Submit finding

All findings

CVE-2026-23274 + 126 more high

NebuSec exposes 127 fixed Linux kernel CVEs

NebuSec's public bug list marks 127 Linux kernel findings fixed and maps every row to a public CVE.

Bug class
Kernel memory safety, races, validation failures, denial of service, and information disclosure
Affected codebase
Linux kernel
Credited system
Nebu
Source snapshot
September 16, 2026
Coverage
Fixed Linux rows visible by September 16, 2026
Attribution
Self-reported attribution
AI role
Discovery
Severity
high
Source status: The September 16 NebuSec bug-list snapshot contains 127 Linux rows whose status is Fixed and whose public identifier is a CVE. Rows still marked Fixing are excluded.

Summary

NebuSec’s public ledger exposes a large Linux campaign. This entry records the 127 rows that are both marked fixed and mapped to exact CVEs. It does not treat the other 996 visible Linux rows as accepted vulnerabilities while their state remains Fixing.

The group spans many kernel subsystems and bug classes. Severity is editorial for the grouped record; individual CVEs retain their upstream scores and descriptions.

Attribution

NebuSec says Nebu discovered the findings and links the fixed records. CVE and upstream data corroborate the vulnerabilities, but the affected projects do not consistently name Nebu. The AI attribution is therefore self-reported.

References

Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.