Linux kernel CVEs hit a record pace in May

May reached 892 Linux kernel CVEs without backfilled entries, showing how vulnerability accounting and kernel maintenance are entering a new volume regime

892 Linux kernel CVEs so far in May, highest month ever without backfilled CVEs by far. April for instance had 378, March only 177. The three larger months that had backfilled CVEs were May 2024 (1073), Dec 2025 (1051), and Feb 2025 (905)
Ranked #4 on backlist 2026-05-28 (28 May 2026 UTC) · by (Brad Spengler) ·

How it ranks: Backlist reads my Twitter/X timeline, scores every tweet for substance with an LLM rubric (not engagement), and publishes the daily top picks with a one-line takeaway. Curated by Surya Dantuluri.