>T1068</category><category>T1059</category></item><item><title>[KEV] CVE-2024-53150: Linux Kernel Out-of-Bounds Read Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-53150/</link><guid isPermaLink="false">CVE-2024-53150#kev</guid><pubDate>Wed, 09 Apr 2025 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2025-04-09. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 7.1 HIGH. ATT&amp;CK: T1005 Data from Local System; T1011 Exfiltration Over Other Network Medium. Priority 57.3 of 100.</description><category>kev</category><category>T1005</category><category>T1011</category></item><item><title>[KEV] CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-50302/</link><guid isPermaLink="false">CVE-2024-50302#kev</guid><pubDate>Tue, 04 Mar 2025 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2025-03-04. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.9% of CVEs). CVSS 5.5 MEDIUM. ATT&amp;CK: T1005 Data from Local System; T1011 Exfiltration Over Other Network Medium. Priority 53.2 of 100.</description><category>kev</category><category>T1005</category><category>T1011</category></item><item><title>CVE-2025-21756: vsock: Keep the binding until socket destruction</title><link>https://patchfirst.co/cve/CVE-2025-21756/</link><guid isPermaLink="false">CVE-2025-21756</guid><pubDate>Thu, 27 Feb 2025 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.9% (higher than 59.4% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 64.4 of 100.</description><category>public-exploit</category></item><item><title>[KEV] CVE-2024-53104: Linux Kernel Out-of-Bounds Write Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-53104/</link><guid isPermaLink="false">CVE-2024-53104#kev</guid><pubDate>Wed, 05 Feb 2025 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2025-02-05. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 88.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 66.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1059</category></item><item><title>[KEV] CVE-2017-1000253: Linux Kernel PIE Stack Buffer Corruption Vulnerability</title><link>https://patchfirst.co/cve/CVE-2017-1000253/</link><guid isPermaLink="false">CVE-2017-1000253#kev</guid><pubDate>Mon, 09 Sep 2024 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2024-09-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1055 Process Injection. Priority 77.6 of 100.</description><category>kev</category><category>ransomware</category><category>public-exploit</category><category>T1055</category></item><item><title>[KEV] CVE-2022-0185: Linux Kernel Heap-Based Buffer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-0185/</link><guid isPermaLink="false">CVE-2022-0185#kev</guid><pubDate>Wed, 21 Aug 2024 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2024-08-21. ENISA EUVD lists it as exploited. EPSS 25.2% (higher than 97.9% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 68.5 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>[KEV] CVE-2022-2586: Linux Kernel Use-After-Free Vulnerability</title><link>https://patchfirst.co/cve/CVE-2022-2586/</link><guid isPermaLink="false">CVE-2022-2586#kev</guid><pubDate>Wed, 26 Jun 2024 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2024-06-26. ENISA EUVD lists it as exploited. EPSS 10.2% (higher than 95.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 67.6 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1059</category></item><item><title>[KEV] CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-1086/</link><guid isPermaLink="false">CVE-2024-1086#kev</guid><pubDate>Thu, 30 May 2024 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2024-05-30, known ransomware use. ENISA EUVD lists it as exploited. EPSS 28.1% (higher than 98.1% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 78.1 of 100.</description><category>kev</category><category>ransomware</category><category>public-exploit</category><category>T1068</category></item><item><title>CVE-2024-26987: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled</title><link>https://patchfirst.co/cve/CVE-2024-26987/</link><guid isPermaLink="false">CVE-2024-26987</guid><pubDate>Wed, 01 May 2024 00:00:00 GMT</pubDate><description>Linux · Linux. Not in CISA KEV. EPSS 0.2% (higher than 7% of CVEs). Priority 36.4 of 100.</description></item><item><title>CVE-2023-2163: Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation</title><link>https://patchfirst.co/cve/CVE-2023-2163/</link><guid isPermaLink="false">CVE-2023-2163</guid><pubDate>Wed, 20 Sep 2023 00:00:00 GMT</pubDate><description>Linux · Linux Kernel. Not in CISA KEV. EPSS 3.6% (higher than 89.5% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 66.0 of 100.</description><category>public-exploit</category></item><item><title>CVE-2023-31248: Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-31248/</link><guid isPermaLink="false">CVE-2023-31248</guid><pubDate>Wed, 05 Jul 2023 00:00:00 GMT</pubDate><description>Linux · Linux Kernel. Not in CISA KEV. EPSS 1.9% (higher than 79.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. Priority 62.4 of 100.</description><category>public-exploit</category></item><item><title>[KEV] CVE-2010-3904: Linux Kernel Improper Input Validation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2010-3904/</link><guid isPermaLink="false">CVE-2010-3904#kev</guid><pubDate>Fri, 12 May 2023 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2023-05-12. ENISA EUVD lists it as exploited. EPSS 15.9% (higher than 96.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 67.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1548</category></item><item><title>[KEV] CVE-2014-0196: Linux Kernel Race Condition Vulnerability</title><link>https://patchfirst.co/cve/CVE-2014-0196/</link><guid isPermaLink="false">CVE-2014-0196#kev</guid><pubDate>Fri, 12 May 2023 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2023-05-12. ENISA EUVD lists it as exploited. EPSS 20.3% (higher than 97.5% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&amp;CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 66.3 of 100.</description><category>kev</category><category>public-exploit</category><category>T1078</category><category>T1068</category></item><item><title>[KEV] CVE-2023-0266: Linux Kernel Use-After-Free Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-0266/</link><guid isPermaLink="false">CVE-2023-0266#kev</guid><pubDate>Thu, 30 Mar 2023 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 7.0 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 65.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>[KEV] CVE-2021-3493: Linux Kernel Privilege Escalation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2021-3493/</link><guid isPermaLink="false">CVE-2021-3493#kev</guid><pubDate>Thu, 20 Oct 2022 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2022-10-20. ENISA EUVD lists it as exploited. EPSS 49.2% (higher than 98.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 68.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1548</category></item><item><title>[KEV] CVE-2013-6282: Linux Kernel Improper Input Validation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2013-6282/</link><guid isPermaLink="false">CVE-2013-6282#kev</guid><pubDate>Thu, 15 Sep 2022 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 39.7% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 68.9 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1005</category></item><item><title>[KEV] CVE-2013-2094: Linux Kernel Privilege Escalation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2013-2094/</link><guid isPermaLink="false">CVE-2013-2094#kev</guid><pubDate>Thu, 15 Sep 2022 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 47.7% (higher than 98.8% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 68.6 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>[KEV] CVE-2013-2596: Linux Kernel Integer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2013-2596/</link><guid isPermaLink="false">CVE-2013-2596#kev</guid><pubDate>Thu, 15 Sep 2022 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 3.2% (higher than 88.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation. Priority 66.1 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category></item><item><title>[KEV] CVE-2014-3153: Linux Kernel Privilege Escalation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2014-3153/</link><guid isPermaLink="false">CVE-2014-3153#kev</guid><pubDate>Wed, 25 May 2022 00:00:00 GMT</pubDate><description>Linux · Kernel. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 37.2% (higher than 98.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&amp;CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 78.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1068</category><category>T1548</category></item></channel></rss>