Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-52957 libceph: Fix potential null-ptr-deref in decode_choose_args() 7.5 High 2026-06-24
CVE-2026-52955 libceph: Fix potential out-of-bounds access in crush_decode() 9.8 Critical 2026-06-24
CVE-2026-52956 libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() 7.5 High 2026-06-24
CVE-2026-52954 libceph: handle rbtree insertion error in decode_choose_args() 7.5 High 2026-06-24
CVE-2026-52953 iommu/vt-d: Fix oops due to out of scope access 7.1 High 2026-06-24
CVE-2026-52952 iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset 8.8 High 2026-06-24
CVE-2026-52951 drm/xe/dma-buf: handle empty bo and UAF races 7.8 High 2026-06-24
CVE-2026-52949 drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure - - 2026-06-24
CVE-2026-52950 drm/xe/dma-buf: fix UAF with retry loop 7.8 High 2026-06-24
CVE-2026-52948 i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl - - 2026-06-24
CVE-2026-52947 net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove 7.8 High 2026-06-24
CVE-2026-52946 fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling 7.5 High 2026-06-24
CVE-2026-52945 Revert "wireguard: device: enable threaded NAPI" 7.5 High 2026-06-24
CVE-2026-52944 ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE - - 2026-06-24
CVE-2026-52943 net: skbuff: fix missing zerocopy reference in pskb_carve helpers 7.8 High 2026-06-24
CVE-2026-52942 netfilter: nf_log: validate MAC header was set before dumping it 7.1 High 2026-06-24
CVE-2026-52941 net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint - - 2026-06-24
CVE-2026-52939 net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion - - 2026-06-24
CVE-2026-52940 tun: zero the whole vnet header in tun_put_user() - - 2026-06-24
CVE-2026-52938 bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths - - 2026-06-24
CVE-2026-52937 tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR - - 2026-06-24
CVE-2026-52936 crypto: jitterentropy - replace long-held spinlock with mutex - - 2026-06-24
CVE-2026-52935 xfrm: espintcp: do not reuse an in-progress partial send 7.8 High 2026-06-24
CVE-2026-52933 io_uring/poll: fix signed comparison in io_poll_get_ownership() 7.8 High 2026-06-24
CVE-2026-52934 batman-adv: tvlv: reject oversized TVLV packets 8.8 High 2026-06-24
CVE-2026-52932 xfrm: ipcomp: Free destination pages on acomp errors 7.5 High 2026-06-24
CVE-2026-52930 ipc/shm: serialize orphan cleanup with shm_nattch updates - - 2026-06-24
CVE-2026-52931 batman-adv: tp_meter: avoid use of uninit sender vars 9.8 Critical 2026-06-24
CVE-2026-52929 sctp: stream: fully roll back denied add-stream state 7.5 High 2026-06-24
CVE-2026-52928 af_unix: Reject SIOCATMARK on non-stream sockets - - 2026-06-24

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.