0 spills in 2025 for Linux kernel
Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.
Past orders
- criticalpatched Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability Microsoft.AspNetCore.App.Runtime.linux-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (nuget) +7 more ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An aborted Kestrel HTTP/1 connection can reparse unread request-body bytes as…
- criticalpatched Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability Microsoft.AspNetCore.App.Runtime.linux-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget), Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (nuget) +7 more ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Kestrel accepts newline characters in HTTP/2 request trailers and values…
- highpatchedexploited Linux Kernel Race Condition Vulnerability Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state. Can be chained with CVE-2026-53266, CVE-2025-39682. Added to CISA KEV on 2026-09-18 (federal deadline 2026-09-21).
- highpatchedexploited Linux Kernel Unspecified Vulnerability Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux. Added to CISA KEV on 2026-08-27 (federal deadline 2026-08-30).
- highpatchedexploited Linux Kernel Out-of-Bounds Write Vulnerability Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system. Added to CISA KEV on 2026-08-26 (federal deadline 2026-08-29).
- highpatchedexploited Linux Kernel Improper Authentication Vulnerability Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature. Added to CISA KEV on 2026-06-02 (federal deadline 2026-06-05).
- highpatchedexploited Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation. Added to CISA KEV on 2026-05-01 (federal deadline 2026-05-15).
- highpatchedexploited Linux Kernel Integer Overflow Vulnerability Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system. Added to CISA KEV on 2026-01-26 (federal deadline 2026-02-16).
Follow Linux kernel
RSS: /feed.xml?stack=linux. JSON: /incidents.json?stack=linux. Or add it to your usual for delivery.