Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-53198 ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL 8.8 High 2026-06-25
CVE-2026-53197 xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() - - 2026-06-25
CVE-2026-53196 USB: serial: io_ti: fix heap overflow in get_manuf_info() - - 2026-06-25
CVE-2026-53195 USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() - - 2026-06-25
CVE-2026-53194 USB: serial: kl5kusb105: fix bulk-out buffer overflow 7.8 High 2026-06-25
CVE-2026-53192 ALSA: timer: Fix UAF at snd_timer_user_params() 7.8 High 2026-06-25
CVE-2026-53193 ALSA: timer: Forcibly close timer instances at closing 7.8 High 2026-06-25
CVE-2026-53191 io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries 7.8 High 2026-06-25
CVE-2026-53190 drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() - - 2026-06-25
CVE-2026-53189 mm/huge_memory: update file PMD counter before folio_put() 7.8 High 2026-06-25
CVE-2026-53188 RDMA/core: Validate the passed in fops for ib_get_ucaps() 8.8 High 2026-06-25
CVE-2026-53186 RDMA/srp: bound SRP_RSP sense copy by the received length 9.1 Critical 2026-06-25
CVE-2026-53187 RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc 7.1 High 2026-06-25
CVE-2026-53185 zram: fix use-after-free in zram_bvec_write_partial() 7.8 High 2026-06-25
CVE-2026-53184 udp: clear skb->dev before running a sockmap verdict 7.5 High 2026-06-25
CVE-2026-53183 mptcp: allow subflow rcv wnd to shrink 7.5 High 2026-06-25
CVE-2026-53182 wifi: nl80211: reject oversized EMA RNR lists 7.8 High 2026-06-25
CVE-2026-53181 vsock/vmci: fix sk_ack_backlog leak on failed handshake - - 2026-06-25
CVE-2026-53179 staging: rtl8723bs: fix buffer over-read in rtw_update_protection - - 2026-06-25
CVE-2026-53180 timers/migration: Fix livelock in tmigr_handle_remote_up() 7.5 High 2026-06-25
CVE-2026-53178 staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction 8.1 High 2026-06-25
CVE-2026-53176 IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN 9.8 Critical 2026-06-25
CVE-2026-53177 bnxt_en: Fix NULL pointer dereference - - 2026-06-25
CVE-2026-53175 inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush 9.8 Critical 2026-06-25
CVE-2026-53173 accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() 7.8 High 2026-06-25
CVE-2026-53174 ovl: keep err zero after successful ovl_cache_get() 7.8 High 2026-06-25
CVE-2026-53172 accel/ethosu: fix IFM region index out-of-bounds in command stream parser 7.8 High 2026-06-25
CVE-2026-53170 accel/ethosu: reject DMA commands with uninitialized length 8.8 High 2026-06-25
CVE-2026-53171 accel/ethosu: fix arithmetic issues in dma_length() 8.8 High 2026-06-25
CVE-2026-53169 accel/ethosu: reject NPU_OP_RESIZE commands from userspace - - 2026-06-25

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.