Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-52987 drm/amdgpu: avoid double drm_exec_fini() in userq validate 7.8 High 2026-06-24
CVE-2026-52986 netfilter: nf_conntrack_sip: don't use simple_strtoul 9.8 Critical 2026-06-24
CVE-2026-52985 netdevsim: zero initialize struct iphdr in dummy sk_buff - - 2026-06-24
CVE-2026-52984 net/sched: netem: fix queue limit check to include reordered packets - - 2026-06-24
CVE-2026-52982 net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() 9.8 Critical 2026-06-24
CVE-2026-52983 net: airoha: fix BQL imbalance in TX path 7.5 High 2026-06-24
CVE-2026-52981 neigh: let neigh_xmit take skb ownership 7.5 High 2026-06-24
CVE-2026-52979 net: psp: check for device unregister when creating assoc - - 2026-06-24
CVE-2026-52980 sched/fair: Clear rel_deadline when initializing forked entities - - 2026-06-24
CVE-2026-52978 net: psp: require admin permission for dev-set and key-rotate - - 2026-06-24
CVE-2026-52977 futex: Prevent lockup in requeue-PI during signal/ timeout wakeup - - 2026-06-24
CVE-2026-52976 drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() 7.8 High 2026-06-24
CVE-2026-52975 bonding: 3ad: implement proper RCU rules for port->aggregator 7.8 High 2026-06-24
CVE-2026-52974 net: tls: fix strparser anchor skb leak on offload RX setup failure 7.5 High 2026-06-24
CVE-2026-52973 futex: Drop CLONE_THREAD requirement for private default hash alloc 7.8 High 2026-06-24
CVE-2026-52971 net: ena: PHC: Fix potential use-after-free in get_timestamp 7.8 High 2026-06-24
CVE-2026-52972 crypto: af_alg - Cap AEAD AD length to 0x80000000 - - 2026-06-24
CVE-2026-52970 netfilter: nft_ct: fix missing expect put in obj eval - - 2026-06-24
CVE-2026-52969 KVM: Reject wrapped offset in kvm_reset_dirty_gfn() - - 2026-06-24
CVE-2026-52968 KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic 8.8 High 2026-06-24
CVE-2026-52967 smb/client: fix possible infinite loop and oob read in symlink_data() 8.1 High 2026-06-24
CVE-2026-52966 drm: Replace old pointer to new idr - - 2026-06-24
CVE-2026-52965 drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure - - 2026-06-24
CVE-2026-52964 ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans - - 2026-06-24
CVE-2026-52963 ALSA: usb-audio: Bound MIDI endpoint descriptor scans - - 2026-06-24
CVE-2026-52962 ceph: fix a buffer leak in __ceph_setxattr() - - 2026-06-24
CVE-2026-52961 ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size - - 2026-06-24
CVE-2026-52960 ceph: put folios not suitable for writeback 7.5 High 2026-06-24
CVE-2026-52959 virt: sev-guest: Do not use host-controlled page order in cleanup path 7.8 High 2026-06-24
CVE-2026-52958 libceph: Fix potential out-of-bounds access in osdmap_decode() 9.1 Critical 2026-06-24

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.