{"schema_version":"1","data":[{"id":2951,"advisory_id":"7a0136f3-223d-4960-9f5f-a8d368f176b1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-13272","source_published_at":"2021-12-10T00:00:00+00:00","published_at":"2026-10-24T21:26:46.901626+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2019-13272"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Improper Privilege Management Vulnerability","summary":"Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-13272","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-13272","aliases":["CVE-2019-13272"],"affected":[],"modified":"2021-12-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-269"],"cveID":"CVE-2019-13272","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-13272","dueDate":"2022-06-10","product":"Kernel","dateAdded":"2021-12-10","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.","vulnerabilityName":"Linux Kernel Improper Privilege Management Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-13272","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2831,"advisory_id":"cedcf357-2993-403b-bf43-fd356359df93","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-5195","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:28.146658+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2016-5195"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Race Condition Vulnerability","summary":"Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-5195","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-5195","aliases":["CVE-2016-5195"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362"],"cveID":"CVE-2016-5195","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-5195","dueDate":"2022-03-24","product":"Kernel","dateAdded":"2022-03-03","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-5195","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2637,"advisory_id":"31cf82f9-5e09-4c2e-be07-8f301068ee6a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22600","source_published_at":"2022-04-11T00:00:00+00:00","published_at":"2026-10-24T21:22:00.122742+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2021-22600"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Privilege Escalation Vulnerability","summary":"Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-22600","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-22600","aliases":["CVE-2021-22600"],"affected":[],"modified":"2022-04-11T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-415"],"cveID":"CVE-2021-22600","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22600","dueDate":"2022-05-02","product":"Kernel","dateAdded":"2022-04-11","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-22600","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2605,"advisory_id":"f67e3f95-0718-4646-b4cc-2ef22cda2771","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0847","source_published_at":"2022-04-25T00:00:00+00:00","published_at":"2026-10-24T21:21:40.56066+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2022-0847"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Privilege Escalation Vulnerability","summary":"Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\" CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-0847","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-0847","aliases":["CVE-2022-0847"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-665"],"cveID":"CVE-2022-0847","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-0847","dueDate":"2022-05-16","product":"Kernel","dateAdded":"2022-04-25","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-0847","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2577,"advisory_id":"16d0654c-81ab-4fb1-a8c9-0984acca4aca","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1048","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:20:32.239162+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2021-1048"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Android Kernel Use-After-Free Vulnerability","summary":"Android kernel contains a use-after-free vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1048","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1048","aliases":["CVE-2021-1048"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-1048","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1048","dueDate":"2022-06-13","product":"Kernel","dateAdded":"2022-05-23","vendorProject":"Android","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Android kernel contains a use-after-free vulnerability that allows for privilege escalation.","vulnerabilityName":"Android Kernel Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-1048","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2574,"advisory_id":"4bff78bf-8389-4be4-9156-07b1428baf7c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-0920","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:20:30.483095+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2021-0920"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Android Kernel Race Condition Vulnerability","summary":"Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-0920","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-0920","aliases":["CVE-2021-0920"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362","CWE-416"],"cveID":"CVE-2021-0920","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-0920","dueDate":"2022-06-13","product":"Kernel","dateAdded":"2022-05-23","vendorProject":"Android","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.","vulnerabilityName":"Android Kernel Race Condition Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-0920","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2541,"advisory_id":"3c72d9df-d987-41c7-b310-ee3b9a1121d3","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-3153","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:11.135222+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2014-3153"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Privilege Escalation