# Linux vulnerabilities > Linux has 12,142 published vulnerabilities across 19 products in our catalogue. 80 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Linux kernel, with 12,101. If you run Linux software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/linux ## At a glance - **Published vulnerabilities:** 12,142 - **Known to be exploited:** 80 - **Products:** 19 - **Versions:** 5,729 - **Most recently added to the known-exploited list:** [CVE-2026-102490](https://www.precursorintelligence.com/what-is/cve-2026-102490), 2 October 2026. We keep watching the list. ## Which Linux products have the most vulnerabilities? - [Linux kernel](https://www.precursorintelligence.com/product/linux/linux_kernel): 12,101 published vulnerabilities, 5,163 versions - [Tizen](https://www.precursorintelligence.com/product/linux/tizen): 13 published vulnerabilities, 11 versions - [Kernel](https://www.precursorintelligence.com/product/linux/kernel): 12 published vulnerabilities, 151 versions - [Acrn](https://www.precursorintelligence.com/product/linux/acrn): 7 published vulnerabilities, 359 versions - [Util-Linux](https://www.precursorintelligence.com/product/linux/util-linux): 4 published vulnerabilities, 17 versions - [Mac80211](https://www.precursorintelligence.com/product/linux/mac80211): 3 published vulnerabilities, 0 versions - [Direct Connect](https://www.precursorintelligence.com/product/linux/direct_connect): 2 published vulnerabilities, 9 versions - [Linux](https://www.precursorintelligence.com/product/linux/linux): 1 published vulnerability, 0 versions - [Dhcp6c](https://www.precursorintelligence.com/product/linux/dhcp6c): 1 published vulnerability, 1 version - Linux Kernel I40e/i40evf: 1 published vulnerability, 0 versions Each product page lists its own known-exploited flaws. ## Which Linux vulnerabilities are being exploited? 80 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2026-102490](https://www.precursorintelligence.com/what-is/cve-2026-102490): Zammad GmbH Zammad Improper Privilege Management Vulnerability. Critical, CVSS 9.4, chance of use in 30 days 0.5%, known exploited since 2 October 2026. - [CVE-2026-102489](https://www.precursorintelligence.com/what-is/cve-2026-102489): Zammad GmbH Zammad Session Fixation Vulnerability. Critical, CVSS 9.4, chance of use in 30 days 1.3%, known exploited since 2 October 2026. - [CVE-2025-39682](https://www.precursorintelligence.com/what-is/cve-2025-39682): Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 2.9%, known exploited since 18 September 2026. - [CVE-2022-0995](https://www.precursorintelligence.com/what-is/cve-2022-0995): Linux Kernel Out-of-Bounds Write Vulnerability. High, CVSS 7.8, chance of use in 30 days 8.9%, known exploited since 26 August 2026. - [CVE-2022-0492](https://www.precursorintelligence.com/what-is/cve-2022-0492): Linux Kernel Improper Authentication Vulnerability. High, CVSS 7.8, chance of use in 30 days 5.5%, known exploited since 2 June 2026. - [CVE-2026-31431](https://www.precursorintelligence.com/what-is/cve-2026-31431): Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability. High, CVSS 7.8, chance of use in 30 days 3.4%, known exploited since 1 May 2026. - [CVE-2018-14634](https://www.precursorintelligence.com/what-is/cve-2018-14634): Linux Kernel Integer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 15%, known exploited since 26 January 2026. - [CVE-2025-41244](https://www.precursorintelligence.com/what-is/cve-2025-41244): Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability. High, CVSS 7.8, chance of use in 30 days 8.4%, known exploited since 30 October 2025. - [CVE-2021-22555](https://www.precursorintelligence.com/what-is/cve-2021-22555): Linux Kernel Heap Out-of-Bounds Write Vulnerability. High, CVSS 7.8, chance of use in 30 days 79%, known exploited since 6 October 2025. - [CVE-2025-10585](https://www.precursorintelligence.com/what-is/cve-2025-10585): Google Chromium V8 Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 5.4%, known exploited since 23 September 2025. - [CVE-2025-38352](https://www.precursorintelligence.com/what-is/cve-2025-38352): Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability. High, CVSS 7.4, chance of use in 30 