Kernel
Vendor:
First CVE: Jun 4, 2009 · Active for 17 years
41
Total CVEs
More Total CVEs than 97% of tracked products
4.6
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 49% of tracked products
2.4%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Kernel over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 4, 2009
17 years ago
Most Recent CVE
Jan 31, 2024
905 days ago
CVE Severity & Scoring
Kernel41 CVEs
15%
85%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local29 (70.7%)
Network3 (7.3%)
Unknown9 (22.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low27 (65.9%)
High5 (12.2%)
Unknown9 (22.0%)
User Interaction
None31 (75.6%)
Unknown9 (22.0%)
Required1 (2.4%)
Privileges Required
Low29 (70.7%)
High0 (0.0%)
None3 (7.3%)
Unknown9 (22.0%)
Top CVEs
Signals from CVEs in this product scope (41 CVEs).
41 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-1086HIGH A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows | Jan 31, 2024 | 7.8 | 79 | YES | NO |
CVE-2016-0957HIGH Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via u | Feb 10, 2016 | 7.5 | 60 | NO | YES |
CVE-2009-1385HIGH Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux ker | Jun 4, 2009 | 7.8 | 43 | NO | NO |
CVE-2009-2767HIGH The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via | Aug 14, 2009 | 7.2 | 30 | NO | YES |
CVE-2022-0742HIGH Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend up | Mar 18, 2022 | 7.5 | 28 | NO | NO |
CVE-2022-29581HIGH Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions | May 17, 2022 | 7.8 | 27 | NO | NO |
CVE-2014-2649HIGH Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors. | Oct 10, 2014 | 7.5 | 27 | NO | NO |
CVE-2009-1389HIGH Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and | Jun 16, 2009 | 7.8 | 27 | NO | NO |
CVE-2022-1055HIGH A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We | Mar 29, 2022 | 7.8 | 26 | NO | NO |
CVE-2021-3444HIGH The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to | Mar 23, 2021 | 7.8 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (41 CVEs).
CISA KEV
1 CVE
2.4% of CVEs· 96th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
2.4% of CVEs· 96th percentile
ExploitDB
2 CVEs
4.9% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (41 CVEs).
Media Mentions
Signals from CVEs in this product scope (41 CVEs).
Top CNAs Publishing CVEs For Kernel
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.6.25.15 | 7 | 6.7 | 6.4% | 0 | 2 |
| 2.6.24.7 | 7 | 6.7 | 6.4% | 0 | 2 |