Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-53017 f2fs: fix data loss caused by incorrect use of nat_entry flag - - 2026-06-24
CVE-2026-53016 crypto: ccp - copy IV using skcipher ivsize 7.8 High 2026-06-24
CVE-2026-53014 net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir - - 2026-06-24
CVE-2026-53015 erofs: unify lcn as u64 for 32-bit platforms - - 2026-06-24
CVE-2026-53013 macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF - - 2026-06-24
CVE-2026-53012 nexthop: fix IPv6 route referencing IPv4 nexthop - - 2026-06-24
CVE-2026-53011 net/sched: taprio: fix use-after-free in advance_sched() on schedule switch 7.8 High 2026-06-24
CVE-2026-53010 ksmbd: fix use-after-free in smb2_open during durable reconnect 9.8 Critical 2026-06-24
CVE-2026-53009 ice: fix double-free of tx_buf skb 7.8 High 2026-06-24
CVE-2026-53008 ice: fix race condition in TX timestamp ring cleanup - - 2026-06-24
CVE-2026-53007 ice: fix potential NULL pointer deref in error path of ice_set_ringparam() - - 2026-06-24
CVE-2026-53006 ipv6: fix possible UAF in icmpv6_rcv() 9.8 Critical 2026-06-24
CVE-2026-53005 af_unix: Drop all SCM attributes for SOCKMAP. 7.8 High 2026-06-24
CVE-2026-53004 sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks - - 2026-06-24
CVE-2026-53003 pppoe: drop PFC frames 7.5 High 2026-06-24
CVE-2026-53001 netfilter: xtables: restrict several matches to inet family - - 2026-06-24
CVE-2026-53002 netfilter: conntrack: remove sprintf usage 9.8 Critical 2026-06-24
CVE-2026-53000 netfilter: nat: use kfree_rcu to release ops 7.8 High 2026-06-24
CVE-2026-52999 netfilter: nfnetlink_osf: fix out-of-bounds read on option matching 9.1 Critical 2026-06-24
CVE-2026-52998 netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check 7.5 High 2026-06-24
CVE-2026-52997 net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() - - 2026-06-24
CVE-2026-52996 ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open - - 2026-06-24
CVE-2026-52995 net/rds: zero per-item info buffer before handing it to visitors - - 2026-06-24
CVE-2026-52994 vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting - - 2026-06-24
CVE-2026-52992 fs/adfs: validate nzones in adfs_validate_bblk() - - 2026-06-24
CVE-2026-52993 tipc: fix double-free in tipc_buf_append() 9.8 Critical 2026-06-24
CVE-2026-52991 sched/psi: fix race between file release and pressure write 7.8 High 2026-06-24
CVE-2026-52990 fsnotify: fix inode reference leak in fsnotify_recalc_mask() - - 2026-06-24
CVE-2026-52988 netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase 7.1 High 2026-06-24
CVE-2026-52989 nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers 9.8 Critical 2026-06-24

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.