days 1.3%, known exploited since 4 September 2025. - [CVE-2025-6554](https://www.precursorintelligence.com/what-is/cve-2025-6554): Google Chromium V8 Type Confusion Vulnerability. High, CVSS 8.1, chance of use in 30 days 14%, known exploited since 2 July 2025. - [CVE-2023-0386](https://www.precursorintelligence.com/what-is/cve-2023-0386): Linux Kernel Improper Ownership Management Vulnerability. High, CVSS 7.8, chance of use in 30 days 7.9%, known exploited since 17 June 2025. - [CVE-2025-34028](https://www.precursorintelligence.com/what-is/cve-2025-34028): Commvault Command Center Path Traversal Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 98%, known exploited since 2 May 2025. - [CVE-2025-3928](https://www.precursorintelligence.com/what-is/cve-2025-3928): Commvault Web Server Unspecified Vulnerability. High, CVSS 8.8, chance of use in 30 days 2.5%, known exploited since 28 April 2025. - [CVE-2024-53197](https://www.precursorintelligence.com/what-is/cve-2024-53197): Linux Kernel Out-of-Bounds Access Vulnerability. High, CVSS 7.8, chance of use in 30 days 4.1%, known exploited since 9 April 2025. - [CVE-2024-53150](https://www.precursorintelligence.com/what-is/cve-2024-53150): Linux Kernel Out-of-Bounds Read Vulnerability. High, CVSS 7.1, chance of use in 30 days 1.4%, known exploited since 9 April 2025. - [CVE-2024-50302](https://www.precursorintelligence.com/what-is/cve-2024-50302): Linux Kernel Use of Uninitialized Resource Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 0.8%, known exploited since 4 March 2025. - [CVE-2024-53104](https://www.precursorintelligence.com/what-is/cve-2024-53104): Linux Kernel Out-of-Bounds Write Vulnerability. High, CVSS 7.8, chance of use in 30 days 3.4%, known exploited since 5 February 2025. - [CVE-2014-0497](https://www.precursorintelligence.com/what-is/cve-2014-0497): Adobe Flash Player Integer Underflow Vulnerablity. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 17 September 2024. - [CVE-2013-0648](https://www.precursorintelligence.com/what-is/cve-2013-0648): Adobe Flash Player Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 17 September 2024. - [CVE-2014-0502](https://www.precursorintelligence.com/what-is/cve-2014-0502): Adobe Flash Player Double Free Vulnerablity. High, CVSS 8.8, chance of use in 30 days 25%, known exploited since 17 September 2024. - [CVE-2013-0643](https://www.precursorintelligence.com/what-is/cve-2013-0643): Adobe Flash Player Incorrect Default Permissions Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 17 September 2024. - [CVE-2017-1000253](https://www.precursorintelligence.com/what-is/cve-2017-1000253): Linux Kernel PIE Stack Buffer Corruption Vulnerability. High, CVSS 7.8, chance of use in 30 days 11%, known exploited since 9 September 2024. - [CVE-2022-0185](https://www.precursorintelligence.com/what-is/cve-2022-0185): Linux Kernel Heap-Based Buffer Overflow Vulnerability. High, CVSS 8.4, chance of use in 30 days 25%, known exploited since 21 August 2024. - [CVE-2024-36971](https://www.precursorintelligence.com/what-is/cve-2024-36971): Android Kernel Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 2.7%, known exploited since 7 August 2024. - [CVE-2022-2586](https://www.precursorintelligence.com/what-is/cve-2022-2586): Linux Kernel Use-After-Free Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 10%, known exploited since 26 June 2024. - [CVE-2024-1086](https://www.precursorintelligence.com/what-is/cve-2024-1086): Linux Kernel Use-After-Free Vulnerability. High, CVSS 7.8, chance of use in 30 days 28%, known exploited since 30 May 2024. - [CVE-2023-3079](https://www.precursorintelligence.com/what-is/cve-2023-3079): Google Chromium V8 Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 38%, known exploited since 7 June 2023. - [CVE-2010-3904](https://www.precursorintelligence.com/what-is/cve-2010-3904): Linux Kernel Improper Input Validation Vulnerability. High, CVSS 7.8, chance of use in 30 days 16%, known exploited since 12 May 2023. - [CVE-2014-0196](https://www.precursorintelligence.com/what-is/cve-2014-0196): Linux Kernel Race Condition Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 22%, known exploited since 12 May 