The Linux kernel now logs more than 1,500 CVEs per release
A slide Greg Kroah-Hartman shared ahead of Kernel Recipes 2026, reported by Phoronix on August 28, shows the Linux kernel logging roughly 500 CVEs per release from 6.9 through 6.19, more than 1,000 per release from 7.0, and over 1,500 for 7.2. Tom's Hardware reported the kernel "nears record 2,000 vulnerabilities per release" with maintainers "completely overwhelmed." Both attribute the surge to AI and LLM tools scanning the kernel's roughly 40 million lines of code. Most of the new CVEs are low-priority issues in obsolete driver code that still have to be triaged.