Vulnerability","summary":"The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-3153","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-3153","aliases":["CVE-2014-3153"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-269"],"cveID":"CVE-2014-3153","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-3153","dueDate":"2022-06-15","product":"Kernel","dateAdded":"2022-05-25","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-3153","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1432,"advisory_id":"3c0fc487-6afc-481c-805b-c7296d409747","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2094","source_published_at":"2022-09-15T00:00:00+00:00","published_at":"2026-10-24T21:02:29.684281+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2013-2094"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Privilege Escalation Vulnerability","summary":"Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-2094","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-2094","aliases":["CVE-2013-2094"],"affected":[],"modified":"2022-09-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2013-2094","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8176cced706b5e5d15887584150764894e94e02f; https://nvd.nist.gov/vuln/detail/CVE-2013-2094","dueDate":"2022-10-06","product":"Kernel","dateAdded":"2022-09-15","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-2094","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1429,"advisory_id":"bf8f7e41-fe93-4095-adfe-db6cc49161d4","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2596","source_published_at":"2022-09-15T00:00:00+00:00","published_at":"2026-10-24T21:02:27.08929+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2013-2596"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Integer Overflow Vulnerability","summary":"Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-2596","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-2596","aliases":["CVE-2013-2596"],"affected":[],"modified":"2022-09-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2013-2596","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fc9bbca8f650e5f738af8806317c0a041a48ae4a; https://nvd.nist.gov/vuln/detail/CVE-2013-2596","dueDate":"2022-10-06","product":"Kernel","dateAdded":"2022-09-15","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.","vulnerabilityName":"Linux Kernel Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-2596","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1428,"advisory_id":"57fc55ef-a4ad-4de7-b6aa-3aa0676e3e99","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-6282","source_published_at":"2022-09-15T00:00:00+00:00","published_at":"2026-10-24T21:02:26.477359+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2013-6282"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Improper Input Validation Vulnerability","summary":"The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-6282","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-6282","aliases":["CVE-2013-6282"],"affected":[],"modified":"2022-09-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2013-6282","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8404663f81d212918ff85f493649a7991209fa04; https://nvd.nist.gov/vuln/detail/CVE-2013-6282","dueDate":"2022-10-06","product":"Kernel","dateAdded":"2022-09-15","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.","vulnerabilityName":"Linux Kernel Improper Input Validation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-6282","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1419,"advisory_id":"04d42968-d906-4b12-a5cf-7e969079959c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3493","source_published_at":"2022-10-20T00:00:00+00:00","published_at":"2026-10-24T21:02:17.968585+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2021-3493"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Privilege Escalation Vulnerability","summary":"The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-3493","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-3493","aliases":["CVE-2021-3493"],"affected":[],"modified":"2022-10-20T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-862"],"cveID":"CVE-2021-3493","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52; https://nvd.nist.gov/vuln/detail/CVE-2021-3493","dueDate":"2022-11-10","product":"Kernel","dateAdded":"2022-10-20","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-3493","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1361,"advisory_id":"fd1bd6df-3483-4ea5-b8a4-d1a39d9aaa18","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0266","source_published_at":"2023-03-30T00:00:00+00:00","published_at":"2026-10-24T21:01:40.560697+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2023-0266"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Use-After-Free Vulnerability","summary":"Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-0266","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-0266","aliases":["CVE-2023-0266"],"affected":[],"modified":"2023-03-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2023-0266","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.10/alsa-pcm-move-rwsem-lock-inside-snd_ctl_elem_read-to-prevent-uaf.patch?id=72783cf35e6c55bca84c4bb7b776c58152856fd4;  https://nvd.nist.gov/vuln/detail/CVE-2023-0266","dueDate":"2023-04-20","product":"Kernel","dateAdded":"2023-03-30","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user.","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-0266","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1328,"advisory_id":"71f16e20-1158-4738-97e5-f5f35288f254","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0196","source_published_at":"2023-05-12T00:00:00+00:00","published_at":"2026-10-24T21:00:29.586761+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2014-0196"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Race Condition Vulnerability","summary":"Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-0196","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0196","aliases":["CVE-2014-0196"],"affected":[],"modified":"2023-05-12T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362"],"cveID":"CVE-2014-0196","notes":"https://lkml.iu.edu/hypermail/linux/kernel/1609.1/02103.html; https://nvd.nist.gov/vuln/detail/CVE-2014-0196","dueDate":"2023-06-02","product":"Kernel","dateAdded":"2023-05-12","vendorProject":"Linux","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0196","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1327,"advisory_id":"93a01a11-222b-4282-9fac-0f61554cb695","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3904","source_published_at":"2023-05-12T00:00:00+00:00","published_at":"2026-10-24T21:00:28.363397+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2010-3904"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Improper