Linux kernel
ProductVulnerabilities
623 CVEs in our records, 1 known exploited (on CISA's KEV list).
- CVE-2026-46300 Exploited added to KEV 28 Oct
Am I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Affected versions
- CVE-2026-46300 from 7.1-rc2, up to 7.1-rc2
- CVE-2026-46300 from 6.13, before 6.18.33 · fixed in 6.18.33
- CVE-2026-46300 from 7.1-rc4, up to 7.1-rc4
- CVE-2026-46300 from 6.2, before 6.6.141 · fixed in 6.6.141
- CVE-2026-46300 from 6.19, before 7.0.10 · fixed in 7.0.10
- CVE-2026-46300 from 7.1-rc1, up to 7.1-rc1
- CVE-2026-46300 from 6.7, before 6.12.91 · fixed in 6.12.91
- CVE-2026-46300 from 3.9, up to 5.10.257
- CVE-2026-46300 from 5.16, before 6.1.174 · fixed in 6.1.174
- CVE-2026-46300 from 5.11, before 5.15.208 · fixed in 5.15.208
- CVE-2026-46300 from 7.1-rc3, up to 7.1-rc3
- CVE-2026-100077 from 6.19, before 7.2.6 · fixed in 7.2.6
Security timeline
- Security update reported by Trail of BitsTrail of Bits uses Codex to speed up backporting security fixes to stable Linux releases
- Vulnerability reported by BleepingComputerCritical Linux kernel flaw allows remote root attacks on MPTCP servers
- Zero-day reported by watchTowr LabsCISA adds VMware ESX CVE-2026-41709 and Linux Fragnesia to KEV; China-linked Warp Panda exploited ESX flaw
- Vulnerability reported by Cyber Security NewsAnthropic says its AI model built a working root exploit for critical Linux kernel flaw CVE-2026-98432
Recent news
Trail of Bits uses Codex to speed up backporting security fixes to stable Linux releases
Trail of Bits describes using Codex agents to prepare backports of security fixes to stable Linux kernels, Ubuntu LTS and Fedora packages, with human engineers reviewing and submitting patches. By 29 October the project had helped deliver fixes for 149 distinct CVEs into stable kernel releases. The authors argue that thousands of known CVEs remain unfixed in stable branches, including a critical TCP stack flaw that had not reached distribution kernels weeks after upstream patching.
Torvalds says Linux 7.4 merge window is large, welcomes AI-driven fixes as healthier
The first release candidate for Linux kernel 7.4 is out, with almost 20,000 commits in the merge window against a usual figure of around 15,000. Torvalds says many fixes are for issues found by AI, and that AI-suggested patches are increasingly appearing, though they are often rewritten. Notable additions include improved support for AMD, Apple and Google processors and some virtual machine security tweaks.
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
A critical Linux kernel vulnerability allows unauthenticated remote attackers to execute commands as root on servers running Multipath TCP (MPTCP) listeners. Anthropic researchers have developed a working exploit, which raises the likelihood of attacks against exposed systems.
CISA adds VMware ESX CVE-2026-41709 and Linux Fragnesia to KEV; China-linked Warp Panda exploited ESX flaw
CISA added VMware ESX CVE-2026-41709 (insufficient logging, CVSS 7.6) and Linux kernel CVE-2026-46300 (Fragnesia) to its KEV catalogue. CrowdStrike reports that Warp Panda exploited the ESX flaw as a zero-day in early 2026 to reduce audit log visibility. The Cyber Centre also flagged exploitation of a Siemens Software Center DLL sideloading flaw and Gitea vulnerabilities, and urged administrators to apply updates.
Anthropic says its AI model built a working root exploit for critical Linux kernel flaw CVE-2026-98432
Anthropic says an unreleased Claude research model produced a zero-click exploit for CVE-2026-98432, a use-after-free race condition in the Linux kernel's IPv4 TCP handling that gives unauthenticated root command execution, with a claimed 9.8 CVSS score. Upstream fixes are available in stable branches such as 5.10.272, 5.15.223 and 6.6.159, but distribution fixes are uneven, with Ubuntu and Red Hat Enterprise Linux reportedly lacking patched kernels as of 30 October. Teams should prioritise internet-facing servers, apply vendor kernel updates, reboot, and check whether multipath TCP listeners are needed.