Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-46326 iio: pressure: mprls0025pa: fix spi_transfer struct initialisation 8.4 High 2026-06-09
CVE-2026-46325 RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE 9.8 Critical 2026-06-09
CVE-2026-46324 netfilter: nf_tables: use list_del_rcu for netlink hooks 7.8 High 2026-06-09
CVE-2026-46323 net: gro: don't merge zcopy skbs 7.8 High 2026-06-09
CVE-2026-46322 tun: free page on build_skb failure in tun_xdp_one() 7.1 High 2026-06-09
CVE-2026-46321 tun: free page on short-frame rejection in tun_xdp_one() 7.1 High 2026-06-09
CVE-2026-46320 tap: free page on error paths in tap_get_user_xdp() 7.4 High 2026-06-09
CVE-2026-46319 net/sched: act_ct: Only release RCU read lock after ct_ft 7.8 High 2026-06-09
CVE-2026-46318 Revert "mm/hugetlbfs: update hugetlbfs to use mmap_prepare" - - 2026-06-09
CVE-2026-46317 KVM: arm64: Reassign nested_mmus array behind mmu_lock 8.8 High 2026-06-09
CVE-2026-46316 KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry 9.3 Critical 2026-06-09
CVE-2026-46315 io_uring/waitid: clear waitid info before copying it to userspace - - 2026-06-09
CVE-2026-46314 drm/v3d: Reject empty multisync extension to prevent infinite loop - - 2026-06-08
CVE-2026-46313 media: intel/ipu6: fix error pointer dereference - - 2026-06-08
CVE-2026-46312 media: videobuf2: Set vma_flags in vb2_dma_sg_mmap - - 2026-06-08
CVE-2026-46311 drm/amdgpu/userq: fix access to stale wptr mapping 7.8 High 2026-06-08
CVE-2026-46310 media: renesas: vsp1: Fix NULL pointer deref on module unload - - 2026-06-08
CVE-2026-46309 drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise - - 2026-06-08
CVE-2026-46308 pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy() - - 2026-06-08
CVE-2026-46307 wifi: ath5k: do not access array OOB 8.3 High 2026-06-08
CVE-2026-46306 flow_dissector: do not dissect PPPoE PFC frames 7.5 High 2026-06-08
CVE-2026-46305 staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc - - 2026-06-08
CVE-2026-46304 nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free 7.5 High 2026-06-08
CVE-2026-46303 isofs: validate Rock Ridge CE continuation extent against volume size 8.2 High 2026-06-08
CVE-2026-46302 selinux: allow multiple opens of /sys/fs/selinux/policy - - 2026-06-08
CVE-2026-46301 spi: topcliff-pch: fix use-after-free on unbind - - 2026-06-08
CVE-2026-46299 hfsplus: fix held lock freed on hfsplus_fill_super() 7.0 High 2026-06-08
CVE-2026-46298 pseries/papr-hvpipe: Fix race with interrupt handler - - 2026-06-08
CVE-2026-46297 net: libwx: use request_irq for VF misc interrupt - - 2026-06-08
CVE-2026-46296 spi: s3c64xx: fix NULL-deref on driver unbind - - 2026-06-08

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.