linux CVE Vulnerabilities & Metrics

About linux Security Exposure

This page consolidates all known Common Vulnerabilities and Exposures (CVEs) associated with linux. We track both calendar-based metrics (using fixed periods) and rolling metrics (using gliding windows) to give you a comprehensive view of security trends and risk evolution. Use these insights to assess risk and plan your patching strategy.

For a broader perspective on cybersecurity threats, explore the comprehensive list of CVEs by vendor and product. Stay updated on critical vulnerabilities affecting major software and hardware providers.

Critical linux CVEs (CVSS ≥ 9) Over 20 Years

Top 5 Highest CVSS linux CVEs

These are the five CVEs with the highest CVSS scores for linux, sorted by severity first and recency.

• CVE-2021-25437 linux Published on 08 Jul 2021, 14:15 UTC (CVSS: 10.0)
  Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.
• CVE-2019-14901 linux Published on 29 Nov 2019, 15:15 UTC (CVSS: 10.0)
  A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permiss...
• CVE-2011-2717 linux Published on 27 Nov 2019, 21:15 UTC (CVSS: 10.0)
  The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.
• CVE-2019-14896 linux Published on 27 Nov 2019, 09:15 UTC (CVSS: 10.0)
  A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
• CVE-2019-15505 linux Published on 23 Aug 2019, 06:15 UTC (CVSS: 10.0)
  drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).