Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-53289 ice: fix NULL pointer dereference in ice_reset_all_vfs() - - 2026-06-26
CVE-2026-53287 audit: fix incorrect inheritable capability in CAPSET records - - 2026-06-26
CVE-2026-53286 idpf: fix double free and use-after-free in aux device error paths - - 2026-06-26
CVE-2026-53285 drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED - - 2026-06-26
CVE-2026-53284 btrfs: only release the dirty pages io tree after successful writes 7.5 High 2026-06-26
CVE-2026-53283 iommu/amd: Bounds-check devid in __rlookup_amd_iommu() - - 2026-06-26
CVE-2026-53282 x86/kexec: Push kjump return address even for non-kjump kexec - - 2026-06-26
CVE-2026-53281 iommu/vt-d: Avoid NULL pointer dereference or refcount corruption 8.8 High 2026-06-26
CVE-2026-53280 iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() - - 2026-06-26
CVE-2026-53279 drm/gma500/oaktrail_lvds: fix hang on init failure - - 2026-06-26
CVE-2026-53278 arm_mpam: Check whether the config array is allocated before destroying it - - 2026-06-26
CVE-2026-53277 KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation 8.8 High 2026-06-25
CVE-2026-53276 Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer 7.8 High 2026-06-25
CVE-2026-53275 ipv6: mcast: Fix use-after-free when processing MLD queries 8.8 High 2026-06-25
CVE-2026-53274 net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS - - 2026-06-25
CVE-2026-53273 tee: optee: prevent use-after-free when the client exits before the supplicant 7.8 High 2026-06-25
CVE-2026-53272 erofs: fix use-after-free on sbi->sync_decompress - - 2026-06-25
CVE-2026-53271 ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers - - 2026-06-25
CVE-2026-53270 ipvs: clear the svc scheduler ptr early on edit 7.8 High 2026-06-25
CVE-2026-53268 netfilter: conntrack_irc: fix possible out-of-bounds read 8.2 High 2026-06-25
CVE-2026-53269 netfilter: synproxy: add mutex to guard hook reference counting - - 2026-06-25
CVE-2026-53267 netfilter: nft_ct: bail out on template ct in get eval 7.8 High 2026-06-25
CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable 8.8 High 2026-06-25
CVE-2026-53265 dm cache policy smq: check allocation under invalidate lock 7.8 High 2026-06-25
CVE-2026-53264 net/sched: act_api: use RCU with deferred freeing for action lifecycle 7.8 High 2026-06-25
CVE-2026-53263 6lowpan: fix off-by-one in multicast context address compression - - 2026-06-25
CVE-2026-53262 l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() 7.8 High 2026-06-25
CVE-2026-53261 devlink: Release nested relation on devlink free - - 2026-06-25
CVE-2026-53259 ipv6: anycast: insert aca into global hash under idev->lock 7.8 High 2026-06-25
CVE-2026-53260 tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). 9.8 Critical 2026-06-25

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.