Vendor hub
The Linux kernel.
Linux kernel LPE in the XFRM ESP-in-TCP path lets local users write into the page cache; exploited with PHP2Shell to root PAN-OS firewalls.
Updated 2026-11-11
| CVE | Product | Added to KEV | Status | Dossier |
|---|---|---|---|---|
| CVE-2026-46300 | Linux Kernel | 2026-10-28 | Active exploitation | Read → |
| CVE-2025-39964 | Linux Kernel | 2026-09-18 | Active exploitation | Planned |
| CVE-2026-53266 | Linux Kernel | 2026-09-18 | Active exploitation | Planned |
| CVE-2025-39682 | Linux Kernel | 2026-09-18 | Active exploitation | Planned |
| CVE-2026-53362 | Linux Kernel | 2026-08-27 | Active exploitation | Planned |
| CVE-2022-0995 | Linux Kernel | 2026-08-26 | Active exploitation | Planned |
| CVE-2022-0492 | Linux Kernel | 2026-06-02 | Active exploitation | Planned |
| CVE-2026-31431 | Linux Kernel | 2026-05-01 | Active exploitation | Planned |
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | Active exploitation | Planned |
| CVE-2021-22555 | Linux Kernel | 2025-10-06 | Active exploitation | Planned |
| CVE-2025-38352 | Linux Kernel | 2025-09-04 | Active exploitation | Planned |
| CVE-2023-0386 | Linux Kernel | 2025-06-17 | Active exploitation | Planned |
| CVE-2024-53150 | Linux Kernel | 2025-04-09 | Active exploitation | Planned |
| CVE-2024-53197 | Linux Kernel | 2025-04-09 | Active exploitation | Planned |
| CVE-2024-50302 | Linux Kernel | 2025-03-04 | Active exploitation | Planned |
| CVE-2024-53104 | Linux Kernel | 2025-02-05 | Active exploitation | Planned |
| CVE-2017-1000253 | Linux Kernel | 2024-09-09 | Active exploitation | Planned |
| CVE-2022-0185 | Linux Kernel | 2024-08-21 | Active exploitation | Planned |
| CVE-2022-2586 | Linux Kernel | 2024-06-26 | Active exploitation | Planned |
| CVE-2024-1086 | Linux Kernel | 2024-05-30 | Active exploitation | Planned |
| CVE-2014-0196 | Linux Kernel | 2023-05-12 | Active exploitation | Planned |
| CVE-2010-3904 | Linux Kernel | 2023-05-12 | Active exploitation | Planned |
| CVE-2023-0266 | Linux Kernel | 2023-03-30 | Active exploitation | Planned |
| CVE-2021-3493 | Linux Kernel | 2022-10-20 | Active exploitation | Planned |
| CVE-2013-2596 | Linux Kernel | 2022-09-15 | Active exploitation | Planned |