Here is a table I put together containing links to the National Vulnerability Database about various Common Vulnerabilities and Exposures (CVE) issues in the 2.6 Linux kernel from 2.6.18 and above.

I check the CVE database via a rss feed and will be updating this list whenever I see a new one for linux come out.

This list is by no means comprehensive and some may not be included here for one of the following reasons:

* Issue is for a kernel below 2.6.18
* Version number isn’t specified
* Vendor-specific kernel only where release isn’t specified
* I flat out missed it
* It’s a brand new CVE and I haven’t updated this list yet

I should also note that not all known security issues are made public via the CVE database, and according to Brad from grsecurity not all security issues fixed in the linux kernel are made public (aka known as “silent fixes”).

The scope of this table is to list links to the CVE issue itself and specify the version to get an idea of how many patches you would need if you were to build an older kernel from vanilla source (ie, not using a linux vendor’s source). To get the type of vulnerability you need to follow the link. Most of them are “local denial of service” exploits, but a few are more dangerous. In either case, if your kernel is affected, you should patch it.

Hope this list helps you with whatever you may need it for, and be sure to use this information responsibly!