Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-53228 ipv6: sit: reload inner IPv6 header after GSO offloads 9.8 Critical 2026-06-25
CVE-2026-53226 gpio: rockchip: fix generic IRQ chip leak on remove - - 2026-06-25
CVE-2026-53227 net: openvswitch: fix possible kfree_skb of ERR_PTR - - 2026-06-25
CVE-2026-53225 sctp: fix uninit-value in __sctp_rcv_asconf_lookup() 9.1 Critical 2026-06-25
CVE-2026-53223 net: guard timestamp cmsgs to real error queue skbs 7.1 High 2026-06-25
CVE-2026-53224 sctp: validate embedded INIT chunk and address list lengths in cookie 9.1 Critical 2026-06-25
CVE-2026-53222 ptp: ocp: fix resource freeing order - - 2026-06-25
CVE-2026-53221 ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() 9.8 Critical 2026-06-25
CVE-2026-53219 netfilter: x_tables: avoid leaking percpu counter pointers - - 2026-06-25
CVE-2026-53220 netfilter: revalidate bridge ports - - 2026-06-25
CVE-2026-53218 netfilter: nft_exthdr: fix register tracking for F_PRESENT flag - - 2026-06-25
CVE-2026-53216 net: mvpp2: limit XDP frame size to the RX buffer 9.8 Critical 2026-06-25
CVE-2026-53217 net: mvpp2: sync RX data at the hardware packet offset 8.6 High 2026-06-25
CVE-2026-53215 net: mvpp2: refill RX buffers before XDP or skb use 9.8 Critical 2026-06-25
CVE-2026-53213 drm/vc4: fix krealloc() memory leak - - 2026-06-25
CVE-2026-53214 ipv6: Fix a potential NPD in cleanup_prefix_route() - - 2026-06-25
CVE-2026-53212 netfilter: nft_tunnel: fix use-after-free on object destroy 7.8 High 2026-06-25
CVE-2026-53210 tee: shm: fix shm leak in register_shm_helper() - - 2026-06-25
CVE-2026-53211 netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register - - 2026-06-25
CVE-2026-53209 Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend 7.8 High 2026-06-25
CVE-2026-53207 mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison - - 2026-06-25
CVE-2026-53208 Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig - - 2026-06-25
CVE-2026-53206 accel/ivpu: Add bounds check for firmware runtime memory - - 2026-06-25
CVE-2026-53205 accel/ivpu: Add bounds checks for firmware log indices 7.1 High 2026-06-25
CVE-2026-53204 firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe - - 2026-06-25
CVE-2026-53203 accel/ivpu: Add buffer overflow check in MS get_info_ioctl 7.1 High 2026-06-25
CVE-2026-53202 accel/ivpu: Fix signed integer truncation in IPC receive 7.8 High 2026-06-25
CVE-2026-53201 Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" 7.8 High 2026-06-25
CVE-2026-53200 KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX 8.8 High 2026-06-25
CVE-2026-53199 hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf 7.5 High 2026-06-25

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.