kernel has 4 CVEs on record between 2021 and 2026. The median CVSS is 5.1 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2022-0563Medium· 5.5A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support30CVE-2021-37600Medium· 5.5An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file30CVE-2026-27456Medium· 4.7util-linux is a random collection of Linux utilities26CVE-2026-3184Low· 3.7A flaw was found in util-linux20
kernel vulnerabilities
CVEs affecting kernel, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-27456Medium· 4.7util-linux is a random collection of Linux utilities
util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up lo…
CVE-2026-3184Low· 3.7A flaw was found in util-linux
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by …
CVE-2022-0563Medium· 5.5A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the speci…
CVE-2021-37600Medium· 5.5An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in…