2023. - [CVE-2023-0266](https://www.precursorintelligence.com/what-is/cve-2023-0266): Linux Kernel Use-After-Free Vulnerability. High, CVSS 7.9, chance of use in 30 days 3.7%, known exploited since 30 March 2023. - [CVE-2022-47986](https://www.precursorintelligence.com/what-is/cve-2022-47986): IBM Aspera Faspex Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 21 February 2023. - [CVE-2013-6282](https://www.precursorintelligence.com/what-is/cve-2013-6282): Linux Kernel Improper Input Validation Vulnerability. High, CVSS 8.8, chance of use in 30 days 40%, known exploited since 15 September 2022. - [CVE-2013-2094](https://www.precursorintelligence.com/what-is/cve-2013-2094): Linux Kernel Privilege Escalation Vulnerability. High, CVSS 8.4, chance of use in 30 days 48%, known exploited since 15 September 2022. - [CVE-2013-2596](https://www.precursorintelligence.com/what-is/cve-2013-2596): Linux Kernel Integer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 3.2%, known exploited since 15 September 2022. - [CVE-2022-2856](https://www.precursorintelligence.com/what-is/cve-2022-2856): Google Chromium Intents Insufficient Input Validation Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 4.6%, known exploited since 18 August 2022. - [CVE-2022-30333](https://www.precursorintelligence.com/what-is/cve-2022-30333): RARLAB UnRAR Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 9 August 2022. - [CVE-2016-5198](https://www.precursorintelligence.com/what-is/cve-2016-5198): Google Chromium V8 Out-of-Bounds Memory Vulnerability. High, CVSS 8.8, chance of use in 30 days 34%, known exploited since 8 June 2022. - [CVE-2017-5070](https://www.precursorintelligence.com/what-is/cve-2017-5070): Google Chromium V8 Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 32%, known exploited since 8 June 2022. - [CVE-2017-5030](https://www.precursorintelligence.com/what-is/cve-2017-5030): Google Chromium V8 Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 41%, known exploited since 8 June 2022. - [CVE-2012-0754](https://www.precursorintelligence.com/what-is/cve-2012-0754): Adobe Flash Player Memory Corruption Vulnerability. High, CVSS 8.1, chance of use in 30 days 91%, known exploited since 8 June 2022. - [CVE-2011-0609](https://www.precursorintelligence.com/what-is/cve-2011-0609): Adobe Flash Player Unspecified Vulnerability. High, CVSS 7.8, chance of use in 30 days 64%, known exploited since 8 June 2022. - [CVE-2012-0767](https://www.precursorintelligence.com/what-is/cve-2012-0767): Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.1, chance of use in 30 days 6.2%, known exploited since 8 June 2022. - [CVE-2015-0310](https://www.precursorintelligence.com/what-is/cve-2015-0310): Adobe Flash Player ASLR Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 15%, known exploited since 25 May 2022. - [CVE-2016-0984](https://www.precursorintelligence.com/what-is/cve-2016-0984): Adobe Flash Player and AIR Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 55%, known exploited since 25 May 2022. - [CVE-2015-8651](https://www.precursorintelligence.com/what-is/cve-2015-8651): Adobe Flash Player Integer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 68%, known exploited since 25 May 2022. - [CVE-2014-8439](https://www.precursorintelligence.com/what-is/cve-2014-8439): Adobe Flash Player Dereferenced Pointer Vulnerability. High, CVSS 8.8, chance of use in 30 days 20%, known exploited since 25 May 2022. - [CVE-2016-1010](https://www.precursorintelligence.com/what-is/cve-2016-1010): Adobe Flash Player and AIR Integer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 19%, known exploited since 25 May 2022. - [CVE-2014-3153](https://www.precursorintelligence.com/what-is/cve-2014-3153): Linux Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 37%, known exploited since 25 May 2022. - [CVE-2018-5002](https://www.precursorintelligence.com/what-is/cve-2018-5002): Adobe Flash Player Stack-based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 25%, known exploited since 23 May 2022. - [CVE-2021-0920](https://www.precursorintelligence.com/what-is/cve-2021-0920): Android Kernel Race Condition Vulnerability. Medium, CVSS 6.4, chance of use in 30 days 0.9%, known exploited since 23 May 2022. - [CVE-2022-0847](https://www.precursorintelligence.com/what-is/cve-2022-0847): Linux Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 93%, known exploited since 25 April 2022. - [CVE-2022-22960](https://www.precursorintelligence.com/what-is/cve-2022-22960): VMware Multiple Products Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 36%, known exploited since 15 April 2022. - [CVE-2022-22954](https://www.precursorintelligence.com/what-is/cve-2022-22954): VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 14 April 2022. - [CVE-2015-3113](https://www.precursorintelligence.com/what-is/cve-2015-3113): Adobe Flash Player Heap-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 13 April 2022. - [CVE-2015-0311](https://www.precursorintelligence.com/what-is/cve-2015-0311): Adobe Flash Player Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 86%, known exploited since 13 April 2022. - [CVE-2014-9163](https://www.precursorintelligence.com/what-is/cve-2014-9163): Adobe Flash Player Stack-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 21%, known exploited since 13 April 2022. - [CVE-2015-5123](https://www.precursorintelligence.com/what-is/cve-2015-5123): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 19%, known exploited since 13 April 2022. - [CVE-2015-5122](https://www.precursorintelligence.com/what-is/cve-2015-5122): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 13 April 2022. - [CVE-2015-0313](https://www.precursorintelligence.com/what-is/cve-2015-0313): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 13 April 2022. - [CVE-2021-22600](https://www.precursorintelligence.com/what-is/cve-2021-22600): Linux Kernel Privilege Escalation Vulnerability. Medium, CVSS 6.6, chance of use in 30 days 6.6%, known exploited since 11 April 2022. - [CVE-2012-2034](https://www.precursorintelligence.com/what-is/cve-2012-2034): Adobe Flash Player Memory Corruption Vulnerability. High, CVSS 7.5, chance of use in 30 days 7.7%, known exploited since 28 March 2022. - [CVE-2016-4171](https://www.precursorintelligence.com/what-is/cve-2016-4171): Adobe Flash Player Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 20%, known exploited since 25 March 2022. - [CVE-2016-7892](https://www.precursorintelligence.com/what-is/cve-2016-7892): Adobe Flash Player Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 19%, known exploited since 25 March 2022. - [CVE-2015-3043](https://www.precursorintelligence.com/what-is/cve-2015-3043): Adobe Flash Player Memory Corruption Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 74%, known exploited since 3 March 2022. - [CVE-2015-5119](https://www.precursorintelligence.com/what-is/cve-2015-5119): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 March 2022. - [CVE-2016-1019](https://www.precursorintelligence.com/what-is/cve-2016-1019): Adobe Flash Player Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 22%, known exploited since 3 March 2022. - [CVE-2016-7855](https://www.precursorintelligence.com/what-is/cve-2016-7855): Adobe Flash Player Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 25%, known exploited since 3 March 2022. - [CVE-2011-0611](https://www.precursorintelligence.com/what-is/cve-2011-0611): Adobe Flash Player Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days >99%, known exploited since 3 March 2022. - [CVE-2017-11292](https://www.precursorintelligence.com/what-is/cve-2017-11292): Adobe Flash Player Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 12%, known exploited since 3 March 2022. - [CVE-2012-1535](https://www.precursorintelligence.com/what-is/cve-2012-1535): Adobe Flash Player Arbitrary Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 70%, known exploited since 3 March 2022. - [CVE-2015-7645](https://www.precursorintelligence.com/what-is/cve-2015-7645): Adobe Flash Player Arbitrary Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 65%, known exploited since 3 March 2022. - [CVE-2013-0640](https://www.precursorintelligence.com/what-is/cve-2013-0640): Adobe Reader and Acrobat Memory Corruption Vulnerability. High, CVSS 7.8, chance of use in 30 days 87%, known exploited since 3 March 2022. - [CVE-2013-0641](https://www.precursorintelligence.com/what-is/cve-2013-0641): Adobe