How many CVEs have a located fix in torvalds/linux?

19,257 published CVEs have a fix traced to functions in torvalds/linux, touching 35,336 functions across 10,518 files.

Which function in torvalds/linux has been patched by the most CVEs?

smb2_sess_setup in fs/smb/server/smb2pdu.c has been changed by 13 CVE fixes, from 2024 to 2026.

How large is a typical CVE fix in torvalds/linux?

The median fix changes 24 lines. 45% of fixes change 20 lines or fewer, and 53% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

assembly

#1 of 500 repositories

torvalds/linux

Name: torvalds/linux: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 14, 2026

19,257

CVE fixes located

Published CVEs

35,336

Functions patched

Distinct function sites

10,518

Files patched

Distinct source files

2006–2026

Years covered

By CVE publication date

Overview

19,257 published CVEs have a fix traced to functions in torvalds/linux, the earliest published in 2006. Those fixes changed 35,336 distinct functions across 10,518 files, in 378,980 patch hunks.

Among the 500 repositories tracked here, torvalds/linux ranks #1 by the number of CVEs with a located fix.

Most patched functions

Functions in torvalds/linux changed by the most CVE fixes.

Most patched files

Files in torvalds/linux changed by the most CVE fixes.

1kernel/bpf/verifier.c138 CVEs · 199 functions
2fs/smb/server/smb2pdu.c88 CVEs · 74 functions
3net/netfilter/nf_tables_api.c81 CVEs · 149 functions
4net/bluetooth/l2cap_core.c50 CVEs · 64 functions
5fs/ksmbd/smb2pdu.c50 CVEs · 54 functions
6fs/nfsd/nfs4state.c49 CVEs · 53 functions
7kernel/events/core.c47 CVEs · 78 functions
8arch/x86/kvm/x86.c47 CVEs · 62 functions
9net/core/filter.c46 CVEs · 45 functions
10net/mptcp/protocol.c43 CVEs · 63 functions

Fix size

How much code a CVE fix in torvalds/linux changes, with backports counted once.

24

Median lines changed

Added plus removed, per CVE

45%

Fixes of 20 lines or fewer

Share of CVE fixes

53%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in torvalds/linux, and the functions each fix changed.

RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency
CVE-2026-98431ib_uverbs_mmap uverbs_user_mmap_disassociate rdma_user_mmap_disassociate
Unscored
EPSS 0.2%2026-10-14
RDMA/efa: Keep admin queues alive while IRQ is registered
CVE-2026-98430efa_probe_device efa_com_admin_init efa_remove_device
Unscored
EPSS 0.2%2026-10-14
RDMA/efa: Keep EQ resources alive while IRQ is registered
CVE-2026-98429efa_destroy_eq efa_com_arm_eq efa_com_eq_init
Unscored
EPSS 0.2%2026-10-14
ALSA: usb: 6fire: Avoid embedded URBs
CVE-2026-98428usb6fire_pcm_in_urb_handler usb6fire_pcm_init_urb usb6fire_pcm_init
Unscored
EPSS 0.2%2026-10-14
net/sched: codel: bound the dropping loop per dequeue call
CVE-2026-98427codel_time_after_eq interval codel_vars
Unscored
EPSS 0.2%2026-10-14
wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
CVE-2026-98426mwifiex_pcie_request_irq
Unscored
EPSS 0.2%2026-10-14
wifi: mac80211: don't warn when an IBSS has no channel to scan
CVE-2026-98425ieee80211_request_ibss_scan
Unscored
EPSS 0.2%2026-10-14
wifi: cfg80211: undo netns switch if renaming the wiphy fails
CVE-2026-98424scoped_guard cfg80211_switch_wdev_netns
Unscored
EPSS 0.2%2026-10-14
wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
CVE-2026-98423hwsim_cloned_frame_received_nl sk_buff
Unscored
EPSS 0.2%2026-10-14
wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
CVE-2026-98422ieee80211_do_stop
Unscored
EPSS 0.2%2026-10-14
wifi: mac80211: require a peer station for TDLS setup confirm
CVE-2026-98421sta_info ieee80211_tdls_mgmt
Unscored
EPSS 0.2%2026-10-14
ksmbd: follow SMB2 session expiration semantics
CVE-2026-98420ksmbd_session_unregister ksmbd_session_expiration_worker ksmbd_conn_has_valid_or_expired_session
Unscored
EPSS 0.2%2026-10-14

Get an alert for each new torvalds/linux CVE, with the patched functions and AI-written analysis.

Monitor linux CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

wordpress-plugins/plugins851 CVEs tensorflow/tensorflow411 CVEs openclaw/openclaw394 CVEs ImageMagick/ImageMagick339 CVEs moodle/moodle258 CVEs vim/vim222 CVEs chakra-core/ChakraCore205 CVEs apache/airflow200 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in torvalds/linux.

How many CVEs have a located fix in torvalds/linux?: 19,257 published CVEs have a fix traced to functions in torvalds/linux, touching 35,336 functions across 10,518 files.
Which function in torvalds/linux has been patched by the most CVEs?: smb2_sess_setup in fs/smb/server/smb2pdu.c has been changed by 13 CVE fixes, from 2024 to 2026.
How large is a typical CVE fix in torvalds/linux?: The median fix changes 24 lines. 45% of fixes change 20 lines or fewer, and 53% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track torvalds/linux CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing