Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-53348 ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions - - 2026-07-01
CVE-2026-53347 drm/virtio: Fix driver removal with disabled KMS - - 2026-07-01
CVE-2026-53346 rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES - - 2026-07-01
CVE-2026-53345 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying - - 2026-07-01
CVE-2026-53344 pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init - - 2026-07-01
CVE-2026-53343 ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow - - 2026-07-01
CVE-2026-53341 fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() 7.8 High 2026-07-01
CVE-2026-53342 arm64: mm: call pagetable dtor when freeing hot-removed page tables - - 2026-07-01
CVE-2026-53339 i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() - - 2026-07-01
CVE-2026-53340 i2c: imx: fix clock and pinctrl state inconsistency in runtime PM - - 2026-07-01
CVE-2026-53338 net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues() - - 2026-07-01
CVE-2026-53337 net: bonding: fix NULL pointer dereference in bond_do_ioctl() - - 2026-07-01
CVE-2026-53336 nvmem: layouts: onie-tlv: fix hang on unknown types - - 2026-07-01
CVE-2026-53335 mm/damon/lru_sort: handle ctx allocation failure - - 2026-07-01
CVE-2026-53333 mm/mincore: handle non-swap entries before !CONFIG_SWAP guard - - 2026-07-01
CVE-2026-53334 mm/damon/reclaim: handle ctx allocation failure - - 2026-07-01
CVE-2026-53332 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd - - 2026-07-01
CVE-2026-53331 slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock - - 2026-07-01
CVE-2026-53330 drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() - - 2026-07-01
CVE-2026-53329 drm/amd/display: Use krealloc_array() in dal_vector_reserve() 7.0 High 2026-07-01
CVE-2026-53328 sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task() - - 2026-07-01
CVE-2026-53327 debugobjects: Do not fill_pool() if pi_blocked_on - - 2026-07-01
CVE-2026-53326 debugobjects: Don't call fill_pool() in early boot hardirq context - - 2026-07-01
CVE-2026-53325 agp/amd64: Fix broken error propagation in agp_amd64_probe() - - 2026-06-29
CVE-2026-53324 net: mana: Use pci_name() for debugfs directory naming - - 2026-06-26
CVE-2026-53323 net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops - - 2026-06-26
CVE-2026-53321 io_uring/napi: cap busy_poll_to 10 msec - - 2026-06-26
CVE-2026-53322 vfio/pci: Clean up DMABUFs before disabling function 8.8 High 2026-06-26
CVE-2026-53320 nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() - - 2026-06-26
CVE-2026-53318 wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() - - 2026-06-26

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.