Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linux — Vulnerabilities & Security Advisories 18073

All 18073 CVE vulnerabilities found in Linux, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Linux operating system product. It aggregates security data related to weaknesses within the kernel, distributions, and associated utilities provided by various Linux vendors and maintainers. The collection encompasses a wide range of vulnerability types, including memory corruption issues, privilege escalation flaws, information leaks, and denial-of-service conditions. The database covers historical records spanning several decades, reflecting the evolution of the Linux ecosystem from its early releases to modern stable and development branches. This extensive time range allows for the analysis of long-term security trends and the remediation status of legacy systems that remain in production environments. Visitors to this resource can track vendor-specific advisories to stay informed about patches and updates released by major Linux distribution maintainers. You can also use the page to understand the characteristics and impact of specific weakness classes as they manifest in the Linux environment. Additionally, the interface supports looking up a specific product’s vulnerability history, enabling security professionals to assess risk exposure and prioritize mitigation efforts for critical infrastructure components. The data is organized to facilitate efficient searching and correlation between weakness identifiers and affected software versions, ensuring that administrators and developers have access to comprehensive security insights necessary for maintaining system integrity and compliance.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-46266 inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP 9.1 Critical 2026-06-03
CVE-2026-46265 RDMA/hns: Fix WQ_MEM_RECLAIM warning 7.5 High 2026-06-03
CVE-2026-46264 drm/xe/pf: Fix sysfs initialization 8.8 High 2026-06-03
CVE-2026-46263 drm/amd/display: Fix out-of-bounds stream encoder index v3 7.8 High 2026-06-03
CVE-2026-46262 ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put() - - 2026-06-03
CVE-2026-46261 spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() - - 2026-06-03
CVE-2026-46260 ipv6: Fix out-of-bound access in fib6_add_rt2node(). 7.8 High 2026-06-03
CVE-2026-46259 procfs: fix missing RCU protection when reading real_parent in do_task_stat() 7.8 High 2026-06-03
CVE-2026-46258 gpio: cdev: Avoid NULL dereference in linehandle_create() - - 2026-06-03
CVE-2026-46257 clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registered as the sched_clock. - - 2026-06-03
CVE-2026-46256 NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages - - 2026-06-03
CVE-2026-46255 dmaengine: fsl-edma: don't explicitly disable clocks in .remove() - - 2026-06-03
CVE-2026-46254 AppArmor: Allow apparmor to handle unaligned dfa tables - - 2026-06-03
CVE-2026-46253 pstore/ram: fix buffer overflow in persistent_ram_save_old() 7.8 High 2026-06-03
CVE-2026-46252 regulator: core: fix locking in regulator_resolve_supply() error path - - 2026-06-03
CVE-2026-46251 btrfs: fix block_group_tree dirty_list corruption 8.4 High 2026-06-03
CVE-2026-46250 MIPS: Work around LLVM bug when gp is used as global register variable 7.3 High 2026-06-03
CVE-2026-46249 octeontx2-af: Fix PF driver crash with kexec kernel booting - - 2026-06-03
CVE-2026-46248 wifi: ath12k: clear stale link mapping of ahvif->links_map - - 2026-06-03
CVE-2026-46247 clk: qcom: gfx3d: add parent to parent request map - - 2026-06-03
CVE-2026-46246 power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler - - 2026-06-03
CVE-2026-46245 drm/amd/display: Fix dc_link NULL handling in HPD init - - 2026-06-03
CVE-2025-71314 drm/panthor: Recover from panthor_gpu_flush_caches() failures - - 2026-06-03
CVE-2025-71313 PCI: endpoint: Add missing NULL check for alloc_workqueue() - - 2026-06-03
CVE-2026-46244 netfilter: nft_inner: Fix IPv6 inner_thoff desync 9.1 Critical 2026-06-03
CVE-2026-46243 smb: client: reject userspace cifs.spnego descriptions 7.1 High 2026-06-01
CVE-2026-46242 eventpoll: fix ep_remove struct eventpoll / struct file UAF 7.8 High 2026-05-30
CVE-2026-46241 spi: mpc52xx: fix use-after-free on registration failure - - 2026-05-28
CVE-2026-46239 media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl - - 2026-05-28
CVE-2026-46240 media: iris: Fix use-after-free in iris_release_internal_buffers() 7.8 High 2026-05-28

All 18073 known CVE vulnerabilities affecting Linux with full Chinese analysis, references, and POCs where available.