Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-46295 KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty - - 2026-06-08
CVE-2026-46294 dm: fix a buffer overflow in ioctl processing - - 2026-06-08
CVE-2026-46293 clk: microchip: mpfs-ccc: fix out of bounds access during output registration - - 2026-06-08
CVE-2026-46292 pmdomain: core: Fix detach procedure for virtual devices in genpd - - 2026-06-08
CVE-2026-46291 crypto: caam - guard HMAC key hex dumps in hash_digest_key - - 2026-06-08
CVE-2026-46290 x86/efi: Fix graceful fault handling after FPU softirq changes - - 2026-06-08
CVE-2026-46289 lib/scatterlist: fix length calculations in extract_kvec_to_sg 9.8 Critical 2026-06-08
CVE-2026-46288 of: unittest: fix use-after-free in of_unittest_changeset() 8.4 High 2026-06-08
CVE-2026-46287 net: txgbe: fix RTNL assertion warning when remove module - - 2026-06-08
CVE-2026-46286 leds: qcom-lpg: Check for array overflow when selecting the high resolution - - 2026-06-08
CVE-2026-46285 mtd: docg3: fix use-after-free in docg3_release() - - 2026-06-08
CVE-2026-46284 mm/hugetlb: fix early boot crash on parameters without '=' separator - - 2026-06-08
CVE-2026-46283 tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() - - 2026-06-08
CVE-2026-46282 iio: frequency: admv1013: fix NULL pointer dereference on str - - 2026-06-08
CVE-2026-46281 vmalloc: fix buffer overflow in vrealloc_node_align() - - 2026-06-08
CVE-2026-46280 lib: test_hmm: evict device pages on file close to avoid use-after-free 7.8 High 2026-06-08
CVE-2026-46279 mm/alloc_tag: clear codetag for pages allocated before page_ext initialization - - 2026-06-08
CVE-2026-46278 drm/imagination: Fix segfault when updating ftrace mask - - 2026-06-08
CVE-2026-46277 mm/zone_device: do not touch device folio after calling ->folio_free() 7.8 High 2026-06-08
CVE-2026-46276 drm/amdgpu: fix zero-size GDS range init on RDNA4 - - 2026-06-08
CVE-2026-46275 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths 7.8 High 2026-06-08
CVE-2026-46274 io-wq: check that the predecessor is hashed in io_wq_remove_pending() 7.8 High 2026-06-08
CVE-2025-71315 drm/vkms: Convert to DRM's vblank timer - - 2026-06-08
CVE-2026-46273 ibmveth: Disable GSO for packets with small MSS 8.6 High 2026-06-03
CVE-2026-46272 coresight: tmc-etr: Fix race condition between sysfs and perf mode - - 2026-06-03
CVE-2026-46271 wifi: ath12k: do WoW offloads only on primary link 7.8 High 2026-06-03
CVE-2026-46270 power: supply: rt9455: Fix use-after-free in power_supply_changed() 8.4 High 2026-06-03
CVE-2026-46269 pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree - - 2026-06-03
CVE-2026-46268 PCI/P2PDMA: Fix p2pmem_alloc_mmap() warning condition - - 2026-06-03
CVE-2026-46267 nfc: hci: shdlc: Stop timers and work before freeing context - - 2026-06-03

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.