Linux Enterprise Real Time
Vendor:
First CVE: Aug 14, 2009 · Active for 16 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.2
Avg CVEs / Year
Higher CVE frequency than 55% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
28.6%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Linux Enterprise Real Time over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 14, 2009
16 years ago
Most Recent CVE
Apr 22, 2026
96 days ago
CVE Severity & Scoring
Linux Enterprise Real Time7 CVEs
14%
86%
All CVEs352,727 CVEs
45%
40%
11%
LowHigh
Attack Vector
Local4 (57.1%)
Network0 (0.0%)
Unknown3 (42.9%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (57.1%)
High0 (0.0%)
Unknown3 (42.9%)
User Interaction
None4 (57.1%)
Unknown3 (42.9%)
Required0 (0.0%)
Privileges Required
Low4 (57.1%)
High0 (0.0%)
None0 (0.0%)
Unknown3 (42.9%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-31431HIGH In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c | Apr 22, 2026 | 7.8 | 99 | YES | YES |
CVE-2025-32463HIGH Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. | Jun 30, 2025 | 7.8 | 96 | YES | YES |
CVE-2009-2692HIGH The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local use | Aug 14, 2009 | 7.8 | 53 | NO | YES |
CVE-2010-2959HIGH Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and | Sep 8, 2010 | 7.2 | 35 | NO | YES |
CVE-2022-27239HIGH In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges. | Apr 27, 2022 | 7.8 | 26 | NO | NO |
CVE-2010-3865HIGH Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code vi | Jan 11, 2011 | 7.2 | 23 | NO | NO |
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before | Sep 8, 2010 | 1.9 | 13 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
2 CVEs
28.6% of CVEs· 98th percentile
Metasploit
3 CVEs
42.9% of CVEs· 98th percentile
Nuclei
2 CVEs
28.6% of CVEs· 98th percentile
ExploitDB
3 CVEs
42.9% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Linux Enterprise Real Time
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 15.0 | 3 | 7.8 | 73.3% | 2 | 2 |
| 11 | 3 | 5.4 | 1.6% | 0 | 1 |
| 10 | 1 | 7.8 | 14.6% | 0 | 1 |