Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-53378 drm/colorop: Fix blob property reference tracking in state lifecycle - - 2026-07-19
CVE-2026-53376 drm/amdkfd: Add upper bound check for num_of_nodes - - 2026-07-19
CVE-2026-53377 drm/msm: always recover the gpu - - 2026-07-19
CVE-2026-53375 drm/amdgpu/vce: Prevent partial address patches 8.8 High 2026-07-19
CVE-2026-53373 mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap() 7.8 High 2026-07-19
CVE-2026-53374 drm/amdgpu: zero-initialize GART table on allocation 8.8 High 2026-07-19
CVE-2026-53371 RDMA/ionic: bound node_desc sysfs read with %.64s - - 2026-07-19
CVE-2026-53372 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking - - 2026-07-19
CVE-2026-53370 perf/x86/intel: Improve validation and configuration of ACR masks - - 2026-07-19
CVE-2026-53368 f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage 7.1 High 2026-07-19
CVE-2026-53369 udf: reject descriptors with oversized CRC length 8.4 High 2026-07-19
CVE-2026-53367 selinux: fix avdcache auditing - - 2026-07-19
CVE-2026-53366 ipv4: account for fraggap on the paged allocation path 7.8 High 2026-07-16
CVE-2026-53365 vsock/virtio: fix zerocopy completion for multi-skb sends - - 2026-07-13
CVE-2026-53364 Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() - - 2026-07-13
CVE-2026-53363 xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() 9.8 Critical 2026-07-10
CVE-2026-53362 ipv6: account for fraggap on the paged allocation path 7.8 High 2026-07-04
CVE-2026-53361 af_unix: Set gc_in_progress to true in unix_gc(). 7.1 High 2026-07-04
CVE-2026-53360 KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use 8.8 High 2026-07-04
CVE-2026-53359 KVM: x86: Fix shadow paging use-after-free due to unexpected role 8.8 High 2026-07-04
CVE-2026-53358 Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() 8.8 High 2026-07-02
CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() 8.0 High 2026-07-02
CVE-2026-53356 drm/i915/gem: Fix phys BO pread/pwrite with offset 7.8 High 2026-07-01
CVE-2026-53355 net: rds: clear i_sends on setup unwind 9.8 Critical 2026-07-01
CVE-2026-53354 arm64: errata: Mitigate TLBI errata on various Arm CPUs 8.8 High 2026-07-01
CVE-2026-53353 hsr: Remove WARN_ONCE() in hsr_addr_is_self(). - - 2026-07-01
CVE-2026-53351 riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI - - 2026-07-01
CVE-2026-53352 signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() - - 2026-07-01
CVE-2026-53350 ASoC: wm_adsp: Fix NULL dereference when removing firmware controls - - 2026-07-01
CVE-2026-53349 netfilter: nf_conntrack: destroy stale expectfn expectations on unregister - - 2026-07-01

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.