Skip to content
COOEY

FAIL › dossier

linux kernel

PRODUCT

· dossier confidence 20%

Linux is a foundational open-source kernel with a decentralized development model that enables rapid vulnerability disclosure and patching, though its ubiquity means critical flaws in dependent software (e.g., browsers, servers) frequently surface as kernel-level or system-level issues.

Failure events
34
Zero-days
0
RCEs
2
On KEV
0
Critical
15
Worst shame
85
PROFILE
CategoryOperating System / KernelWhat they doLinux is an open-source operating system kernel developed by Linus Torvalds, serving as the foundation for millions of devices and enterprise servers worldwide. Websitehttps://www.kernel.org ↗
SECURITY POSTURE

The Linux kernel maintains a strong security track record through community-driven patching, but its open nature means vulnerabilities are frequently discovered and exploited across diverse distributions and use cases.

Notable failures
  • CVE-2026-9182: Unrestricted file upload in ArcGIS Server
  • CVE-2026-13775: Use-after-free in Chrome GPU
  • CVE-2026-13782: Use-after-free in Chrome Browser
  • CVE-2026-13781: Insufficient input validation in Chrome Skia
  • CVE-2026-13780: Insufficient input validation in Chrome ANGLE
  • CVE-2026-13776: Type confusion in Chrome Dawn
Patterns: repeated use-after-free vulnerabilities in browser components; insufficient validation of untrusted input in graphics subsystems; weak authentication controls in web-based interfaces
FAILURE HISTORY · 34
DATEEVENTSEVSUMMARY
2026-09-30 CVE-2026-102489 critical Zammad 6.3.0-6.5.4 and 7.0.0-7.1.3 suffers a session hijack leading to remote code execution as the zammad user.
2026-09-30 CVE-2026-102490 critical Zammad allows local users to escalate privileges to root across all versions, including the latest alpha.
2026-09-22 CVE-2026-82443 critical Adobe Campaign Classic suffers from an SSRF vulnerability allowing privilege escalation without user interaction.
2026-07-06 CVE-2026-9182 medium ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload.
2026-06-30 CVE-2026-13775 critical Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
2026-06-30 CVE-2026-13776 critical Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
2026-06-30 CVE-2026-13782 critical Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
2026-06-30 CVE-2026-13781 critical Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
2026-06-30 CVE-2026-13780 critical Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
2022-09-16 CVE-2022-36536 critical An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens.
2026-07-07 CVE-2026-13020 high A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attacker may assume ownership of a user’s account by manipulating this mechanism. ArcGIS Administrators sh
2026-09-22 CVE-2026-65130 high CVE-2026-65130: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att
2026-09-22 CVE-2026-65118 high CVE-2026-65118: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att
2026-09-22 CVE-2026-65114 high CVE-2026-65114: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att
2026-09-22 CVE-2026-65121 high CVE-2026-65121: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an at
2026-08-25 CVE-2026-65084 high CVE-2026-65084: NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, wh
2026-08-25 CVE-2026-65081 high CVE-2026-65081: NVIDIA NemoClaw for Linux contains a vulnerability in its installation process,
2026-08-25 CVE-2026-65098 high CVE-2026-65098: NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper w
2026-08-18 CVE-2026-47606 medium CVE-2026-47606: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attac
2026-07-17 CVE-2026-13448 high CVE-2026-13448: IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated re
2026-07-14 CVE-2026-47304 high CVE-2026-47304: Improper verification of cryptographic signature in .NET allows an unauthorized
2026-06-09 CVE-2026-34691 critical CVE-2026-34691: Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af
2026-06-04 CVE-2026-10972 critical CVE-2026-10972: Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed
2026-05-28 CVE-2026-9874 critical CVE-2026-9874: Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote
2026-05-26 CVE-2026-24212 high CVE-2026-24212: NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive infor
2026-05-26 CVE-2026-8856 high CVE-2026-8856: IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configuration
2026-05-26 CVE-2026-8855 high CVE-2026-8855: IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial o
2026-05-22 CVE-2026-8673 medium CVE-2026-8673: Unprotected transport of credentials vulnerability in syslink software AG Avantr
2026-05-20 CVE-2026-24206 high CVE-2026-24206: NVIDIA Triton Inference Server contains a vulnerability where an attacker could
2026-04-03 CVE-2026-35561 high CVE-2026-35561: Insufficient authentication security controls in the browser-based authenticatio
2025-09-05 CVE-2025-39682 critical CVE-2025-39682: In the Linux kernel, the following vulnerability has been resolved: tls: fix ha
2024-10-21 CVE-2024-47685 critical CVE-2024-47685: In the Linux kernel, the following vulnerability has been resolved: netfilter:
2024-08-08 CVE-2024-42256 high CVE-2024-42256: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix s
2016-04-07 CVE-2016-1019 critical CVE-2016-1019: Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a den
DOSSIER SOURCES
Open questions: Exact founding date of the Linux kernel project · Current number of active kernel developers
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-13 04:46:38.944537+00:00