Input Validation Vulnerability","summary":"Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2010-3904","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-3904","aliases":["CVE-2010-3904"],"affected":[],"modified":"2023-05-12T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2010-3904","notes":"https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html; https://nvd.nist.gov/vuln/detail/CVE-2010-3904","dueDate":"2023-06-02","product":"Kernel","dateAdded":"2023-05-12","vendorProject":"Linux","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","vulnerabilityName":"Linux Kernel Improper Input Validation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2010-3904","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1139,"advisory_id":"47473cfe-8978-48b1-a728-405aa3dad5e5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-1086","source_published_at":"2024-05-30T00:00:00+00:00","published_at":"2026-10-24T20:56:57.397145+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2024-1086"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Use-After-Free Vulnerability","summary":"Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-1086","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-1086","aliases":["CVE-2024-1086"],"affected":[],"modified":"2024-05-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2024-1086","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660;   https://nvd.nist.gov/vuln/detail/CVE-2024-1086","dueDate":"2024-06-20","product":"Kernel","dateAdded":"2024-05-30","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2024-1086","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1131,"advisory_id":"8fbe798e-eda3-408a-8eba-5f4ba3ee65bf","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586","source_published_at":"2024-06-26T00:00:00+00:00","published_at":"2026-10-24T20:56:52.550254+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2022-2586"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Use-After-Free Vulnerability","summary":"Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges. CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","evidence":"kev:CVE-2022-2586","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-2586","aliases":["CVE-2022-2586"],"affected":[],"modified":"2024-06-26T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2022-2586","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131;  https://nvd.nist.gov/vuln/detail/CVE-2022-2586","dueDate":"2024-07-17","product":"Kernel","dateAdded":"2024-06-26","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges. ","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-2586","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"medium","linked_cves":[{"cve":"CVE-2022-2586","metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"products":[{"name":{"value":"linux","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2022-2586","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1113,"advisory_id":"d5c5f3cb-6fec-4cf4-9563-8c56df701831","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971","source_published_at":"2024-08-07T00:00:00+00:00","published_at":"2026-10-24T20:56:42.302396+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2024-36971"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Android Kernel Remote Code Execution Vulnerability","summary":"Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-36971","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-36971","aliases":["CVE-2024-36971"],"affected":[],"modified":"2024-08-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2024-36971","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see:   https://source.android.com/docs/security/bulletin/2024-08-01,  https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u ; https://nvd.nist.gov/vuln/detail/CVE-2024-36971","dueDate":"2024-08-28","product":"Kernel","dateAdded":"2024-08-07","vendorProject":"Android","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.","vulnerabilityName":"Android Kernel Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-36971","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1101,"advisory_id":"4e56f8b0-b2af-4f8c-a8ba-15429e6a26b7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0185","source_published_at":"2024-08-21T00:00:00+00:00","published_at":"2026-10-24T20:56:34.154841+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2022-0185"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","summary":"Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges. CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","evidence":"kev:CVE-2022-0185","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-0185","aliases":["CVE-2022-0185"],"affected":[],"modified":"2024-08-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-190"],"cveID":"CVE-2022-0185","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=722d94847de2; https://nvd.nist.gov/vuln/detail/CVE-2022-0185","dueDate":"2024-09-11","product":"Kernel","dateAdded":"2024-08-21","vendorProject":"Linux","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","known_exploited":true,"shortDescription":"Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.","vulnerabilityName":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-0185","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1092,"advisory_id":"91cefefd-116e-4a95-a0a2-86bd144acfd5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-1000253","source_published_at":"2024-09-09T00:00:00+00:00","published_at":"2026-10-24T20:56:27.661017+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2017-1000253"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel PIE Stack Buffer Corruption Vulnerability","summary":"Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2017-1000253","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-1000253","aliases":["CVE-2017-1000253"],"affected":[],"modified":"2024-09-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2017-1000253","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a87938b2e246b81b4fb713edb371a9fa3c5c3c86; https://nvd.nist.gov/vuln/detail/CVE-2017-1000253","dueDate":"2024-09-30","product":"Kernel","dateAdded":"2024-09-09","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. ","vulnerabilityName":"Linux