Reader Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 32%, known exploited since 3 March 2022. - [CVE-2016-5195](https://www.precursorintelligence.com/what-is/cve-2016-5195): Linux Kernel Race Condition Vulnerability. High, CVSS 7.0, chance of use in 30 days 84%, known exploited since 3 March 2022. - [CVE-2018-15982](https://www.precursorintelligence.com/what-is/cve-2018-15982): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 15 February 2022. - [CVE-2019-13272](https://www.precursorintelligence.com/what-is/cve-2019-13272): Linux Kernel Improper Privilege Management Vulnerability. High, CVSS 7.8, chance of use in 30 days 52%, known exploited since 10 December 2021. - [CVE-2018-4878](https://www.precursorintelligence.com/what-is/cve-2018-4878): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 3 November 2021. - [CVE-2020-4006](https://www.precursorintelligence.com/what-is/cve-2020-4006): Multiple VMware Products Command Injection Vulnerability. Critical, CVSS 9.1, chance of use in 30 days 17%, known exploited since 3 November 2021. ## Which Linux flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2009-3733](https://www.precursorintelligence.com/what-is/cve-2009-3733): 83%, Medium (CVSS 5.0) - [CVE-2008-5499](https://www.precursorintelligence.com/what-is/cve-2008-5499): 79%, Critical (CVSS 9.3) - [CVE-1999-0128](https://www.precursorintelligence.com/what-is/cve-1999-0128): 75%, Medium (CVSS 5.0) - [CVE-2003-0001](https://www.precursorintelligence.com/what-is/cve-2003-0001): 73%, Medium (CVSS 5.0) - [CVE-1999-0513](https://www.precursorintelligence.com/what-is/cve-1999-0513): 71%, Medium (CVSS 5.0) - [CVE-2010-3654](https://www.precursorintelligence.com/what-is/cve-2010-3654): 70%, Critical (CVSS 9.3) - [CVE-2007-6514](https://www.precursorintelligence.com/what-is/cve-2007-6514): 38%, Medium (CVSS 4.3) ## All Linux products we track 13 products with at least one tracked version, most vulnerabilities first: - [Linux kernel](https://www.precursorintelligence.com/product/linux/linux_kernel): 12,101 vulnerabilities, 5,163 versions - [Tizen](https://www.precursorintelligence.com/product/linux/tizen): 13 vulnerabilities, 11 versions - [Kernel](https://www.precursorintelligence.com/product/linux/kernel): 12 vulnerabilities, 151 versions - [Acrn](https://www.precursorintelligence.com/product/linux/acrn): 7 vulnerabilities, 359 versions - [Util-Linux](https://www.precursorintelligence.com/product/linux/util-linux): 4 vulnerabilities, 17 versions - [Direct Connect](https://www.precursorintelligence.com/product/linux/direct_connect): 2 vulnerabilities, 9 versions - [Dhcp6c](https://www.precursorintelligence.com/product/linux/dhcp6c): 1 vulnerability, 1 version - [Infiniband Hfi1 Driver](https://www.precursorintelligence.com/product/linux/infiniband_hfi1_driver): 1 vulnerability, 1 version - [Linux Kernel-Rt](https://www.precursorintelligence.com/product/linux/linux_kernel-rt): 1 vulnerability, 1 version - [Parduslinux](https://www.precursorintelligence.com/product/linux/parduslinux): 1 vulnerability, 2 versions - [Systemd](https://www.precursorintelligence.com/product/linux/systemd): 1 vulnerability, 1 version - [Linux Kernel Ixgbe](https://www.precursorintelligence.com/product/linux/linux_kernel_ixgbe): 1 vulnerability, 1 version - [Ipsec Tools Racoon Daemon](https://www.precursorintelligence.com/product/linux/ipsec_tools_racoon_daemon): 1 vulnerability, 12 versions ## Questions ### How many vulnerabilities does Linux have? Our catalogue lists 12,142 published vulnerabilities across 19 products and 5,729 versions from Linux. The most recent Linux flaw added to the known-exploited list is CVE-2026-102490, on 2 October 2026. ### Which Linux vulnerabilities are being exploited? 80 Linux vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-102490, CVE-2026-102489 and CVE-2025-39682. The full list is on this page. ### Which Linux product has the most vulnerabilities? Linux kernel, with 12,101 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Linux vulnerabilities? Create a Precursor Intelligence account and track the Linux products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Linux? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact