Linux
- Software type
- Operating system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/26/2026, Linux recorded 2,678 security vulnerabilities in the last 90 days, of which 862 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Linux and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-99087dm-integrity: fix NULL pointer dereference when the 'R' flag is usedCVE-2026-99086dm-integrity: validate the superblock on resumeCVE-2026-99085sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF schedulerCVE-2026-99084readdir: take no inode lock on an immutable directoryCVE-2026-99083ksmbd: fix heap out-of-bounds write in krb5_authenticate()| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-99087dm-integrity: fix NULL pointer dereference when the 'R' flag is used | Exploitation statusNot confirmed | FixYes |
| SeverityUnknown |
CVE-2026-99086dm-integrity: validate the superblock on resume | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityUnknown |
|---|
CVE-2026-99085sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityUnknown |
|---|
CVE-2026-99084readdir: take no inode lock on an immutable directory | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityUnknown |
|---|
CVE-2026-99083ksmbd: fix heap out-of-bounds write in krb5_authenticate() | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityHigh |
|---|
CVE-2026-99082KVM: x86: Use active memslots for the per-vCPU MMIO cache | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityHigh |
|---|
CVE-2026-99081bnxt_en: fix DMA mapping length for padded small packets | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityHigh |
|---|
CVE-2026-99080fs: Free any excess xarray nodes in clear_inode() | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityUnknown |
|---|
CVE-2026-99079net/mlx5e: Prevent stale XSK buffer release on refill retry | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityCritical |
|---|
CVE-2026-99078net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityCritical |
|---|
18,103 Results | Page 1 of 1,811