Kernel PIE Stack Buffer Corruption Vulnerability ","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2017-1000253","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":498,"advisory_id":"8f180a4d-fa27-468e-bf33-7b3f68b7b013","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-53104","source_published_at":"2025-02-05T00:00:00+00:00","published_at":"2026-10-24T20:46:50.803635+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2024-53104"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Out-of-Bounds Write Vulnerability","summary":"Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-53104","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-53104","aliases":["CVE-2024-53104"],"affected":[],"modified":"2025-02-05T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2024-53104","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024120232-CVE-2024-53104-d781@gregkh/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-53104","dueDate":"2025-02-26","product":"Kernel","dateAdded":"2025-02-05","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.","vulnerabilityName":"Linux Kernel Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-53104","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":472,"advisory_id":"1e7eb253-ec14-4ed3-9b69-9449c98f1644","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-50302","source_published_at":"2025-03-04T00:00:00+00:00","published_at":"2026-10-24T20:46:33.743284+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2024-50302"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Use of Uninitialized Resource Vulnerability","summary":"The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-50302","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-50302","aliases":["CVE-2024-50302"],"affected":[],"modified":"2025-03-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-908"],"cveID":"CVE-2024-50302","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-50302","dueDate":"2025-03-25","product":"Kernel","dateAdded":"2025-03-04","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.","vulnerabilityName":"Linux Kernel Use of Uninitialized Resource Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-50302","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":439,"advisory_id":"0afd734c-dac8-4f01-9b43-5280bc0409bc","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-53197","source_published_at":"2025-04-09T00:00:00+00:00","published_at":"2026-10-24T20:45:28.405469+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2024-53197"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Out-of-Bounds Access Vulnerability","summary":"Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-53197","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-53197","aliases":["CVE-2024-53197"],"affected":[],"modified":"2025-04-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2024-53197","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024122725-CVE-2024-53197-6aef@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53197","dueDate":"2025-04-30","product":"Kernel","dateAdded":"2025-04-09","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.","vulnerabilityName":"Linux Kernel Out-of-Bounds Access Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-53197","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":438,"advisory_id":"4aefa169-1291-455c-915f-da88aa8bc7b8","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-53150","source_published_at":"2025-04-09T00:00:00+00:00","published_at":"2026-10-24T20:45:27.601087+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2024-53150"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Out-of-Bounds Read Vulnerability","summary":"Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-53150","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-53150","aliases":["CVE-2024-53150"],"affected":[],"modified":"2025-04-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-125"],"cveID":"CVE-2024-53150","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024122427-CVE-2024-53150-3a7d@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53150","dueDate":"2025-04-30","product":"Kernel","dateAdded":"2025-04-09","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.","vulnerabilityName":"Linux Kernel Out-of-Bounds Read Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-53150","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":390,"advisory_id":"f2aa9416-f1c6-4077-8dde-7730ec14e7d7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-0386","source_published_at":"2025-06-17T00:00:00+00:00","published_at":"2026-10-24T20:44:58.044303+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2023-0386"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Improper Ownership Management Vulnerability","summary":"Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-0386","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-0386","aliases":["CVE-2023-0386"],"affected":[],"modified":"2025-06-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-282"],"cveID":"CVE-2023-0386","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a ; https://access.redhat.com/security/cve/cve-2023-0386 ; https://security.netapp.com/advisory/ntap-20230420-0004/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-0386","dueDate":"2025-07-08","product":"Kernel","dateAdded":"2025-06-17","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains an improper ownership management vulnerability, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.","vulnerabilityName":"Linux Kernel Improper Ownership Management Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-0386","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":344,"advisory_id":"1c4dc763-648f-44ee-949d-64b2d82d6a76","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352","source_published_at":"2025-09-04T00:00:00+00:00","published_at":"2026-10-24T20:44:28.088241+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2025-38352"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","summary":"Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2025-38352","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-38352","aliases":["CVE-2025-38352"],"affected":[],"modified":"2025-09-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-367"],"cveID":"CVE-2025-38352","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff ; https://source.android.com/docs/security/bulletin/2025-09-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-38352","dueDate":"2025-09-25","product":"Kernel","dateAdded":"2025-09-04","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.","vulnerabilityName":"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2025-38352","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":322,"advisory_id":"564bd9e5-5817-4b6f-a686-31abbd0e94dc","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22555","source_published_at":"2025-10-06T00:00:00+00:00","published_at":"2026-10-24T20:43:26.052075+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2021-22555"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Heap Out-of-Bounds Write Vulnerability","summary":"Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2021-22555","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-22555","aliases":["CVE-2021-22555"],"affected":[],"modified":"2025-10-06T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-22555","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21 ; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d ; https://security.netapp.com/advisory/ntap-20210805-0010/ ; https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22555","dueDate":"2025-10-27","product":"Kernel","dateAdded":"2025-10-06","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.","vulnerabilityName":"Linux Kernel Heap Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-22555","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":258,"advisory_id":"b740cf24-5d79-4715-8175-6f0826126dbd","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-14634","source_published_at":"2026-01-26T00:00:00+00:00","published_at":"2026-10-24T20:42:48.97149+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2018-14634"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Integer Overflow Vulnerability","summary":"Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2018-14634","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-14634","aliases":["CVE-2018-14634"],"affected":[],"modified":"2026-01-26T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-190"],"cveID":"CVE-2018-14634","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://www.kernel.org/ ; https://www.cve.org/CVERecord?id=CVE-2018-14634 ; https://access.redhat.com/errata/RHSA-2018:3540 ; https://nvd.nist.gov/vuln/detail/CVE-2018-14634","dueDate":"2026-02-16","product":"Kernel","dateAdded":"2026-01-26","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.","vulnerabilityName":"Linux Kernel Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-14634","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":170,"advisory_id":"387d3a13-9235-4619-bd22-1253eb996461","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-31431","source_published_at":"2026-05-01T00:00:00+00:00","published_at":"2026-10-24T20:41:54.885627+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2026-31431"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","summary":"Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation. CISA required action: \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2026-31431","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-31431","aliases":["CVE-2026-31431"],"affected":[],"modified":"2026-05-01T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-669"],"cveID":"CVE-2026-31431","notes":"https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/; https://xint.io/blog/copy-fail-linux-distributions#the-fix-6 ; https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-31431","dueDate":"2026-05-15","product":"Kernel","dateAdded":"2026-05-01","vendorProject":"Linux","requiredAction":"\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.","vulnerabilityName":"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2026-31431","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":147,"advisory_id":"abe8f6f9-67bf-4458-9e1f-42ddd5e1b889","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0492","source_published_at":"2026-06-02T00:00:00+00:00","published_at":"2026-10-24T20:41:40.415393+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2022-0492"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Improper Authentication Vulnerability","summary":"Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2022-0492","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-0492","aliases":["CVE-2022-0492"],"affected":[],"modified":"2026-06-02T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287","CWE-862"],"cveID":"CVE-2022-0492","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af ; https://www.kernel.org/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-0492","dueDate":"2026-06-05","product":"Kernel","dateAdded":"2026-06-02","vendorProject":"Linux","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","vulnerabilityName":"Linux Kernel Improper Authentication Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-0492","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":79,"advisory_id":"0f149825-3e3b-48f7-9cb4-0fa1438d665f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0995","source_published_at":"2026-08-26T00:00:00+00:00","published_at":"2026-10-24T20:40:10.207298+00:00","extraction_method":"structured","technologies":["core-kev","kernel"],"cve_ids":["CVE-2022-0995"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Linux Kernel Out-of-Bounds Write Vulnerability","summary":"Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system. CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","evidence":"kev:CVE-2022-0995","products":[{"name":{"value":"Kernel","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-0995","aliases":["CVE-2022-0995"],"affected":[],"modified":"2026-08-26T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2022-0995","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2022-0995","dueDate":"2026-08-29","product":"Kernel","dateAdded":"2026-08-26","vendorProject":"Linux","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_exploited":true,"shortDescription":"Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","vulnerabilityName":"Linux Kernel Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-0995","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false}],"next_after":2951,"next_before":79}